Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/KimssujSchA2IsdeirpOt0-ZZts.roa
File: KimssujSchA2IsdeirpOt0-ZZts.roa (raw, json)
Hash identifier: FjWvv4vlQ0BE3khWSC4rKeza5msIJjRZktBk3Tr5BzM=
Subject key identifier: 2A:29:AC:B2:E8:D2:72:10:36:22:C7:5E:8A:BA:4E:B7:4F:99:66:DB
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018274DD7C165F597320DF6B5E5F9A43ADBE
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/KimssujSchA2IsdeirpOt0-ZZts.roa
Signing time: Sat 06 Aug 2022 20:34:08 +0000
ROA not before: Sat 06 Aug 2022 20:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47890
IP address blocks: 193.32.160.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
2.57.122.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
193.29.14.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:74:dd:7c:16:5f:59:73:20:df:6b:5e:5f:9a:43:ad:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Aug 6 20:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a29acb2e8d272103622c75e8aba4eb74f9966db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:c7:49:33:12:ee:37:30:99:13:e6:42:6e:
a9:f5:db:b9:15:1e:be:b2:e4:25:12:6c:55:a7:56:
81:d0:88:1b:ce:66:06:73:ee:a1:54:da:31:d2:43:
02:26:05:84:49:9a:0f:81:78:e7:d8:2d:44:09:ec:
16:b1:82:13:66:4c:a4:3c:79:7e:11:0b:e4:8e:d0:
26:7b:0d:ff:c8:0a:99:46:c9:9c:bd:df:cc:eb:f5:
24:42:f5:80:2b:e0:f1:4c:41:b0:15:50:70:75:2a:
0c:43:98:9a:fe:2b:98:49:4c:13:1f:e0:f6:01:6e:
6e:ce:79:1c:80:69:31:cd:3f:9a:75:a2:b9:e9:d5:
a8:9a:1a:d9:a2:e4:87:11:43:d8:76:1f:c4:c8:5d:
ae:ef:9c:87:32:6b:b1:68:3a:3c:26:be:18:3e:86:
43:1b:54:fb:4c:63:67:01:7f:03:96:68:51:d0:1b:
2d:42:b7:be:d7:c3:e9:7b:43:8a:82:b7:b9:6a:c7:
5f:1c:d4:35:dc:e3:b2:c2:a5:95:c5:a4:1a:fa:cc:
ce:24:9e:a3:98:66:6c:80:4a:47:f7:30:87:40:8e:
10:67:7e:c4:54:bd:d5:5d:63:db:be:4f:a4:58:5e:
c5:4a:1d:3a:eb:db:e5:b3:6e:6e:8c:64:ad:45:fc:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:29:AC:B2:E8:D2:72:10:36:22:C7:5E:8A:BA:4E:B7:4F:99:66:DB
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/KimssujSchA2IsdeirpOt0-ZZts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
80.94.92.0/24
92.118.39.0/24
185.232.64.0/24
185.232.66.0/24
193.29.14.0/24
193.32.160.0/24
193.32.163.0/24
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
Signature Algorithm: sha256WithRSAEncryption
4e:3b:ae:47:8f:c7:4a:fd:0e:ad:83:c9:03:01:46:c7:aa:06:
ea:b0:67:cc:b1:09:0e:e6:9e:6a:d0:ca:13:51:a1:7f:40:45:
7f:82:56:65:78:85:b2:f8:ad:3a:2c:1f:af:21:42:7a:6b:70:
92:47:7a:6c:dc:77:5b:f9:22:de:79:6c:a1:f7:cd:9d:1a:13:
fd:55:18:b1:52:17:fa:90:5c:f7:4a:24:65:1b:d9:3f:56:31:
d5:8b:99:d4:56:75:a1:3f:94:04:7b:bd:3d:17:11:f6:43:fd:
64:17:a1:f6:35:c5:24:3c:0b:5e:8b:db:ba:73:da:a5:4c:76:
5e:19:f6:38:10:08:fe:f7:8e:7a:46:6e:f3:85:8e:8a:16:47:
39:0e:db:b1:34:2a:73:35:6f:2e:88:80:f4:91:2c:41:d1:76:
9e:0c:99:bf:cd:20:ce:2f:fd:0b:ff:f0:16:30:52:c7:a6:ac:
50:79:fd:25:a8:ef:95:02:d7:aa:82:9c:35:3d:e6:db:ad:f5:
bc:b9:03:77:8a:29:cc:16:fd:4f:3b:21:60:4a:68:9a:34:91:
3d:1f:7f:a1:29:f0:72:20:12:37:5d:66:7d:e4:7d:c7:a3:43:
3b:17:05:08:29:69:ad:b6:2d:30:aa:a2:ea:18:93:90:3b:b2:
f1:4f:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:50 2025 by rpki-client