Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/acs_jjMoOwgvlghd5zaaLbF_7V0.roa
File: acs_jjMoOwgvlghd5zaaLbF_7V0.roa (raw, json)
Hash identifier: nIzvJqt1eEVurFLX4nh6Jclr02LmT0fMQhk57TKueNY=
Subject key identifier: 69:CB:3F:8E:33:28:3B:08:2F:96:08:5D:E7:36:9A:2D:B1:7F:ED:5D
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018A2B8128E87907529DBB9EBED640EEF8FE
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/acs_jjMoOwgvlghd5zaaLbF_7V0.roa
Signing time: Fri 25 Aug 2023 07:03:19 +0000
ROA not before: Fri 25 Aug 2023 07:03:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.180.128.0/22 maxlen: 24
194.163.68.0/24 maxlen: 24
194.233.151.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.149.0/24 maxlen: 24
194.64.89.0/24 maxlen: 24
195.180.157.0/24 maxlen: 24
194.163.92.0/24 maxlen: 24
195.252.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:81:28:e8:79:07:52:9d:bb:9e:be:d6:40:ee:f8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 25 07:03:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69cb3f8e33283b082f96085de7369a2db17fed5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:8d:5a:85:f6:5e:97:f6:40:44:00:54:4c:
e0:6d:f4:ba:0c:18:42:01:14:95:7d:bd:2d:36:03:
ce:22:64:f9:45:90:44:72:60:3b:f5:15:e7:ce:15:
05:e9:db:25:1d:85:d0:55:fd:54:07:4b:3c:e8:01:
5a:4e:11:15:82:d5:13:4f:95:37:12:b9:71:92:0b:
d6:b1:9d:32:0f:8e:af:9d:4f:bf:20:4d:e7:69:69:
27:29:2d:e3:c9:1b:92:95:0a:fb:7e:6b:18:59:cb:
bc:77:01:37:99:aa:ba:f2:d6:c6:6a:05:18:1e:19:
37:10:65:e6:7a:dc:be:fc:eb:ac:7e:d4:af:da:80:
35:2b:1d:57:94:dc:c4:c4:fd:b7:95:86:2c:4a:65:
24:64:40:1f:7a:3a:85:4f:df:4e:58:37:7a:09:4c:
d4:64:d0:2f:72:94:6d:6a:bf:33:11:c4:b6:38:c1:
5b:f1:b5:72:5f:43:fc:e6:06:ca:e6:25:e7:c4:a3:
40:68:d1:9e:96:b0:b2:f1:18:d3:bf:e1:39:b7:95:
7c:43:ca:d4:c1:35:71:6b:57:7b:a3:f2:90:45:40:
5e:8d:a1:d4:d9:7b:a6:78:ef:a4:a5:fd:cd:fe:b2:
56:c8:28:10:5a:1b:11:d8:33:55:25:82:b6:ad:13:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CB:3F:8E:33:28:3B:08:2F:96:08:5D:E7:36:9A:2D:B1:7F:ED:5D
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/acs_jjMoOwgvlghd5zaaLbF_7V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.163.68.0/24
194.163.92.0/24
194.233.148.0/23
194.233.151.0/24
195.180.128.0/22
195.180.157.0/24
195.252.175.0/24
Signature Algorithm: sha256WithRSAEncryption
06:08:4c:e0:20:2f:19:3b:78:19:4a:a8:7e:7f:61:d4:57:76:
d4:bf:66:83:5b:0b:b3:cd:8e:c6:60:eb:5f:12:ab:d5:e5:5d:
07:32:a0:c6:bf:20:3b:5a:f3:4a:29:20:3c:a2:f8:54:cf:03:
27:88:ca:05:0a:e0:57:50:f8:30:60:3c:d0:1a:1a:65:35:3c:
30:ee:86:88:af:85:1d:69:e5:7c:72:88:01:5d:04:bb:e2:d5:
5e:40:35:44:9c:65:3c:fd:42:2f:bf:6a:84:a9:6f:48:5a:3e:
d2:3d:b1:95:5a:04:fb:9e:17:20:07:38:59:69:73:aa:8f:c7:
29:6b:ba:d0:c9:d3:6f:5a:e5:2d:64:29:d9:55:13:62:47:3c:
14:0f:09:2c:a3:49:f7:6f:91:26:d1:ff:39:6d:ab:03:07:cd:
15:e1:71:c9:c5:91:89:9e:3b:71:39:49:23:2e:cf:5e:50:af:
42:af:34:dd:3d:d2:34:6b:e5:5b:ab:70:fe:f2:e2:59:5f:ec:
08:57:03:ab:c1:18:19:c6:43:bc:9c:1e:24:78:25:bd:32:ab:
6e:63:2a:bd:25:41:61:80:a4:78:3f:1d:b5:38:8a:e5:db:77:
68:e4:74:8c:4d:ab:ba:c8:20:04:7b:f8:41:17:ec:93:e6:e1:
fe:d7:ee:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:44 2025 by rpki-client