Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/DY9c7hJd3NobXAwplUpLZeR7UMQ.roa
File: DY9c7hJd3NobXAwplUpLZeR7UMQ.roa (raw, json)
Hash identifier: +XINwgcVBSF7PgwPqzG4gaw6jAZd3FVdOixj7lpooFk=
Subject key identifier: 0D:8F:5C:EE:12:5D:DC:DA:1B:5C:0C:29:95:4A:4B:65:E4:7B:50:C4
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0181D5A4AFA05598B368D87834266F0697A3
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/DY9c7hJd3NobXAwplUpLZeR7UMQ.roa
Signing time: Wed 06 Jul 2022 22:32:28 +0000
ROA not before: Wed 06 Jul 2022 22:32:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47890
IP address blocks: 193.32.160.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
193.29.14.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:a4:af:a0:55:98:b3:68:d8:78:34:26:6f:06:97:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jul 6 22:32:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d8f5cee125ddcda1b5c0c29954a4b65e47b50c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:91:df:a8:e8:da:4d:82:7d:07:34:89:de:
2b:24:53:bf:40:d3:d5:cc:cb:0c:00:12:b1:d7:60:
70:12:4d:fa:b7:84:1a:6e:79:2d:a5:95:4c:c8:a1:
e8:46:fc:89:6d:59:f4:cd:e9:47:3b:8e:69:46:81:
92:c8:3e:36:1d:4f:03:3b:63:d3:55:4b:d9:8e:3b:
74:30:6f:bf:eb:40:fd:9f:8e:6f:1b:5b:61:36:b7:
48:88:4c:89:e5:0f:19:7f:2a:f4:10:7e:c1:61:15:
15:b2:be:d5:89:59:ec:76:4c:3b:75:3f:e1:a2:21:
d2:e0:2f:a9:a4:32:bc:66:4b:d5:bb:64:22:2c:ac:
e6:9d:ff:de:25:c1:71:f6:8c:cf:5d:10:f1:b7:cb:
e7:2d:f2:3b:f4:bd:77:9c:cf:28:53:fd:16:25:df:
53:d2:96:4d:f9:ab:b9:d2:8c:f9:f4:55:4c:43:e3:
50:11:5d:1b:f4:5b:c5:06:36:14:28:9c:85:5f:fd:
53:84:26:1b:4e:32:99:ef:05:e5:9d:f4:1a:1f:07:
fe:52:8e:4e:fe:39:c0:56:ab:31:73:55:7a:d0:6f:
bb:6e:b7:6f:84:99:22:1c:10:47:25:ac:66:db:63:
e5:b5:0c:0d:c3:76:0d:f3:1c:9e:d7:bd:50:e5:03:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8F:5C:EE:12:5D:DC:DA:1B:5C:0C:29:95:4A:4B:65:E4:7B:50:C4
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/DY9c7hJd3NobXAwplUpLZeR7UMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.64.0/24
185.232.66.0/24
193.29.14.0/24
193.32.160.0/24
193.32.163.0/24
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
Signature Algorithm: sha256WithRSAEncryption
31:59:2a:73:63:e5:45:44:17:a5:c6:af:8b:b2:87:59:35:d3:
bf:94:19:01:da:bb:ee:3a:93:c4:c7:3c:b5:21:07:1d:ac:1f:
bd:87:cc:35:0a:9e:0a:75:25:d1:41:50:1d:01:61:3e:ad:87:
00:d9:ef:53:a9:9e:5a:61:03:24:a1:93:fa:41:42:f2:de:65:
61:54:fe:41:3a:b4:01:b9:ae:8c:94:3a:31:af:a4:54:e1:11:
55:83:ce:d4:f8:23:cc:dc:ce:82:e3:83:21:8f:6f:5e:50:ae:
37:1d:d5:2f:24:51:53:09:c0:a7:33:de:5b:38:00:92:c5:b1:
95:a2:27:b0:86:85:4d:cf:86:e3:97:e8:61:37:27:df:30:42:
28:f3:bc:ec:f3:bb:a4:96:2b:6c:c4:0d:11:d3:42:01:cd:6f:
db:42:55:1a:a3:1b:2e:70:99:e8:38:4d:46:ab:52:55:f9:fc:
30:fb:de:25:fc:cc:77:5d:93:cb:79:38:b1:b1:88:b9:59:93:
ab:9e:0a:37:ea:dc:a1:fa:f7:71:20:4f:e7:85:24:d4:27:6f:
ae:d3:89:b4:2e:79:d8:16:87:8e:d6:d8:88:ae:cd:94:f8:e1:
f4:0b:02:98:eb:fe:90:f1:76:64:11:c9:b9:a0:6f:a9:dc:52:
e9:b7:b8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:49 2025 by rpki-client