Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/cJaC0jRVzxbEkd04iwA6DkqNuE8.roa
File: cJaC0jRVzxbEkd04iwA6DkqNuE8.roa (raw, json)
Hash identifier: xf9o4tw4jOYO/U98K9X51C72Uc52LLsXaSVRA6XOJYI=
Subject key identifier: 70:96:82:D2:34:55:CF:16:C4:91:DD:38:8B:00:3A:0E:4A:8D:B8:4F
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018B8F86C53C5226EA92F923431F448C67DE
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/cJaC0jRVzxbEkd04iwA6DkqNuE8.roa
Signing time: Thu 02 Nov 2023 10:14:16 +0000
ROA not before: Thu 02 Nov 2023 10:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.233.31.0/24 maxlen: 24
195.180.128.0/22 maxlen: 24
194.163.68.0/24 maxlen: 24
194.233.151.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.149.0/24 maxlen: 24
194.64.89.0/24 maxlen: 24
195.180.152.0/22 maxlen: 24
195.180.157.0/24 maxlen: 24
194.163.92.0/24 maxlen: 24
195.252.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:86:c5:3c:52:26:ea:92:f9:23:43:1f:44:8c:67:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Nov 2 10:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=709682d23455cf16c491dd388b003a0e4a8db84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:be:45:58:78:04:d3:f7:25:f8:82:f8:72:
22:aa:ae:92:25:e1:34:94:4f:68:93:13:94:10:3b:
7a:92:b1:a8:53:31:85:1b:0c:61:ac:eb:10:df:4b:
62:f7:d1:29:4c:24:8d:a1:99:de:e1:4a:f7:9d:26:
d8:12:0d:d8:76:b3:65:11:2c:11:c6:99:80:13:40:
5d:1b:5d:55:e8:26:c1:82:cc:ae:f3:82:66:e0:33:
62:07:76:52:63:98:2b:02:1a:aa:75:38:aa:d3:97:
21:93:b5:f5:fa:9b:72:9d:fc:eb:8f:a1:a6:70:9a:
3f:e8:9a:9e:be:2d:16:01:92:90:01:90:36:41:47:
00:a5:c2:97:8c:a6:fd:7e:52:6c:d2:ae:1e:b4:9f:
78:8b:b5:9f:e7:f4:d9:bf:b3:ae:1b:b5:11:8c:fa:
be:c7:dd:6a:f3:a6:c5:1e:a1:47:13:1a:84:2d:5e:
7d:40:16:2a:4d:c8:49:5c:9e:28:6d:03:d8:74:76:
64:d4:74:21:7e:5b:0a:b3:90:b8:27:44:04:0b:b2:
6f:e9:3b:50:fc:4e:3b:88:70:25:b7:34:0c:ad:ec:
ad:d5:ac:26:b4:0a:23:8b:e6:47:a1:b7:47:e5:3c:
1a:c0:bf:33:cd:07:b6:e4:81:3e:76:ed:5a:66:eb:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:82:D2:34:55:CF:16:C4:91:DD:38:8B:00:3A:0E:4A:8D:B8:4F
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/cJaC0jRVzxbEkd04iwA6DkqNuE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.163.68.0/24
194.163.92.0/24
194.233.31.0/24
194.233.148.0/23
194.233.151.0/24
195.180.128.0/22
195.180.152.0/22
195.180.157.0/24
195.252.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d7:40:43:f0:7d:73:8d:26:ca:02:93:c5:87:d0:2b:66:ca:
41:23:82:6a:5f:f3:9a:a4:08:b0:e9:e2:8b:33:15:dd:21:b2:
c5:62:ff:42:35:f1:eb:6a:91:c4:a0:47:e0:e9:15:89:b4:0e:
88:2a:e4:dd:88:60:d8:f4:7b:ca:5c:72:af:ed:12:72:3a:61:
72:bb:e2:a7:34:b2:83:a9:37:9c:6b:b1:b3:1b:1b:48:a6:ca:
e8:da:80:ee:c9:e7:ef:a8:3e:34:76:de:ef:4e:01:60:b9:50:
9b:b5:ee:99:1b:dc:1f:2b:12:50:14:c5:4c:10:91:f0:bd:dc:
a0:39:e7:c6:66:57:b4:c4:be:a6:9a:73:ef:b1:f9:59:25:84:
02:5e:44:89:c4:2b:ab:51:27:ed:87:18:84:da:16:52:ec:4a:
5f:b1:11:a8:64:74:4a:d6:0c:b5:2e:f6:f2:d8:b6:63:c6:9f:
ee:75:85:47:47:95:a2:66:31:1c:06:fc:63:44:bf:c1:35:cc:
cb:22:dd:74:df:d2:de:7b:3d:c8:3d:5c:e5:e6:27:76:74:cf:
e9:35:cc:09:93:90:e8:15:e8:d7:2c:ca:f9:4e:dd:41:be:1e:
0e:23:a0:de:46:11:67:84:3a:7e:7f:6e:df:27:9e:53:8c:62:
0f:28:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:47 2025 by rpki-client