Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/aNI3pH23zFPRLU6_kxbps3VsCvs.roa
File: aNI3pH23zFPRLU6_kxbps3VsCvs.roa (raw, json)
Hash identifier: Da8U2yC0F0LfQ+1Hbb78AOeNOOhQdQ6RI3Pw+EHCdjY=
Subject key identifier: 68:D2:37:A4:7D:B7:CC:53:D1:2D:4E:BF:93:16:E9:B3:75:6C:0A:FB
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01912CBD414AA08809F2F22F5320B1569BB4
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/aNI3pH23zFPRLU6_kxbps3VsCvs.roa
Signing time: Wed 07 Aug 2024 12:08:06 +0000
ROA not before: Wed 07 Aug 2024 12:08:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.64.0/19 maxlen: 19
85.234.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:bd:41:4a:a0:88:09:f2:f2:2f:53:20:b1:56:9b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 7 12:08:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68d237a47db7cc53d12d4ebf9316e9b3756c0afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:97:82:6c:00:c3:78:a5:22:9b:97:a4:09:4b:
90:22:b4:ab:4e:ed:8c:a5:d5:f9:e1:bb:6d:87:f9:
93:28:db:ff:d1:79:8b:64:04:41:cb:65:e4:72:d3:
4b:af:7d:5b:11:82:ee:89:67:cf:ad:58:4c:d7:ca:
ac:06:47:18:67:9e:d1:aa:b0:61:fc:5f:a7:8a:98:
6f:43:70:78:96:af:72:9a:6d:eb:7d:76:76:8e:38:
0c:7e:ac:7b:05:05:a4:c8:88:98:2e:71:5d:60:f2:
ad:1c:c9:a9:c1:1a:dd:8d:83:9d:ce:30:a0:69:45:
15:8b:6e:b2:14:89:e4:b4:96:ee:03:bc:7d:59:29:
3b:40:16:ce:e9:2a:c1:a4:21:10:e3:18:77:ae:67:
fc:0a:58:b7:9f:6b:5a:73:1a:6a:54:f4:98:39:55:
b9:3e:74:87:5a:31:3c:51:67:da:b8:ea:54:19:38:
89:f1:e3:09:62:ed:ea:07:26:0d:a6:9b:00:fa:4b:
a6:2b:0e:59:cb:05:e0:36:e2:84:2b:1a:4a:52:4a:
79:7f:8b:74:d2:fb:08:a1:88:04:1c:ed:5f:c5:1e:
56:3d:96:ac:cf:4d:24:37:2a:c7:ce:b5:3e:89:74:
83:2f:a1:39:c2:f0:96:63:54:57:e3:28:8f:96:c4:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D2:37:A4:7D:B7:CC:53:D1:2D:4E:BF:93:16:E9:B3:75:6C:0A:FB
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/aNI3pH23zFPRLU6_kxbps3VsCvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.64.0/19
85.234.160.0/19
Signature Algorithm: sha256WithRSAEncryption
38:71:66:0f:18:4c:91:1c:fd:3e:85:1f:ef:45:b8:b2:1b:46:
ae:98:10:ea:4b:83:25:b6:13:bb:61:b9:1f:43:4c:19:ef:2f:
1e:58:c6:fd:41:3c:14:4e:08:32:9b:47:c9:df:33:5c:79:10:
37:c8:10:71:cd:74:e1:86:6f:ac:ee:1a:66:37:59:26:fa:f5:
1f:b9:2d:37:82:eb:f1:6b:9f:57:07:16:f2:18:da:9c:01:cc:
fb:fe:e5:3a:7f:5f:77:5b:22:fd:4e:23:49:2e:ea:81:c7:6f:
85:63:6c:df:9d:7a:52:2b:ab:2b:6e:8f:d3:19:d3:93:2d:66:
65:80:94:10:b7:80:d7:d3:47:52:74:d7:54:d9:90:5c:5d:5f:
9b:61:42:46:26:77:f6:d4:8b:83:46:fe:21:a7:06:09:d3:d6:
5a:5b:12:ab:6d:df:3c:a5:4b:5f:e5:9b:0d:63:91:d6:0f:33:
d1:25:a4:67:d6:59:9b:64:6c:b6:f0:25:22:14:a6:b0:be:f5:
10:1e:da:2b:80:55:0e:43:d1:bb:c0:67:af:b6:d2:ba:c7:0b:
42:e4:68:a9:d3:fd:79:01:1f:cb:30:16:e7:84:99:14:6b:23:
63:98:54:1e:1d:37:ec:10:e2:28:0b:2a:e4:1b:e2:2c:87:d7:
ae:6f:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:38 2025 by rpki-client