Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dc14v9JWfzE0MzAzW490Q5kchxw.roa
File: Dc14v9JWfzE0MzAzW490Q5kchxw.roa (raw, json)
Hash identifier: zw4f+lkZd4I+pk5bmnZNYWQrrW352GH72X19dOMX1dA=
Subject key identifier: 0D:CD:78:BF:D2:56:7F:31:34:33:30:33:5B:8F:74:43:99:1C:87:1C
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C00D6E5
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dc14v9JWfzE0MzAzW490Q5kchxw.roa
Signing time: Mon 31 Jan 2022 09:43:19 +0000
ROA not before: Mon 31 Jan 2022 09:43:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 195.180.132.0/22 maxlen: 22
195.180.140.0/22 maxlen: 22
195.180.144.0/22 maxlen: 22
194.64.88.0/21 maxlen: 24
212.224.0.0/22 maxlen: 24
195.252.160.0/22 maxlen: 24
194.233.16.0/22 maxlen: 24
194.233.20.0/22 maxlen: 22
194.163.68.0/22 maxlen: 22
194.163.72.0/22 maxlen: 22
194.163.76.0/22 maxlen: 22
195.180.160.0/22 maxlen: 24
194.64.148.0/22 maxlen: 22
195.179.32.0/21 maxlen: 24
194.64.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201381605 (0xc00d6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 31 09:43:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dcd78bfd2567f31343330335b8f7443991c871c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:41:20:a2:52:78:b3:66:4a:d9:ec:b6:17:
df:bb:fe:47:e1:57:b7:5d:18:53:d4:02:0d:6f:ec:
e9:bb:c9:1c:cc:34:08:69:4b:62:3b:a9:17:5c:c3:
68:44:b2:5d:ef:6f:64:a1:93:be:9a:33:99:e2:31:
f8:e8:d5:96:4f:cd:35:84:60:c7:ae:80:c0:ad:8a:
09:47:f2:84:ae:d2:7e:97:64:f5:5c:f0:19:5f:1b:
5b:b7:c5:92:25:ea:c6:b8:06:c0:df:ec:9c:53:82:
ad:f0:23:eb:3a:52:78:85:85:ab:6a:66:8c:5a:0c:
d6:7a:1b:4e:f8:e1:df:9f:49:6f:69:1e:d6:5c:4e:
4f:55:6e:6e:56:39:f2:06:45:ab:c3:c3:6c:d5:1a:
6c:07:48:0c:e4:fb:60:1f:33:5f:08:21:07:ca:db:
29:f3:22:48:74:c8:e2:6f:1a:f7:52:de:31:5c:18:
2d:30:29:9b:df:29:21:89:9a:18:e9:f7:a9:6b:24:
ab:27:d8:81:37:2d:38:4c:fc:e0:b6:ab:2a:9f:a1:
60:0f:18:9e:26:15:f6:8d:b6:60:0d:ad:ec:e2:9e:
45:61:7c:b8:eb:03:0d:cf:f2:b0:2f:c6:f3:5a:d4:
e9:e1:28:c7:10:50:e7:18:66:7b:20:35:20:84:49:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CD:78:BF:D2:56:7F:31:34:33:30:33:5B:8F:74:43:99:1C:87:1C
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dc14v9JWfzE0MzAzW490Q5kchxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.88.0/21
194.64.148.0/22
194.64.156.0/22
194.163.68.0-194.163.79.255
194.233.16.0/21
195.179.32.0/21
195.180.132.0/22
195.180.140.0-195.180.147.255
195.180.160.0/22
195.252.160.0/22
212.224.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:2d:22:9c:29:c9:36:73:1a:e1:14:94:4b:49:90:d7:87:d8:
13:0a:4a:49:da:a0:cf:b8:75:fd:43:d8:0c:59:74:68:68:5e:
7f:d0:f0:bc:ab:27:14:f6:a0:5b:83:49:5c:d4:2c:d2:92:4c:
c0:2f:0c:38:ab:3d:dd:7f:58:2f:04:75:9b:c9:d3:35:78:57:
a0:9f:41:5b:e3:5a:ca:3a:a0:5b:84:94:66:4a:99:76:12:d8:
f4:d7:28:e5:62:6b:57:c3:e1:ce:23:ea:08:03:6b:21:05:f9:
81:59:0b:7a:ff:90:df:8a:ec:e3:b2:66:9e:64:e1:5b:b7:f4:
f8:f8:6b:94:06:18:9c:f4:61:ae:77:7a:5c:d5:73:76:11:7b:
87:a2:da:ae:41:7b:42:00:40:49:63:cc:d8:5f:d0:73:00:5e:
1c:52:82:71:1a:69:58:3c:af:a0:22:f2:28:a2:1e:e6:fa:7d:
21:fa:e5:8a:bd:79:42:77:1a:bc:58:64:8b:69:ec:52:94:2f:
d7:f8:d4:d0:a3:2c:0d:f1:15:41:83:0b:0b:ec:9d:41:48:87:
08:9e:b9:a5:66:74:14:b2:5c:9e:7f:55:f7:ca:97:40:6f:c1:
13:d9:f7:35:cf:6e:0b:0b:35:85:f6:d0:47:a7:03:d6:20:4a:
b5:a7:17:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:06 2025 by rpki-client