Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/DlSy5AH1CB5HGYIRJjN4lCpJvdY.roa
File: DlSy5AH1CB5HGYIRJjN4lCpJvdY.roa (raw, json)
Hash identifier: wGYyZbTLXoUMwnU60NIgzwB3I0Ph4o6w+KeQtP+L600=
Subject key identifier: 0E:54:B2:E4:01:F5:08:1E:47:19:82:11:26:33:78:94:2A:49:BD:D6
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 018AFA9726F0A9B4A0939B65F3A1E13D568B
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/DlSy5AH1CB5HGYIRJjN4lCpJvdY.roa
Signing time: Wed 04 Oct 2023 12:08:44 +0000
ROA not before: Wed 04 Oct 2023 12:08:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55933
IP address blocks: 185.242.232.0/22 maxlen: 24
185.245.40.0/22 maxlen: 24
93.187.128.0/22 maxlen: 24
185.239.84.0/23 maxlen: 23
185.239.84.0/22 maxlen: 24
185.239.86.0/23 maxlen: 23
2a0d:2480::/29 maxlen: 29
2a0c:f480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:97:26:f0:a9:b4:a0:93:9b:65:f3:a1:e1:3d:56:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Oct 4 12:08:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e54b2e401f5081e47198211263378942a49bdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:7f:53:8e:33:b7:76:bf:ba:da:9f:da:4c:
45:d4:8e:3c:e9:a2:e4:14:1f:7a:c0:ba:21:31:5d:
8b:12:f6:2c:af:21:f9:43:a5:5a:bc:95:4d:5d:21:
ff:f6:1e:44:9e:23:d5:22:7b:f9:14:b3:f7:aa:89:
08:11:1f:eb:c5:26:0b:46:ae:76:ae:b7:93:69:7c:
8f:75:68:2f:94:47:ab:97:0d:f8:88:18:dc:45:e1:
9d:9e:fa:fd:e7:77:89:c6:90:a9:42:d1:aa:1e:32:
50:9a:2c:21:96:75:d0:18:ba:a2:84:f3:00:d7:73:
e1:5c:6b:da:12:e1:1a:1b:0a:3c:8f:23:43:84:d4:
54:c2:5a:78:94:84:6d:f2:e1:4c:78:14:0c:f3:48:
ed:51:89:b7:0a:74:47:75:a4:cc:b5:97:6d:07:1c:
e5:71:a8:ce:eb:30:21:d7:57:f4:dd:06:73:2a:2e:
70:3a:48:12:fc:fa:b2:3c:86:e0:e8:ee:38:a8:67:
fa:c0:cb:a8:5f:a0:50:d8:bb:56:97:aa:c4:46:bf:
bc:56:24:c2:81:59:ef:cb:ba:2e:71:d0:47:97:85:
47:b4:e9:4c:75:55:bd:c8:87:56:4b:0a:8c:31:d4:
7a:80:ec:0e:07:32:9b:c9:10:52:a5:27:12:04:c6:
38:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:54:B2:E4:01:F5:08:1E:47:19:82:11:26:33:78:94:2A:49:BD:D6
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/DlSy5AH1CB5HGYIRJjN4lCpJvdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.128.0/22
185.239.84.0/22
185.242.232.0/22
185.245.40.0/22
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
04:c4:f7:b2:e3:1f:8d:4a:5d:f0:ce:85:4f:d8:dd:1f:70:a0:
1d:c3:27:ec:fb:90:d0:32:c0:9c:10:6e:67:ba:cd:ba:10:e3:
63:3d:58:f0:c5:ee:97:21:46:c5:a3:5a:04:4c:f9:17:9d:5a:
e8:6c:28:17:1e:ec:ee:4a:b6:4d:dc:39:45:94:59:8e:6f:bd:
ab:a1:90:06:cd:55:97:53:d2:44:d8:32:54:ec:f9:f7:be:2f:
ce:23:a8:ae:74:2a:3e:c4:d2:56:8f:00:5f:a3:4a:4c:9d:7c:
d0:da:78:6e:8a:01:b3:dc:f7:cb:e4:e3:b3:a2:70:11:99:e4:
7c:36:be:b1:e2:ed:0c:85:d0:22:32:9e:ea:71:fb:61:2a:0f:
e6:fa:b5:49:62:c6:99:06:1f:96:5b:d8:b8:4c:0a:15:5c:61:
5f:ee:65:61:e1:c5:ed:45:79:fe:ab:b6:18:fc:80:1b:84:db:
4f:b6:00:4f:c8:bf:45:45:03:78:e5:45:13:84:94:e4:56:5f:
2b:9a:f8:07:76:55:97:85:f9:48:74:a6:ec:43:c1:4b:b7:72:
b8:41:ee:a6:a8:9b:5a:ff:cb:7b:c9:51:b0:1d:7e:f4:69:79:
0a:7e:89:57:db:4f:0c:90:90:54:02:d7:26:e3:b7:af:1c:e4:
e7:df:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:00 2025 by rpki-client