
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/bOXl3G76mmOLMyxrrDNNValagS4.roa
File: bOXl3G76mmOLMyxrrDNNValagS4.roa (raw, json)
Hash identifier: DegvdD1w41EhGYZuzkZgUqteV3sCXsaJCanbfY2DTwg=
Subject key identifier: 6C:E5:E5:DC:6E:FA:9A:63:8B:33:2C:6B:AC:33:4D:55:A9:5A:81:2E
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 06D43642
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/bOXl3G76mmOLMyxrrDNNValagS4.roa
Signing time: Sat 01 Jan 2022 14:07:45 +0000
ROA not before: Sat 01 Jan 2022 14:07:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42397
IP address blocks: 193.32.161.0/24 maxlen: 24
193.32.160.0/24 maxlen: 24
185.232.65.0/24 maxlen: 24
193.29.13.0/24 maxlen: 24
193.29.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114570818 (0x6d43642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 14:07:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ce5e5dc6efa9a638b332c6bac334d55a95a812e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:35:05:d1:c1:8f:55:a0:11:d6:ba:59:30:de:
ff:94:ef:aa:70:eb:e3:22:11:c5:cb:55:59:4d:08:
77:85:c7:23:c6:1f:ae:b8:4f:22:86:bc:0f:9c:76:
4b:52:20:62:16:f0:bf:a4:71:10:d7:3f:fd:dc:b2:
07:34:1b:e2:71:4b:bb:d6:55:6c:30:8d:09:bc:10:
fe:41:57:49:e1:e8:4c:22:b1:3b:36:7b:6f:d0:cc:
6b:61:2f:02:4f:e1:dc:f8:69:90:45:d7:8d:9d:b3:
23:5c:23:47:62:35:6f:9f:78:25:75:ab:aa:af:57:
ad:9b:2c:cd:90:87:26:d3:45:73:fa:2a:be:0f:3c:
c4:b2:f8:d7:85:b8:21:e2:f0:15:79:0e:8c:9b:bd:
cb:9a:f3:4a:85:ff:dc:44:c8:69:20:3e:c1:4d:9d:
60:8d:5c:41:4c:ad:b7:48:79:ee:c8:e0:87:af:0e:
1e:4a:43:6f:e7:d6:c1:8b:5f:5a:bd:9c:16:96:06:
b1:ff:11:ed:38:d7:95:ec:d9:a8:4a:4a:56:a6:8b:
59:ce:50:25:cd:88:66:7f:3c:1a:1d:e6:21:69:67:
38:70:02:b1:32:3b:b5:81:9d:7d:06:d3:80:f9:36:
de:d2:20:ea:66:0b:60:1f:04:27:ce:39:3b:9d:16:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E5:E5:DC:6E:FA:9A:63:8B:33:2C:6B:AC:33:4D:55:A9:5A:81:2E
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/bOXl3G76mmOLMyxrrDNNValagS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.65.0/24
193.29.13.0/24
193.29.15.0/24
193.32.160.0/23
Signature Algorithm: sha256WithRSAEncryption
07:c0:db:8c:a8:02:d2:6d:3f:d6:22:61:23:ef:ea:5d:20:f2:
92:ff:8e:b8:a3:36:52:55:b6:30:39:91:48:b3:38:55:a8:00:
32:1e:17:9b:6e:e5:0d:25:a7:7b:bf:67:6f:82:a7:3a:48:37:
60:46:05:6e:fa:2c:2a:cb:03:0b:57:e1:b9:0d:a4:38:9d:e7:
d6:a3:1e:40:78:db:4b:87:a4:3b:90:b7:a0:d7:c9:53:b7:98:
9d:61:0d:7f:98:29:5f:82:02:1e:9d:ce:83:e8:7c:17:f4:81:
00:8f:07:a4:90:12:d3:22:54:b8:25:68:eb:7a:46:7f:db:59:
26:e9:70:ad:8d:9c:61:fe:54:91:0b:15:9e:4f:52:8d:08:58:
f3:df:7f:78:ea:9d:4b:e7:da:e9:73:04:d3:e5:ed:df:5c:b5:
a9:b2:ca:30:95:f8:93:d7:e2:95:d5:eb:e0:c5:3e:aa:01:bb:
2c:b4:3a:60:ca:cb:9e:f6:9d:f8:a7:f6:85:03:3e:c7:8c:af:
5f:b7:46:28:1d:1b:4c:d1:5c:60:2e:0f:63:4b:37:02:34:9c:
55:16:cc:e7:86:b0:0d:8b:29:10:84:c2:64:2e:e5:fd:0c:03:
ce:02:ee:5e:a7:db:27:2a:c5:ee:7f:19:a3:d8:b3:45:93:e2:
fd:b8:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:39 2025 by rpki-client