Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/paEfmlWqL5nv3PkJ3pmKEtatqkM.roa
File: paEfmlWqL5nv3PkJ3pmKEtatqkM.roa (raw, json)
Hash identifier: Zwq8vKf7apgjUAwQVGirQZ37QUB6Pf+MHwmnAqFlnt4=
Subject key identifier: A5:A1:1F:9A:55:AA:2F:99:EF:DC:F9:09:DE:99:8A:12:D6:AD:AA:43
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 018581B0BFB61FAD124366898898BCB9E4C6
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/paEfmlWqL5nv3PkJ3pmKEtatqkM.roa
Signing time: Thu 05 Jan 2023 11:28:42 +0000
ROA not before: Thu 05 Jan 2023 11:28:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147001
IP address blocks: 109.206.244.0/24 maxlen: 24
85.8.180.0/23 maxlen: 24
93.177.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:b0:bf:b6:1f:ad:12:43:66:89:88:98:bc:b9:e4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 5 11:28:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5a11f9a55aa2f99efdcf909de998a12d6adaa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:e4:36:d5:e6:a1:c5:1b:8b:b9:48:96:64:
59:23:99:e4:de:f8:fb:91:f4:f5:bb:2a:15:8a:39:
07:4d:74:64:ee:10:f1:a8:78:9e:8c:d6:92:e4:57:
f9:73:84:fc:ef:30:d2:44:a1:c2:71:86:dd:8c:0b:
1b:8e:8f:d1:90:e7:a4:35:63:c0:8d:df:e6:a5:34:
fa:ba:a0:76:f4:35:a5:a1:8e:3c:3a:51:c3:45:7f:
84:07:c9:73:07:f9:ee:99:1e:bf:9a:d1:a7:70:02:
30:2c:a9:e8:13:a4:21:01:8a:23:01:18:fd:09:09:
82:fa:fd:b4:e0:1d:ed:56:86:4b:e4:1b:e8:22:d1:
4a:51:d6:a2:07:dc:e6:35:d4:10:31:62:c0:a5:d7:
1b:82:69:2a:6f:4d:23:c8:92:49:3f:c0:0b:91:2f:
b6:85:5d:60:1e:2f:8d:f0:3b:8c:b6:e9:dc:49:28:
0f:14:31:45:6f:93:9b:91:b2:fd:21:1e:ba:3d:d1:
7d:be:50:ae:c2:6b:e4:67:af:a2:e0:41:78:47:06:
ac:6d:1a:18:ee:f9:ec:a3:15:bd:fb:70:68:07:b4:
ca:ec:18:49:dd:54:a4:0b:ba:98:d7:59:b4:30:34:
3a:70:d8:51:91:c3:5f:aa:74:cb:38:4e:26:41:3a:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A1:1F:9A:55:AA:2F:99:EF:DC:F9:09:DE:99:8A:12:D6:AD:AA:43
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/paEfmlWqL5nv3PkJ3pmKEtatqkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.180.0/23
93.177.76.0/23
109.206.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:62:f7:3b:4f:5e:82:63:2f:32:7d:81:55:6b:cb:cb:ed:1f:
60:33:bc:b2:b0:4a:3a:45:3e:04:0a:a2:07:df:89:22:c9:68:
d3:50:d0:bc:4a:7c:31:93:5f:fc:3a:e3:40:1b:db:33:61:0e:
1c:c9:62:f7:4c:6e:9c:03:f5:25:92:3d:4d:f5:cb:0f:a9:dc:
c0:f4:d3:17:66:1e:16:b7:b4:77:34:c5:23:62:be:e3:8c:07:
65:15:34:c6:68:ae:68:88:9a:b0:c8:14:43:74:bd:81:4a:56:
2d:55:8e:c8:1c:b7:4e:4a:41:f4:6c:34:ca:7b:0e:8d:68:42:
03:91:4a:10:3f:4c:75:4a:fc:68:4e:20:16:d9:db:b1:f5:f1:
6e:46:84:47:0a:a2:81:b8:2a:45:20:6d:5f:26:14:1f:30:5a:
94:cb:12:c8:2f:2a:1a:84:4d:05:1e:3a:cf:13:17:c7:01:4c:
7b:e2:8a:fa:da:40:b2:32:3b:88:3c:c8:99:9e:8c:03:26:27:
dc:eb:b9:37:d1:0e:5b:65:ab:c3:da:99:bf:73:91:15:33:b8:
fb:08:cd:b2:bd:53:db:54:54:1d:b1:85:f8:f3:bb:e5:98:4e:
fc:ce:11:8b:5a:35:35:32:53:15:f3:d8:74:24:2b:70:5f:71:
58:93:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:06 2025 by rpki-client