Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/2mvVHEFzvq71dB6YNjb0W2i1Bl4.roa
File: 2mvVHEFzvq71dB6YNjb0W2i1Bl4.roa (raw, json)
Hash identifier: xiA0xQMETmlMgJ/j9AE8uoyseo2BbWHkjRGN2tmQwKA=
Subject key identifier: DA:6B:D5:1C:41:73:BE:AE:F5:74:1E:98:36:36:F4:5B:68:B5:06:5E
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 018A66141121BE1EA72B13CA8EDA8CBF37FF
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/2mvVHEFzvq71dB6YNjb0W2i1Bl4.roa
Signing time: Tue 05 Sep 2023 16:01:45 +0000
ROA not before: Tue 05 Sep 2023 16:01:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.230.246.0/24 maxlen: 24
194.150.79.0/24 maxlen: 24
213.173.38.0/24 maxlen: 24
77.75.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:66:14:11:21:be:1e:a7:2b:13:ca:8e:da:8c:bf:37:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Sep 5 16:01:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da6bd51c4173beaef5741e983636f45b68b5065e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6e:a9:64:44:78:d5:88:41:d2:3c:0f:bf:66:
e7:ed:d4:bc:6b:fa:72:ed:1d:22:fb:52:e0:28:98:
89:11:51:b4:30:87:0d:9b:b5:ed:0e:0a:79:bf:d7:
89:08:21:a4:99:0b:e2:fc:08:a0:64:cc:de:f1:58:
10:a7:f4:fc:21:16:20:2c:a6:5b:a4:2a:41:80:26:
67:f8:3e:c5:d6:fb:f0:5e:90:d1:97:8f:f5:9e:ba:
28:15:46:23:47:79:3c:a3:6d:85:85:ba:a8:1c:aa:
70:e2:35:69:61:f4:9c:bd:af:e4:74:9d:75:bc:91:
43:f2:de:83:97:15:d0:4d:f3:ce:50:bb:6f:af:f3:
b4:0d:e1:a0:7d:a9:50:f2:88:12:5e:7e:69:81:a2:
3e:ab:87:a2:e3:23:4c:6b:79:f2:0b:89:4d:d1:bc:
f7:11:30:b3:31:70:6a:f7:f4:ff:82:07:d5:73:aa:
5b:f9:6e:46:dc:2d:2f:87:61:42:9d:5c:e3:6d:7a:
ef:bf:15:4a:c3:9a:a4:3e:d2:93:fa:f2:2d:5e:9f:
8f:6e:4d:7e:07:a5:30:e5:99:64:3a:a9:bb:f0:47:
d8:fa:e9:76:0d:1e:49:13:88:36:82:89:44:e8:24:
91:d5:79:14:68:9a:03:c9:4d:55:10:9e:6b:41:e8:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6B:D5:1C:41:73:BE:AE:F5:74:1E:98:36:36:F4:5B:68:B5:06:5E
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/2mvVHEFzvq71dB6YNjb0W2i1Bl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.229.0/24
185.230.246.0/24
194.150.79.0/24
213.173.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a2:e4:6c:bc:87:35:00:9b:67:99:6c:05:3d:08:e5:7d:c8:
e0:1f:da:07:cb:6c:f7:f8:8a:32:00:40:d0:cd:63:bc:ff:67:
46:8e:30:99:60:ce:af:bf:48:c5:3e:90:46:b7:ca:83:9b:7c:
f6:ef:a5:9f:da:a5:b5:e2:36:58:f2:07:04:33:e4:dd:3b:cb:
99:6a:30:9c:80:2d:62:c5:10:bd:da:24:9a:9f:5d:1f:b3:82:
aa:54:71:40:bf:cc:d5:a2:69:97:aa:3f:2f:eb:3d:fd:cf:46:
54:44:ad:26:c3:d5:51:36:e1:0a:0a:24:f5:c0:01:12:6b:5f:
6a:8f:19:22:6c:d9:c6:69:9a:f9:58:02:10:8a:94:5e:e5:8c:
ef:fe:cb:c3:78:98:14:5c:15:c6:ce:fa:70:9c:d3:49:46:9b:
95:4e:4d:81:be:92:da:71:dd:50:a6:14:96:00:6b:14:65:d4:
16:0d:0e:3c:16:2c:84:37:9a:13:20:39:11:6d:2f:19:88:f6:
a3:e1:fd:f7:b3:af:12:66:bd:c4:21:04:e4:ce:54:09:46:f0:
be:7e:1f:31:f2:ae:c8:d0:4d:0a:c6:3a:b6:f7:14:e4:9a:7b:
7c:84:4f:d4:2d:61:20:ac:ce:c9:24:79:c6:a2:92:bb:48:a7:
34:ef:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:16 2025 by rpki-client