Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/ydFTglDgj1mqECQdx30b79nDzF8.roa
File: ydFTglDgj1mqECQdx30b79nDzF8.roa (raw, json)
Hash identifier: /bh/s/pqM7nILl/TtIaaYgFL3VcdAeIGUVGsIqkPRhk=
Subject key identifier: C9:D1:53:82:50:E0:8F:59:AA:10:24:1D:C7:7D:1B:EF:D9:C3:CC:5F
Certificate issuer: /CN=b146b28951a21163dc9651b54c23936fccacf47b
Certificate serial: 459B6198
Authority key identifier: B1:46:B2:89:51:A2:11:63:DC:96:51:B5:4C:23:93:6F:CC:AC:F4:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUayiVGiEWPcllG1TCOTb8ys9Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/ydFTglDgj1mqECQdx30b79nDzF8.roa
Signing time: Wed 06 Apr 2022 04:27:23 +0000
ROA not before: Wed 06 Apr 2022 04:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31027
IP address blocks: 93.176.64.0/18 maxlen: 18
93.176.87.0/24 maxlen: 24
5.179.94.0/24 maxlen: 24
5.56.144.0/20 maxlen: 20
89.221.160.0/20 maxlen: 20
87.116.0.0/18 maxlen: 18
87.116.31.0/24 maxlen: 24
83.151.128.0/18 maxlen: 18
83.136.88.0/21 maxlen: 21
83.136.95.0/24 maxlen: 24
83.151.144.0/23 maxlen: 23
77.233.224.0/19 maxlen: 19
130.185.128.0/20 maxlen: 20
217.195.176.0/20 maxlen: 20
217.195.189.0/24 maxlen: 24
185.67.128.0/22 maxlen: 22
82.192.160.0/19 maxlen: 19
37.49.128.0/20 maxlen: 20
82.192.179.0/24 maxlen: 24
37.49.141.0/24 maxlen: 24
37.49.142.0/24 maxlen: 24
195.140.132.0/22 maxlen: 22
185.20.240.0/22 maxlen: 22
5.179.80.0/20 maxlen: 20
92.62.192.0/20 maxlen: 20
62.116.192.0/19 maxlen: 19
217.116.208.0/20 maxlen: 20
2a02:18a::/32 maxlen: 32
2a02:189::/32 maxlen: 32
2a02:188::/29 maxlen: 29
2a02:18d::/32 maxlen: 32
2a02:18c::/32 maxlen: 32
2a02:18f::/32 maxlen: 32
2a02:18e::/32 maxlen: 32
2a02:18b::/32 maxlen: 32
2a02:188::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167810968 (0x459b6198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146b28951a21163dc9651b54c23936fccacf47b
Validity
Not Before: Apr 6 04:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9d1538250e08f59aa10241dc77d1befd9c3cc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:a8:2f:89:d5:5c:f6:d2:ca:9d:a6:a0:1e:
2d:15:dd:4c:38:bf:7f:68:63:1c:2b:15:a6:3d:ee:
87:2c:5c:dc:a5:b3:40:73:cc:c2:93:82:12:46:ce:
f7:b4:bd:60:b1:90:8a:40:14:a5:29:a1:d1:be:5d:
f6:cc:28:e4:db:d2:28:50:b2:7e:42:a7:f5:b2:2e:
30:5a:3f:c2:6a:5b:b1:27:59:c9:4b:a2:6c:ef:92:
72:bc:c1:3e:11:78:fa:95:f2:8d:3f:05:40:0b:10:
9b:dc:52:08:b9:fa:fa:50:53:4f:08:01:4e:24:db:
80:05:9e:a0:f6:ba:50:4c:fc:56:bf:fd:e1:67:26:
d2:0d:c8:b2:9e:62:cf:e4:7b:97:c3:cc:64:b7:58:
9a:3b:5f:56:3c:0a:e7:fe:cd:09:ac:5a:8a:2f:f1:
fe:f5:fd:d7:8b:37:b1:ed:31:e5:98:b3:01:e3:fa:
e9:5f:7f:4e:c9:69:e0:53:d5:34:46:6f:6f:76:55:
f1:c1:2b:f7:27:39:58:d6:2d:07:b2:98:80:03:22:
3d:62:ee:55:81:78:bb:98:ee:40:a5:50:68:7f:20:
9f:d4:c5:6c:95:96:c0:7e:01:6d:2f:45:35:4f:b8:
74:4a:d0:c0:71:75:ce:8c:0e:a5:de:7c:fd:40:02:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D1:53:82:50:E0:8F:59:AA:10:24:1D:C7:7D:1B:EF:D9:C3:CC:5F
X509v3 Authority Key Identifier:
keyid:B1:46:B2:89:51:A2:11:63:DC:96:51:B5:4C:23:93:6F:CC:AC:F4:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUayiVGiEWPcllG1TCOTb8ys9Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/ydFTglDgj1mqECQdx30b79nDzF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/sUayiVGiEWPcllG1TCOTb8ys9Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.144.0/20
5.179.80.0/20
37.49.128.0/20
62.116.192.0/19
77.233.224.0/19
82.192.160.0/19
83.136.88.0/21
83.151.128.0/18
87.116.0.0/18
89.221.160.0/20
92.62.192.0/20
93.176.64.0/18
130.185.128.0/20
185.20.240.0/22
185.67.128.0/22
195.140.132.0/22
217.116.208.0/20
217.195.176.0/20
IPv6:
2a02:188::/29
Signature Algorithm: sha256WithRSAEncryption
5f:53:bb:a0:68:16:d2:6f:01:f9:01:f6:96:49:d6:c6:17:cd:
20:88:e8:3d:70:e5:3e:8b:36:f8:d6:03:ac:73:91:de:52:d2:
8c:02:af:6d:54:c3:79:1f:61:85:7e:3d:77:11:9e:c5:a6:e7:
41:1c:18:1f:48:58:b5:da:de:b6:8c:dd:df:e7:6a:ef:3e:a4:
47:a8:54:cc:fb:0b:0c:e5:65:fd:f9:50:39:9d:0d:e3:a0:f2:
9b:8a:4e:c3:51:a6:07:29:64:06:32:fe:e5:e1:a0:09:22:56:
a3:57:fe:b4:dc:f4:59:32:bd:0d:cf:cd:98:60:27:9e:fb:6a:
c9:42:da:9f:b3:f4:58:57:49:ca:03:94:ef:e6:34:9b:3e:55:
ff:ab:0c:52:24:c5:b1:f5:30:c3:b8:c3:72:c7:aa:24:48:68:
bd:8b:3a:60:8c:d0:01:e0:1e:fe:33:78:b9:93:10:d5:24:42:
de:ab:3e:c5:b6:5e:5d:1b:03:91:8e:c3:2d:01:5e:3f:73:cb:
08:5a:0d:90:28:35:67:78:74:8d:b8:3a:aa:d3:5f:39:c8:93:
32:4c:1d:f2:35:de:f7:41:3c:29:87:51:54:22:eb:27:4c:a2:
c5:a7:33:90:ce:71:5a:ef:b2:48:27:39:4c:57:e3:1b:08:7a:
23:06:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:55:16 2025 by rpki-client