Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/xQi8BfSBQ2gfBeJNYTHUU82uI-g.roa
File: xQi8BfSBQ2gfBeJNYTHUU82uI-g.roa (raw, json)
Hash identifier: IyjlbLRiiWWe35SP1Qr3cNdejgkveerpCUbMW+CZNbU=
Subject key identifier: C5:08:BC:05:F4:81:43:68:1F:05:E2:4D:61:31:D4:53:CD:AE:23:E8
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 0AB5B90E
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/xQi8BfSBQ2gfBeJNYTHUU82uI-g.roa
Signing time: Sat 01 Jan 2022 15:06:05 +0000
ROA not before: Sat 01 Jan 2022 15:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51747
IP address blocks: 176.74.192.0/21 maxlen: 21
5.133.192.0/19 maxlen: 20
151.252.24.0/21 maxlen: 21
185.12.248.0/22 maxlen: 22
185.12.148.0/22 maxlen: 22
151.248.0.0/21 maxlen: 21
80.248.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179681550 (0xab5b90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 1 15:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c508bc05f48143681f05e24d6131d453cdae23e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:9d:7b:b8:d4:ee:ea:3a:ba:b2:4f:bf:72:
0b:77:31:f7:fa:e8:0a:78:3b:7b:7a:a0:e5:05:a4:
27:77:b5:82:08:df:7f:4c:aa:5d:1a:8c:44:32:6b:
c4:92:fd:69:21:2e:da:13:08:eb:63:81:83:e5:0b:
05:c0:f4:d2:29:3f:4b:59:5b:02:03:f5:2d:6f:22:
3b:9f:a0:75:1d:8a:7f:29:be:f3:de:33:f7:ee:af:
80:de:88:ef:d1:2d:3e:02:98:09:f9:eb:a7:32:41:
96:28:ad:fb:45:1a:bc:f1:d5:b8:bd:57:4e:b1:4c:
89:4c:29:2f:94:6c:b1:c9:5c:5a:7f:c1:96:d1:32:
f4:66:95:52:23:2a:71:de:d9:3a:da:b2:66:96:8b:
03:47:0e:7d:be:15:92:c1:73:21:5f:a5:a6:7b:47:
c8:16:04:0b:11:fe:d7:e4:c1:6e:0e:83:18:15:1b:
62:7a:54:53:96:c2:4b:79:63:8e:de:a6:50:47:fa:
ad:d4:a5:8d:7a:b4:f0:74:e3:dc:ad:16:76:5b:3b:
9b:77:85:c7:b2:c1:f1:59:0b:f6:4e:f3:28:f3:73:
79:54:7f:17:37:eb:f5:24:38:61:73:01:07:cb:9f:
04:34:5d:94:9b:a7:91:2c:b0:ba:d9:4e:f7:41:43:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:08:BC:05:F4:81:43:68:1F:05:E2:4D:61:31:D4:53:CD:AE:23:E8
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/xQi8BfSBQ2gfBeJNYTHUU82uI-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.192.0/19
80.248.224.0/20
151.248.0.0/21
151.252.24.0/21
176.74.192.0/21
185.12.148.0/22
185.12.248.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:c4:84:51:f3:46:0f:7b:9b:48:30:0c:39:38:c6:f2:c1:64:
34:87:63:b6:ef:81:7a:f1:c2:45:5c:25:09:91:0d:52:4e:7c:
72:e8:87:1b:b7:0c:41:47:8a:80:00:62:56:3c:90:d0:cd:9c:
bd:9b:50:15:bc:16:b0:38:90:05:a5:53:fd:df:ef:72:21:dd:
62:f0:f3:2d:6d:a5:50:85:03:ee:b7:a6:2a:68:b7:1b:44:81:
dc:d0:b3:b6:59:77:4c:8a:6c:55:79:3a:8c:fd:1d:15:d9:03:
31:a0:16:d5:9f:35:76:cf:af:44:a8:23:c1:05:1c:5e:72:63:
e0:99:85:37:52:e1:13:e8:8e:88:e0:6e:2c:60:9a:fd:4f:ca:
98:97:1a:0d:63:09:eb:de:96:86:2e:6a:8e:bf:6a:1c:68:09:
56:b6:53:c3:e1:8a:34:98:62:42:23:c5:0b:03:e6:35:e5:11:
cd:32:50:40:aa:d5:c6:ca:c9:7f:69:d4:2b:f8:79:6d:8f:4f:
8e:a5:61:f4:46:fc:02:94:f5:55:5e:6b:eb:15:f2:12:58:8a:
e7:c3:55:13:19:26:e9:2e:8d:bc:85:2d:89:e0:38:8c:1b:ac:
2d:f4:94:c4:b2:3f:f3:04:fe:73:ab:f5:0d:22:b9:a4:40:13:
c4:1c:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:27 2025 by rpki-client