Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/9Wp4LJ5c4ocgNuOnTxQ0NATZIIk.roa
File: 9Wp4LJ5c4ocgNuOnTxQ0NATZIIk.roa (raw, json)
Hash identifier: F5Mpmi3RXXkTdDsWz/q3IG4C5DQvyjW60X1AFH/nQgc=
Subject key identifier: F5:6A:78:2C:9E:5C:E2:87:20:36:E3:A7:4F:14:34:34:04:D9:20:89
Certificate issuer: /CN=0f47ec73bceecedd541efb73525d61232fa80219
Certificate serial: 018A226E2BA9DAE79898D4CA2E5246A5DB86
Authority key identifier: 0F:47:EC:73:BC:EE:CE:DD:54:1E:FB:73:52:5D:61:23:2F:A8:02:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fsc7zuzt1UHvtzUl1hIy-oAhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/9Wp4LJ5c4ocgNuOnTxQ0NATZIIk.roa
Signing time: Wed 23 Aug 2023 12:45:59 +0000
ROA not before: Wed 23 Aug 2023 12:45:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6799
IP address blocks: 185.44.144.0/22 maxlen: 22
178.146.0.0/16 maxlen: 16
31.217.160.0/19 maxlen: 19
178.146.0.0/15 maxlen: 15
178.147.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:6e:2b:a9:da:e7:98:98:d4:ca:2e:52:46:a5:db:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47ec73bceecedd541efb73525d61232fa80219
Validity
Not Before: Aug 23 12:45:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f56a782c9e5ce2872036e3a74f14343404d92089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:27:c2:d4:b5:90:67:d5:ba:a7:cc:1d:d8:
95:bd:48:8e:01:ae:14:a1:0b:b2:99:84:0a:4b:32:
45:be:6f:f6:d0:b2:45:5b:c8:31:b2:51:fa:3f:a9:
47:75:f7:4a:51:66:d0:68:f9:68:85:32:a1:bc:12:
b4:65:dc:fb:d1:8a:09:6d:13:91:e2:83:ab:79:6d:
8b:a1:f6:af:42:d4:2f:21:84:9a:e2:eb:0e:5d:3e:
23:6a:b4:97:bf:3b:66:3d:ff:4d:1b:ce:b4:ee:52:
e4:ab:3e:ee:4a:73:1f:df:64:ae:17:81:48:7b:bb:
3e:ba:5c:6d:8d:da:9d:d1:23:8b:4e:85:67:e7:18:
c7:02:64:03:88:93:fb:90:07:8b:03:82:63:77:23:
30:3e:47:ab:1c:4f:fd:0f:9d:14:83:a3:62:b1:10:
b1:7b:54:8f:9a:28:b9:79:28:f8:54:90:14:27:b4:
ba:17:15:60:61:32:1b:de:35:78:77:04:d5:99:d2:
4c:0e:c3:1f:26:f7:22:95:61:68:bb:bc:76:fd:5e:
31:d1:02:25:0a:80:50:8f:b9:54:31:c7:29:b3:3c:
7d:3a:0e:d3:7a:9a:66:98:a8:3b:d1:14:b5:4f:dc:
e2:0f:0c:d4:dc:62:d3:10:8c:08:46:3a:09:7a:0c:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:78:2C:9E:5C:E2:87:20:36:E3:A7:4F:14:34:34:04:D9:20:89
X509v3 Authority Key Identifier:
keyid:0F:47:EC:73:BC:EE:CE:DD:54:1E:FB:73:52:5D:61:23:2F:A8:02:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fsc7zuzt1UHvtzUl1hIy-oAhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/9Wp4LJ5c4ocgNuOnTxQ0NATZIIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/D0fsc7zuzt1UHvtzUl1hIy-oAhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.160.0/19
178.146.0.0/15
185.44.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:9a:b2:75:b9:51:20:9a:ae:e3:76:15:f0:8a:05:a3:62:eb:
19:4d:a6:0e:f9:f3:67:6f:f6:53:07:4b:fe:f1:07:67:3c:e8:
c6:9b:dd:34:22:31:39:b2:78:38:c2:4a:f4:04:37:90:86:fd:
90:a7:d8:05:6d:86:7d:b2:e7:cf:06:64:4f:15:10:c3:63:ed:
d7:fb:17:24:33:c0:aa:b2:2b:f5:33:27:a1:42:37:b7:a8:fa:
8d:2a:a1:e5:e4:db:ee:e6:72:1d:de:f1:04:81:36:e3:e3:85:
81:59:ba:36:7b:28:46:54:02:79:76:ad:4e:a7:76:7d:a6:6b:
b2:9b:b3:b7:d2:28:29:05:c1:62:95:dd:15:0f:13:99:b3:04:
31:ee:ec:0b:dc:7b:80:98:89:fa:68:2f:60:f8:c2:31:fa:08:
0e:b1:46:68:fa:b5:f9:1e:ba:e5:74:85:ef:ef:96:3c:e5:ae:
7e:05:c0:c1:3d:7a:5d:96:b7:61:e5:d1:27:58:c5:d1:a4:04:
2a:7b:36:6e:5e:70:d6:1c:65:5c:d6:8c:0a:d5:06:5b:77:d1:
29:80:08:b9:b9:39:52:81:72:10:92:1c:35:82:ab:a2:e7:27:
9a:6d:3c:aa:74:6f:b1:13:33:48:c1:3a:53:a8:ac:fd:3c:62:
87:e9:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:59:52 2025 by rpki-client