Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2vZS2GSyJ6BQToybL6QOoU6xC60.roa
File: 2vZS2GSyJ6BQToybL6QOoU6xC60.roa (raw, json)
Hash identifier: WqvxR4bUXJkGQDH9nExVBSzj2R59Dyi66l/jD4bV5R0=
Subject key identifier: DA:F6:52:D8:64:B2:27:A0:50:4E:8C:9B:2F:A4:0E:A1:4E:B1:0B:AD
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8AF749DD536CC9EF536AD57C101E6A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2vZS2GSyJ6BQToybL6QOoU6xC60.roa
Signing time: Sun 01 Jan 2023 13:35:01 +0000
ROA not before: Sun 01 Jan 2023 13:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8300
IP address blocks: 193.134.248.0/23 maxlen: 23
194.209.74.0/24 maxlen: 24
193.5.30.0/24 maxlen: 24
193.5.252.0/24 maxlen: 24
193.5.158.0/23 maxlen: 24
2001:918:ffb7::/48 maxlen: 48
2001:918:ff70::/44 maxlen: 48
2001:918:f00::/40 maxlen: 40
2001:918:1ab::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f7:49:dd:53:6c:c9:ef:53:6a:d5:7c:10:1e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daf652d864b227a0504e8c9b2fa40ea14eb10bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:e2:8c:2b:e6:23:32:e9:2a:f9:b5:7b:73:
8f:d2:b8:6c:f1:8e:e3:70:5b:aa:f5:98:6d:e2:a2:
8c:05:74:e0:43:1d:c0:f0:a2:25:fe:56:2c:15:ed:
52:e4:4f:65:a7:5a:cf:05:a9:c6:51:c7:29:5a:28:
89:c1:26:7d:1b:9f:24:0c:df:64:9b:8c:01:4f:35:
5c:7a:27:b6:09:cd:5a:ee:84:01:8d:1a:49:81:53:
77:fa:64:97:14:94:78:bf:29:53:7f:d8:93:2f:d4:
8b:ff:a5:28:99:14:0d:cc:5b:03:f6:36:50:d6:46:
36:46:3c:27:68:ef:cf:43:0a:88:6f:15:8b:41:68:
35:85:d3:d5:67:bd:2c:92:f3:7e:e4:a3:f6:a1:77:
9b:ca:d5:eb:77:e1:2c:65:89:4d:b1:28:15:c1:4b:
97:af:fb:6a:3e:b2:9a:ef:4e:26:48:08:a3:ef:f4:
3f:3a:45:b0:98:ac:1f:e7:0e:bd:25:bf:01:e6:d6:
f7:0d:45:a7:04:b7:5e:d6:3b:af:77:5f:b4:93:5f:
13:d7:9d:df:b5:67:31:6f:06:fc:5a:0d:b0:05:c9:
38:e2:11:cd:ef:8c:15:af:6c:9b:87:a7:b1:b7:6d:
1f:09:ad:a1:2e:b7:12:39:2c:c5:32:41:7b:c2:33:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F6:52:D8:64:B2:27:A0:50:4E:8C:9B:2F:A4:0E:A1:4E:B1:0B:AD
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2vZS2GSyJ6BQToybL6QOoU6xC60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.30.0/24
193.5.158.0/23
193.5.252.0/24
193.134.248.0/23
194.209.74.0/24
IPv6:
2001:918:1ab::/48
2001:918:f00::/40
2001:918:ff70::/44
2001:918:ffb7::/48
Signature Algorithm: sha256WithRSAEncryption
0a:fb:cf:66:cd:f7:50:b6:49:23:e6:12:49:e7:6f:f3:7c:14:
82:99:14:e8:03:8b:ac:1b:4f:39:db:5d:a3:ef:37:29:4e:76:
aa:f0:3a:9d:8c:d6:d1:10:0e:4d:74:ad:9d:11:f4:e9:38:53:
2c:fb:29:4e:6a:b3:6a:3f:c9:64:fa:46:59:f1:e8:06:a2:85:
3a:ab:9d:fd:6a:84:a9:09:f2:aa:39:85:ac:ba:22:a3:27:bd:
4b:0b:6f:03:c5:1c:b4:bc:cf:00:14:ad:63:c3:7a:1e:49:8c:
28:37:de:e3:c6:8e:c1:c5:ca:58:c4:58:d2:a8:2c:97:52:5b:
0f:92:8d:2c:f1:3e:e2:3e:b7:a2:1b:86:21:e9:20:49:0a:9d:
cc:a1:1f:a0:0a:54:ec:60:4c:ff:d1:38:ed:c8:db:6d:83:52:
1c:db:1f:b3:c0:18:b5:52:54:3f:a4:0b:9b:ee:f4:da:4c:e6:
18:12:d0:16:b0:73:2b:d6:6f:c6:38:e1:58:52:bc:1b:56:a9:
45:eb:f8:cc:58:36:3b:97:f4:4b:b9:fc:15:c2:d1:34:68:0f:
37:ce:3a:20:d9:9c:04:b8:9a:94:04:d3:72:f9:a2:c4:47:fe:
f9:20:95:26:d4:03:65:93:d2:3a:b7:df:85:59:9b:a7:1d:84:
6a:a0:c8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:26:39 2025 by rpki-client