Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RI-IB9b6hGrOxtWWJ3mG-S41IvY.roa
File: RI-IB9b6hGrOxtWWJ3mG-S41IvY.roa (raw, json)
Hash identifier: KMH2f3R1hjZkWnYy4QXrtMOQO3FMjCtU0iGsbpsIUN8=
Subject key identifier: 44:8F:88:07:D6:FA:84:6A:CE:C6:D5:96:27:79:86:F9:2E:35:22:F6
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018C5A3F4A2ED9BF7494FD9283C53D3756B3
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RI-IB9b6hGrOxtWWJ3mG-S41IvY.roa
Signing time: Mon 11 Dec 2023 18:59:06 +0000
ROA not before: Mon 11 Dec 2023 18:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 195.180.224.0/22 maxlen: 22
195.180.228.0/22 maxlen: 22
194.163.192.0/20 maxlen: 22
195.180.196.0/22 maxlen: 22
62.138.64.0/22 maxlen: 22
194.64.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5a:3f:4a:2e:d9:bf:74:94:fd:92:83:c5:3d:37:56:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Dec 11 18:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=448f8807d6fa846acec6d596277986f92e3522f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5e:c0:ff:d5:78:f8:db:36:e2:65:8d:c6:37:
ab:68:af:e9:36:d8:10:69:41:61:78:86:4a:b3:50:
70:76:42:d7:ac:07:f0:26:4b:64:6d:4d:aa:3b:6a:
b5:7f:0d:8a:d8:30:4e:88:85:46:8e:bb:8d:74:f8:
ea:e4:dc:a3:3f:d4:c1:3f:f2:34:c9:e7:c3:71:d5:
31:10:e6:b1:e9:00:fa:d3:4d:49:52:e0:f1:9e:46:
eb:83:98:b3:28:e4:8d:63:c9:ef:61:6c:97:e7:6f:
be:76:a0:8b:13:4a:86:44:44:b0:a7:42:02:66:3e:
df:0b:40:b2:da:5c:5f:e2:13:c3:e5:7b:f0:57:2b:
f6:49:17:cf:b3:83:88:6b:f4:99:c0:a3:17:ae:9c:
4d:8b:0e:de:03:03:45:3c:10:f9:3b:28:79:bc:92:
50:e0:b1:83:7e:4f:e4:37:66:60:b7:c9:8f:30:60:
41:65:68:1f:1c:93:ac:35:d4:a3:86:37:ec:a8:ab:
3e:b9:df:57:df:09:f4:11:95:26:6f:d7:88:6a:a1:
9e:8b:bc:f3:e8:3a:47:4f:f9:fe:b8:16:11:e6:ea:
94:4e:53:4f:7f:86:aa:02:4b:e8:61:a9:69:71:56:
33:22:be:9c:f3:6b:17:49:e6:16:5c:84:b3:3a:28:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8F:88:07:D6:FA:84:6A:CE:C6:D5:96:27:79:86:F9:2E:35:22:F6
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RI-IB9b6hGrOxtWWJ3mG-S41IvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
194.64.152.0/22
194.163.192.0/20
195.180.196.0/22
195.180.224.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:9a:a6:ff:30:10:5d:3f:44:e5:0f:3a:ea:66:18:d2:c2:76:
60:07:c3:90:cf:42:0a:c7:55:74:9d:5f:ad:e2:aa:dd:6a:ff:
c0:4c:05:2b:ba:17:58:a2:79:f8:eb:75:1b:c0:0e:78:cf:a8:
3d:c5:b9:86:3d:f9:f8:26:f2:64:cf:19:bb:86:46:bd:67:7e:
02:f4:ab:c2:d8:89:00:7a:23:0f:1d:e1:0e:d8:c7:8a:09:dd:
47:df:f2:c1:64:4d:5a:de:97:46:40:e3:ea:c3:1f:49:53:3f:
e4:91:8c:4d:87:ad:ef:af:7d:be:cc:8d:54:07:a6:25:83:d1:
70:ed:7c:93:a3:c7:4e:05:b5:5f:f7:35:fb:d9:fb:8c:c3:f4:
61:aa:5b:07:4f:d8:1f:f0:97:f2:39:5a:62:2c:da:82:26:07:
02:64:42:db:d1:54:2c:32:40:67:0a:bb:29:99:5f:1f:8d:62:
2b:14:df:89:a5:0e:26:df:83:01:c9:a3:97:36:88:77:75:83:
3f:9c:58:21:79:d6:27:02:ff:4b:f4:46:d4:2a:2f:a9:db:5f:
49:43:49:be:93:90:4f:2a:34:58:13:bb:48:4c:9a:a0:13:18:
03:a2:36:8d:dc:fb:40:78:f4:01:37:dd:78:3b:33:51:e0:ca:
82:5d:96:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:34 2025 by rpki-client