Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/1-k3N6b8vOhrdEOi3rSD-D8T9B8U.roa
File: 1-k3N6b8vOhrdEOi3rSD-D8T9B8U.roa (raw, json)
Hash identifier: xtPG6awMOmxwt9FJlTX+feqHbTUS2IBG2ZtxpoTtHmY=
Subject key identifier: FA:4D:CD:E9:BF:2F:3A:1A:DD:10:E8:B7:AD:20:FE:0F:C4:FD:07:C5
Certificate issuer: /CN=01d075a4e5137f879563c58997ca7576b4059ede
Certificate serial: 018968042FD005FD4C2BB0B43ACF161ACB2E
Authority key identifier: 01:D0:75:A4:E5:13:7F:87:95:63:C5:89:97:CA:75:76:B4:05:9E:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdB1pOUTf4eVY8WJl8p1drQFnt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/1-k3N6b8vOhrdEOi3rSD-D8T9B8U.roa
Signing time: Tue 18 Jul 2023 08:00:52 +0000
ROA not before: Tue 18 Jul 2023 08:00:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206720
IP address blocks: 193.56.36.0/24 maxlen: 24
193.56.32.0/24 maxlen: 24
193.56.35.0/24 maxlen: 24
185.187.246.0/24 maxlen: 24
193.56.40.0/24 maxlen: 24
185.187.245.0/24 maxlen: 24
193.56.39.0/24 maxlen: 24
185.187.244.0/24 maxlen: 24
185.187.247.0/24 maxlen: 24
193.56.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:04:2f:d0:05:fd:4c:2b:b0:b4:3a:cf:16:1a:cb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d075a4e5137f879563c58997ca7576b4059ede
Validity
Not Before: Jul 18 08:00:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa4dcde9bf2f3a1add10e8b7ad20fe0fc4fd07c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:aa:e8:db:87:27:d4:b8:28:62:e1:8d:7e:
11:99:38:44:68:80:ba:a2:64:f5:97:8b:b5:9b:20:
45:12:fb:cb:67:70:10:6b:d9:2a:b7:f0:11:54:fe:
cf:5f:f6:7f:96:fa:b8:8e:7e:b7:e0:0b:48:fa:f9:
53:ef:73:df:ae:95:ad:ae:88:f0:5f:19:ea:28:70:
b4:7c:99:07:92:89:0d:45:3d:85:dc:d6:3d:3e:c0:
b9:61:e8:2c:62:11:be:6c:22:4c:a8:76:ea:e6:0f:
54:ac:8e:3b:fd:c3:cd:29:fc:61:12:c7:df:98:16:
d4:4e:37:bc:f2:0b:67:12:70:98:58:ee:e4:40:79:
e0:5e:e3:f4:e9:29:dc:7d:8f:0e:9b:3f:4c:5e:0e:
e3:30:87:00:fc:2b:01:2b:80:86:ae:51:e4:30:29:
4f:8f:10:a4:eb:e4:30:b2:97:45:3c:4c:a4:9c:50:
5d:41:80:88:2c:c0:1e:89:c8:13:26:b8:97:40:60:
e0:c4:1f:d5:a0:c2:50:83:a3:81:72:ec:96:2d:4b:
e4:9b:aa:1f:ab:3a:ed:54:2c:49:ef:51:67:60:66:
e1:33:fb:99:af:93:0b:19:a4:6e:1f:b2:2b:03:e1:
b5:bd:e7:fd:ee:45:62:14:0d:fe:8c:47:ca:c3:ed:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:CD:E9:BF:2F:3A:1A:DD:10:E8:B7:AD:20:FE:0F:C4:FD:07:C5
X509v3 Authority Key Identifier:
keyid:01:D0:75:A4:E5:13:7F:87:95:63:C5:89:97:CA:75:76:B4:05:9E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdB1pOUTf4eVY8WJl8p1drQFnt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/1-k3N6b8vOhrdEOi3rSD-D8T9B8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/AdB1pOUTf4eVY8WJl8p1drQFnt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.244.0/22
193.56.32.0/24
193.56.35.0-193.56.36.255
193.56.39.0-193.56.40.255
193.56.45.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ee:09:4e:9e:eb:52:2c:ad:7f:b1:03:53:db:af:be:47:4d:
9b:74:12:d4:75:f1:bc:f9:77:36:0e:6a:c4:11:20:6e:c9:b9:
e9:42:4d:ae:ab:9f:55:96:82:cb:b2:bf:d7:b0:90:83:0a:9a:
3a:8d:91:3f:ec:26:1b:92:79:52:cc:a8:74:d2:19:07:a1:23:
58:01:b9:04:f6:f4:3c:55:12:0a:00:73:9c:1f:f9:a1:d4:4a:
73:13:0c:8f:8d:0b:41:73:30:e9:7e:ff:23:ff:87:75:d1:75:
6e:82:d1:60:95:1b:c1:27:0e:de:1d:db:63:7d:e0:10:82:73:
0e:f7:60:08:a8:e6:f9:4a:39:83:e1:12:53:78:0e:74:4f:17:
fc:3d:e3:f8:51:9b:5c:d5:fd:78:41:8f:8b:b3:59:8f:f5:d0:
58:b4:5d:e1:5e:d9:fa:2c:ce:c7:1a:e9:55:1b:3e:2e:a4:ef:
03:2c:5f:cd:48:9e:38:7f:9b:15:68:83:10:b6:9a:a8:30:9d:
1f:00:5f:09:ac:7d:53:7f:e1:09:cb:5e:f9:5d:46:70:df:31:
88:67:24:29:76:ee:e6:88:1a:36:61:0c:0f:c6:25:25:c1:d1:
fa:32:ce:85:d4:d2:38:7d:3d:8a:72:8f:09:55:97:e9:1c:b1:
4c:b7:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:50 2025 by rpki-client