Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/y3HLx3QICZETtVl3599h5gtgRKw.roa
File: y3HLx3QICZETtVl3599h5gtgRKw.roa (raw, json)
Hash identifier: q1Yy4s3KtHtsvmn72Orw+LTGkj6Q+hWkxjuezA+N230=
Subject key identifier: CB:71:CB:C7:74:08:09:91:13:B5:59:77:E7:DF:61:E6:0B:60:44:AC
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01906D86F183749E4B15CE59036682115603
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/y3HLx3QICZETtVl3599h5gtgRKw.roa
Signing time: Mon 01 Jul 2024 09:01:18 +0000
ROA not before: Mon 01 Jul 2024 09:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 66.117.8.0/22 maxlen: 24
74.124.204.0/22 maxlen: 24
77.223.192.0/21 maxlen: 21
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
94.101.103.0/24 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
194.149.76.0/22 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:86:f1:83:74:9e:4b:15:ce:59:03:66:82:11:56:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jul 1 09:01:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb71cbc77408099113b55977e7df61e60b6044ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:79:3f:02:2f:b1:31:81:3c:5c:c7:71:eb:
d7:d4:52:85:46:91:21:7b:b5:81:03:84:37:bd:76:
95:69:ae:0f:99:f9:70:56:81:8d:35:fc:be:6a:3e:
6e:8d:56:a4:fa:cc:21:15:b9:0e:6e:24:a2:3f:03:
80:1c:de:49:7c:f7:f4:e7:a5:89:d8:55:e5:39:6f:
5f:57:38:ae:a8:c3:53:23:c0:0e:1c:ac:07:18:da:
5e:37:28:3d:21:e2:36:e1:58:1d:69:89:a4:59:57:
d6:af:68:05:11:d7:40:e3:3d:1b:af:05:6b:5c:2c:
35:8b:c2:8c:fc:cd:b8:c5:11:ab:7a:f8:1d:e4:47:
34:e5:59:17:a1:25:d1:d5:5d:d8:01:d7:6b:df:ab:
a3:7b:b9:5a:87:5d:d0:67:07:31:8f:e6:0b:4a:4f:
8b:40:3c:2d:cd:97:b6:e4:d0:48:11:40:90:8d:74:
8f:be:39:95:02:21:f0:7a:47:b4:71:b7:3f:8b:cd:
05:1f:82:2c:61:7c:3b:c7:39:f0:6a:3a:22:72:fd:
05:29:d7:48:d9:d3:ce:24:83:c5:7c:96:fc:d1:d1:
e2:af:f3:51:69:c5:cf:2c:07:ac:b4:20:07:6b:a5:
77:af:b2:f5:c9:00:c3:c5:1d:16:f2:f1:83:9d:61:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:CB:C7:74:08:09:91:13:B5:59:77:E7:DF:61:E6:0B:60:44:AC
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/y3HLx3QICZETtVl3599h5gtgRKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.117.8.0/22
74.124.204.0/22
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
94.101.103.0/24
176.222.48.0/22
178.216.184.0/21
194.149.76.0/22
198.14.16.0/20
198.145.112.0/22
205.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
37:29:61:67:56:88:19:27:5f:f7:c7:84:6e:49:63:c9:63:ec:
6e:84:fc:7f:3e:8e:e6:36:86:9c:87:6b:bf:c4:fe:4d:fb:6e:
e4:f3:3c:db:8b:dc:da:40:b3:69:5b:ef:bb:da:ae:62:af:33:
45:fa:bf:5c:27:5f:3e:78:55:b3:28:0c:ea:28:10:9d:8c:93:
70:7e:11:75:4c:dd:f1:7f:b6:85:5c:d9:13:42:e1:01:a5:11:
ec:44:88:ee:90:a9:b8:26:f3:6b:fa:fb:e1:c2:77:ea:0b:fe:
48:83:94:4b:bb:f3:12:72:79:21:1f:38:00:83:11:ad:ab:16:
7c:3c:20:ba:56:a6:38:6c:78:92:5d:ee:97:9c:fc:eb:df:2b:
85:c9:ec:71:79:1b:e9:74:d0:02:02:56:9d:e4:e5:5c:a0:49:
84:c4:5a:af:32:18:62:4b:9b:78:e7:67:ef:97:2b:f7:a9:19:
80:b2:28:15:aa:81:68:02:e3:01:bd:fe:e1:e8:5f:37:c1:1a:
6f:8c:d4:c5:83:c0:f4:48:5d:b5:2e:ff:13:e2:3b:e8:74:9e:
c7:08:0c:27:a6:3f:54:6f:1d:0a:24:41:06:d6:74:e4:d3:f3:
86:55:02:91:aa:4c:9d:2c:a0:d9:fd:b0:24:96:69:2f:a7:55:
08:fb:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:56 2025 by rpki-client