Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/iB9QwfNMrV8s1mJNQiD8nAv2S0Q.roa
File: iB9QwfNMrV8s1mJNQiD8nAv2S0Q.roa (raw, json)
Hash identifier: +t4Q3Dp5DahLkn4hj7BFB6r7NvpdDAIGnJ3kTkp3PJE=
Subject key identifier: 88:1F:50:C1:F3:4C:AD:5F:2C:D6:62:4D:42:20:FC:9C:0B:F6:4B:44
Certificate issuer: /CN=37e1fa4013fab85d3237b1c35faa0e4ef0b9b817
Certificate serial: 01856E1418075D1E87F4316DBEF29363FE69
Authority key identifier: 37:E1:FA:40:13:FA:B8:5D:32:37:B1:C3:5F:AA:0E:4E:F0:B9:B8:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-H6QBP6uF0yN7HDX6oOTvC5uBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/iB9QwfNMrV8s1mJNQiD8nAv2S0Q.roa
Signing time: Sun 01 Jan 2023 16:04:48 +0000
ROA not before: Sun 01 Jan 2023 16:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59492
IP address blocks: 193.187.77.0/24 maxlen: 24
193.187.78.0/24 maxlen: 24
193.187.76.0/24 maxlen: 24
193.187.79.0/24 maxlen: 24
193.142.213.0/24 maxlen: 24
195.182.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:18:07:5d:1e:87:f4:31:6d:be:f2:93:63:fe:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e1fa4013fab85d3237b1c35faa0e4ef0b9b817
Validity
Not Before: Jan 1 16:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=881f50c1f34cad5f2cd6624d4220fc9c0bf64b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:e2:69:31:1c:15:31:d1:e6:8c:7a:72:6b:
f9:03:95:71:48:1d:a1:07:28:be:b8:58:fe:62:e7:
e1:19:ac:0f:d8:86:e7:2a:74:02:16:cd:e9:59:5f:
27:90:52:89:37:65:86:b8:85:b7:ed:36:e2:32:92:
7d:d5:d7:f7:f8:a6:bf:e7:53:21:9f:1d:05:6d:3d:
bf:88:b3:ec:af:a1:e3:f3:69:c5:2d:6d:a7:25:01:
fb:71:f7:81:43:9b:32:7b:be:41:6b:f6:c4:2e:c9:
38:33:ed:49:a7:8f:b8:c8:0d:c8:f9:b7:57:f1:d4:
e5:9a:80:70:cf:66:8f:f1:20:74:3d:a0:73:08:9f:
71:08:1b:25:7c:cd:98:85:01:59:f1:f3:76:4b:24:
d7:89:0a:05:c9:ce:c0:55:32:7a:ef:a8:69:52:73:
27:57:38:dd:56:ed:50:ba:30:f4:9d:3a:51:f3:d3:
1e:96:22:96:ae:eb:ea:99:b2:55:31:3c:b1:e9:c9:
47:34:f2:2b:b5:1d:04:97:47:98:47:12:42:65:71:
f1:8b:a9:44:71:58:25:5b:1e:c7:a8:1e:2c:02:f0:
a0:7e:09:06:32:51:41:02:2f:e5:6d:88:7c:be:fd:
82:d8:c8:b2:c9:bc:31:a4:85:a7:28:e9:18:9f:bc:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:50:C1:F3:4C:AD:5F:2C:D6:62:4D:42:20:FC:9C:0B:F6:4B:44
X509v3 Authority Key Identifier:
keyid:37:E1:FA:40:13:FA:B8:5D:32:37:B1:C3:5F:AA:0E:4E:F0:B9:B8:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-H6QBP6uF0yN7HDX6oOTvC5uBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/iB9QwfNMrV8s1mJNQiD8nAv2S0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/N-H6QBP6uF0yN7HDX6oOTvC5uBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.213.0/24
193.187.76.0/22
195.182.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d7:0d:12:1c:a0:17:fd:80:ba:21:30:f6:83:b0:7a:cc:91:
1a:68:3c:cb:a2:cc:55:69:eb:ea:c5:df:b9:93:b3:76:60:d5:
b6:55:06:a6:82:00:d4:71:e0:a8:36:29:77:ea:9f:97:44:be:
52:c3:ec:3a:c5:05:a2:e5:dc:af:de:89:ce:2c:59:a3:1e:bf:
79:cb:82:a0:73:78:be:e1:6a:58:48:73:0e:d1:06:43:9e:7b:
3f:36:1e:a6:a5:ac:2e:ab:82:b4:d8:d0:14:02:71:f2:22:a0:
bb:47:53:7b:02:14:a4:12:ad:12:02:9e:80:0c:69:19:44:12:
6f:ce:16:ee:a2:39:83:0d:90:84:50:88:fb:67:00:a9:42:e7:
ab:e7:84:37:40:de:83:e2:d6:e8:d3:23:ba:03:c7:e7:ed:8f:
42:f1:af:d0:4a:84:03:db:71:fb:e3:2f:35:35:c0:fe:90:e1:
c1:8d:08:e0:9c:82:28:be:89:30:84:bc:74:8b:2c:87:c6:49:
a6:3b:83:7e:a1:eb:bc:6b:0a:40:12:33:6d:b0:b7:4a:36:82:
54:8b:b9:f6:99:0c:84:61:f8:4e:5e:aa:3d:82:c7:c3:aa:d4:
fe:13:db:ed:ed:18:01:fc:7f:f8:70:f7:6f:b1:98:95:ab:73:
e4:2a:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:27 2025 by rpki-client