Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/pE01NFaIv8r1mk6ol5e2NycwPTg.roa
File: pE01NFaIv8r1mk6ol5e2NycwPTg.roa (raw, json)
Hash identifier: rDz32Gn3g9PMPT1uISVUhitlyN0Oj7Jr0Ha2dcdNAvM=
Subject key identifier: A4:4D:35:34:56:88:BF:CA:F5:9A:4E:A8:97:97:B6:37:27:30:3D:38
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018BC7DCC9E4A51E87D663CB4091F795BA6C
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/pE01NFaIv8r1mk6ol5e2NycwPTg.roa
Signing time: Mon 13 Nov 2023 08:46:57 +0000
ROA not before: Mon 13 Nov 2023 08:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 95.178.8.0/21 maxlen: 24
116.50.16.0/21 maxlen: 24
121.127.56.0/21 maxlen: 24
66.9.96.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:dc:c9:e4:a5:1e:87:d6:63:cb:40:91:f7:95:ba:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 13 08:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a44d35345688bfcaf59a4ea89797b63727303d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:79:3c:bf:59:f0:c1:83:e6:6c:8c:74:bd:
fa:30:ec:19:1c:1e:da:f2:3a:8b:11:30:bd:d5:e6:
21:d4:de:c7:b0:99:dc:08:26:f5:85:2b:6b:a1:00:
86:5a:8c:e2:63:aa:fc:55:6f:97:6b:a3:e7:c7:ef:
75:d5:a5:c1:5d:96:51:de:42:ff:87:36:49:fe:17:
f1:70:2f:8e:de:66:d6:b8:20:d2:fc:ca:d2:b6:8a:
7f:16:d5:ad:c1:86:c6:d2:57:4a:99:8d:f9:db:c4:
cc:b7:a4:5f:85:b4:95:75:83:b2:84:8a:c7:0a:c4:
46:9c:c8:ce:61:45:ac:39:17:ec:b8:3f:f1:3f:24:
f5:55:a0:c2:3a:f7:b0:91:7f:dd:57:fd:24:2d:77:
c4:23:d6:3c:8c:db:71:c4:c1:80:58:f5:f3:69:42:
63:40:df:37:f1:b1:6e:5b:fd:b0:1b:9e:fa:bf:24:
e2:7f:e5:fc:5d:ad:21:69:b5:09:da:b0:76:b1:35:
14:a8:02:f2:d0:79:ad:cb:f2:f1:51:01:5c:f7:ee:
12:a2:c6:d9:fb:1e:f2:11:ba:88:6f:68:ed:88:c3:
93:cd:f0:5c:f3:11:c4:3b:64:fd:af:05:77:22:6e:
73:9e:39:a6:85:4a:38:59:60:fc:8f:c6:b0:92:a9:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4D:35:34:56:88:BF:CA:F5:9A:4E:A8:97:97:B6:37:27:30:3D:38
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/pE01NFaIv8r1mk6ol5e2NycwPTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.9.96.0/20
95.178.8.0/21
116.50.16.0/21
121.127.56.0/21
198.145.112.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:05:65:6b:0a:dd:fb:77:42:a7:23:1e:17:6d:fa:36:28:da:
53:61:61:66:e8:22:95:dc:7e:14:8b:32:43:ec:ea:4b:1a:24:
d5:8b:c4:ff:5a:db:e3:2a:22:6e:3e:aa:27:19:03:31:c1:04:
e1:bb:a9:68:71:56:eb:b1:ad:0d:29:de:e9:70:32:45:dc:9f:
47:0c:eb:62:6a:9a:39:cc:1a:47:ff:a1:78:90:9b:a2:8d:93:
11:2d:9f:20:17:d6:71:1e:28:55:a7:c5:9d:23:87:8f:5e:5e:
e2:e7:54:15:4f:67:cc:25:02:e9:78:45:7d:03:90:3e:0b:63:
07:18:9d:ed:29:ac:fe:f4:2d:1a:33:0a:34:bd:36:58:9a:d1:
d6:69:d8:db:7e:7f:af:9e:c7:13:ae:06:bc:f2:27:9b:02:e0:
00:c8:2e:14:75:a4:59:53:ab:11:36:6a:6b:3d:c4:8b:22:a5:
54:8a:85:39:11:26:8e:b1:62:08:e7:50:d4:26:d4:6c:c9:d8:
a1:1b:b6:63:4b:37:c3:ff:19:3c:a4:9e:4f:4f:92:be:f4:41:
ce:9c:6b:67:41:11:e9:dc:be:5d:9d:40:f4:d6:eb:3d:57:af:
65:71:c3:65:f9:cb:14:13:c7:cb:12:bd:dc:f8:a2:3d:9e:cc:
ad:7e:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:18 2025 by rpki-client