Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/DEJJxHWjpqfTBBwmijTqhIO9cJI.roa
File: DEJJxHWjpqfTBBwmijTqhIO9cJI.roa (raw, json)
Hash identifier: tL1NwCjO1HEl4zD+BsxXexuJ3QJz/+JIQDtu9pEw6go=
Subject key identifier: 0C:42:49:C4:75:A3:A6:A7:D3:04:1C:26:8A:34:EA:84:83:BD:70:92
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0184331561F8F75A239F12AD35F371958B39
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/DEJJxHWjpqfTBBwmijTqhIO9cJI.roa
Signing time: Tue 01 Nov 2022 12:05:50 +0000
ROA not before: Tue 01 Nov 2022 12:05:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 195.180.128.0/22 maxlen: 24
194.64.89.0/24 maxlen: 24
194.163.192.0/20 maxlen: 22
194.163.96.0/20 maxlen: 24
62.138.64.0/22 maxlen: 22
195.180.224.0/22 maxlen: 22
195.180.232.0/22 maxlen: 22
195.180.228.0/22 maxlen: 22
194.163.220.0/22 maxlen: 22
195.180.196.0/22 maxlen: 22
195.180.204.0/22 maxlen: 22
195.180.200.0/22 maxlen: 22
194.64.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:15:61:f8:f7:5a:23:9f:12:ad:35:f3:71:95:8b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Nov 1 12:05:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c4249c475a3a6a7d3041c268a34ea8483bd7092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:e4:a0:22:d1:bc:86:42:07:a9:bd:80:17:
d2:3d:e2:77:94:de:c4:fc:67:96:13:27:55:8c:f4:
d5:f5:d6:f7:7a:14:97:db:c4:28:da:3c:63:b9:00:
f2:2b:fa:6d:ed:73:bc:3b:91:9c:00:e6:ab:4e:1e:
ae:b8:71:b7:4a:83:9f:2d:f6:29:ad:71:3d:f7:9f:
d8:98:13:af:65:d7:98:9c:40:37:45:5e:26:18:ca:
33:cc:0a:9b:7b:78:9e:ca:5f:26:4a:6d:f3:89:1e:
c2:78:05:88:b9:db:5a:47:4d:5d:42:1b:48:1b:23:
f8:a4:68:d7:42:9a:31:c9:44:44:07:ce:e2:8a:3e:
fd:df:ba:3e:d5:d8:a4:17:77:aa:a1:2d:bc:8e:c6:
b9:e2:d7:0e:df:30:f7:f9:a0:c8:33:6b:44:4c:d2:
27:b1:81:2e:36:2c:d8:d4:9a:dd:31:09:b1:1c:26:
bb:9f:38:d7:eb:1e:92:cd:b1:84:95:48:fb:4d:76:
c4:bb:43:e5:ba:53:d9:e7:d0:60:ae:f2:70:62:1a:
6f:6c:2f:62:67:64:fa:11:be:14:8c:49:3f:aa:14:
1b:8f:cb:e4:05:29:d0:4d:99:c3:fc:26:31:a5:30:
13:a8:0a:7c:02:04:e9:47:67:2b:ef:0f:2d:10:c9:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:42:49:C4:75:A3:A6:A7:D3:04:1C:26:8A:34:EA:84:83:BD:70:92
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/DEJJxHWjpqfTBBwmijTqhIO9cJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
194.64.89.0/24
194.64.152.0/22
194.163.96.0/20
194.163.192.0/20
194.163.220.0/22
195.180.128.0/22
195.180.196.0-195.180.207.255
195.180.224.0-195.180.235.255
Signature Algorithm: sha256WithRSAEncryption
31:a6:75:02:4b:18:e2:4a:f3:04:cf:73:1c:4d:2a:1d:cb:2a:
b0:6a:1e:50:b4:1b:2e:ac:df:ca:14:fb:35:91:e1:83:81:51:
a2:97:5b:08:f8:57:24:44:b7:e4:e5:ee:b9:2e:0d:e5:49:b1:
3c:c5:fd:8d:56:37:1f:b2:a6:31:f8:cb:f1:a8:e5:e8:31:b5:
7a:8f:90:d1:88:b2:bc:fc:91:0a:e2:fc:00:d2:27:0c:30:f9:
34:81:d5:ab:c8:af:5f:02:1a:b4:44:6b:89:4b:13:de:86:1f:
8d:73:a1:d7:77:ad:99:38:e4:ce:7d:46:16:04:5f:41:20:f7:
ac:79:48:17:2b:a4:f0:7f:53:c0:e5:f1:0f:f6:91:aa:e3:49:
69:b1:1a:b4:bd:42:39:27:d4:4a:3f:4e:ee:5c:d4:5e:9c:0e:
19:28:ed:44:a3:ce:0d:4a:e6:3e:f6:e5:9b:ea:66:6c:e3:63:
94:39:54:59:06:b8:5a:35:a0:85:f1:97:ab:7a:12:e6:35:f8:
63:5e:75:6c:2f:69:5b:bc:af:0f:51:e5:b7:e7:ab:51:98:03:
d4:70:b0:4e:85:60:3e:d9:ae:f2:9a:8d:93:2b:9f:ff:5d:4f:
f7:5d:88:0c:d8:8b:e5:84:96:23:51:6f:8a:a6:ed:bc:20:99:
3f:a5:cb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:21 2025 by rpki-client