Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/194fHBl_KS3T6HcRH-W8PZ8ospI.roa
File: 194fHBl_KS3T6HcRH-W8PZ8ospI.roa (raw, json)
Hash identifier: twZwmJJbx2D9RIGiAbxfopP0Mq/zUznYuWXUkzJ+F9E=
Subject key identifier: D7:DE:1F:1C:19:7F:29:2D:D3:E8:77:11:1F:E5:BC:3D:9F:28:B2:92
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 0193F8E8786B6677AFC32F525E4B3734BA2D
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/194fHBl_KS3T6HcRH-W8PZ8ospI.roa
Signing time: Tue 24 Dec 2024 13:43:24 +0000
ROA not before: Tue 24 Dec 2024 13:43:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211057
IP address blocks: 46.253.88.0/23 maxlen: 23
46.253.88.0/24 maxlen: 24
46.253.91.0/24 maxlen: 24
46.253.92.0/24 maxlen: 24
185.21.120.0/24 maxlen: 24
185.21.121.0/24 maxlen: 24
185.21.122.0/24 maxlen: 24
185.21.123.0/24 maxlen: 24
185.71.140.0/22 maxlen: 22
185.71.140.0/23 maxlen: 23
185.71.140.0/24 maxlen: 24
185.71.140.0/25 maxlen: 25
185.71.140.128/25 maxlen: 25
185.71.141.0/24 maxlen: 24
185.71.141.0/25 maxlen: 25
185.71.141.128/25 maxlen: 25
185.71.142.0/24 maxlen: 24
185.71.142.0/25 maxlen: 25
185.71.142.128/25 maxlen: 25
185.71.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:e8:78:6b:66:77:af:c3:2f:52:5e:4b:37:34:ba:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Dec 24 13:43:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7de1f1c197f292dd3e877111fe5bc3d9f28b292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:a8:25:34:3c:3d:b3:d9:8b:f3:07:29:0b:
cb:a7:2f:bd:8b:e4:73:e6:6b:52:95:db:26:9a:3b:
e2:34:b9:aa:3f:90:7a:9f:6a:8d:7f:6e:b8:e7:63:
3c:1f:4e:65:3f:52:e0:ef:fd:ef:af:e7:2b:7e:02:
87:d8:c9:26:f9:fd:79:16:00:85:73:a4:a5:06:65:
07:63:13:54:42:1f:31:49:71:e8:cb:45:28:97:82:
05:15:9c:05:d9:8d:45:70:4d:f1:76:9b:75:17:43:
c7:6a:37:61:e4:7b:e4:f4:15:cf:6e:54:c9:a9:24:
a8:f9:40:83:f4:c1:75:98:9f:aa:0a:28:85:16:ba:
ef:63:30:7d:e0:6f:fa:2b:c9:65:59:98:81:09:39:
f6:de:e2:da:47:10:4d:2e:6f:2c:e1:e6:00:6d:f4:
7a:b1:4b:5f:af:40:95:da:96:da:63:8a:f6:58:3e:
e1:83:72:f2:d5:61:1c:90:6e:51:13:e5:b5:58:c7:
96:27:24:ed:25:f0:f5:95:1d:b6:3a:cd:c5:f3:b5:
ee:47:75:dc:50:a9:7b:79:1b:21:17:51:87:3f:bd:
dd:a6:4f:d1:59:ec:2d:b5:ca:d2:a1:06:a1:3e:06:
25:b3:d8:fb:04:4c:c7:66:e5:76:ce:d8:d0:a9:97:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DE:1F:1C:19:7F:29:2D:D3:E8:77:11:1F:E5:BC:3D:9F:28:B2:92
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/194fHBl_KS3T6HcRH-W8PZ8ospI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.88.0/23
46.253.91.0-46.253.92.255
185.21.120.0/22
185.71.140.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ee:b0:f7:6d:08:7b:a9:24:fe:f9:2c:67:ea:a3:8a:b6:18:
15:26:2b:01:3e:f9:45:5e:57:f8:e1:c2:04:f5:44:1c:25:4d:
cc:d2:ef:80:9a:79:ce:00:86:e3:41:fa:69:14:6a:22:bc:ca:
1e:b3:02:49:2d:bd:96:5c:4a:75:b8:d5:37:e4:b1:92:e9:36:
8c:94:fa:93:59:be:1c:fb:0a:de:ba:1f:27:98:2b:bb:fb:89:
43:0f:07:6d:66:4d:a0:04:fd:45:fc:6b:0a:8b:17:b3:be:72:
7c:a9:24:84:1a:bd:c2:80:8e:27:91:c5:78:07:54:b2:09:8f:
75:f2:bb:9f:f4:65:07:4a:e5:69:b6:98:1c:e3:6c:08:50:c3:
10:ce:2e:2c:ce:02:30:f4:31:22:31:05:ea:d3:96:db:d5:08:
7e:1b:b6:34:24:48:78:3a:96:a5:13:9a:9c:15:5e:96:8c:50:
e7:56:cd:68:d1:0a:24:dd:3d:4d:72:76:eb:49:f9:7b:05:cc:
b0:b8:52:12:19:13:0d:39:64:6f:0f:71:f4:e9:a9:43:89:df:
41:28:16:85:67:61:4d:65:9f:1c:5c:1d:29:dd:b4:2d:d9:76:
1d:8b:29:e4:2e:37:82:8e:42:3d:cc:31:74:9b:1b:f1:5a:7a:
cd:cf:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:55 2025 by rpki-client