Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/acQTME6dMTo4NVE797rStaLI_dE.roa
File: acQTME6dMTo4NVE797rStaLI_dE.roa (raw, json)
Hash identifier: ZpA8fc4Z3mwpbBMoDIavugY32YZz/gmNwUKbA1FPbvI=
Subject key identifier: 69:C4:13:30:4E:9D:31:3A:38:35:51:3B:F7:BA:D2:B5:A2:C8:FD:D1
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018E75C7FF889B3CD3978702209BCC5915EE
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/acQTME6dMTo4NVE797rStaLI_dE.roa
Signing time: Mon 25 Mar 2024 13:23:45 +0000
ROA not before: Mon 25 Mar 2024 13:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8300
IP address blocks: 193.5.20.0/23 maxlen: 23
193.5.30.0/24 maxlen: 24
193.5.158.0/23 maxlen: 24
193.5.252.0/24 maxlen: 24
193.134.248.0/23 maxlen: 23
194.209.74.0/24 maxlen: 24
212.243.101.0/24 maxlen: 24
2001:918:1ab::/48 maxlen: 48
2001:918:f00::/40 maxlen: 40
2001:918:ff70::/44 maxlen: 48
2001:918:ffb7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:c7:ff:88:9b:3c:d3:97:87:02:20:9b:cc:59:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Mar 25 13:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69c413304e9d313a3835513bf7bad2b5a2c8fdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:c3:11:7a:b0:b4:46:5f:bf:d8:90:85:24:
47:43:1f:85:5f:fe:5b:89:73:41:06:73:99:fc:f5:
06:3a:09:29:db:5e:88:a4:25:77:d5:e8:23:69:20:
03:c1:d8:4a:66:1c:49:ac:93:3a:2e:c5:15:f6:50:
16:79:ca:93:92:43:c0:6a:34:69:21:66:dd:cf:4d:
48:a1:0a:b4:10:9c:73:91:ce:10:67:46:a9:33:55:
f7:ac:42:d7:a1:7c:30:5c:2a:5a:ac:51:2e:07:56:
d5:90:55:81:cc:43:84:0a:d5:96:be:08:d7:a6:d7:
89:09:4e:04:62:90:98:df:6b:5f:af:89:7d:5a:9b:
e3:b9:1a:be:47:a4:4a:ee:74:40:bf:34:42:d9:1c:
23:bd:01:b7:03:e5:c9:39:81:72:95:7e:14:2b:cf:
54:88:1b:5b:4b:fa:96:be:99:85:99:f9:15:fb:67:
31:5e:4a:d2:a7:d4:9f:20:3a:4d:5f:f1:3a:ed:8b:
eb:13:63:66:3b:e2:70:c6:ce:97:6d:23:70:9f:82:
b9:76:3e:94:19:30:d7:1e:fe:b2:24:a1:a8:8b:0b:
a5:88:d7:da:c1:bc:da:d7:3a:98:9d:91:e2:dc:9d:
99:f7:ae:2a:58:f9:29:0d:9c:47:85:c4:06:d5:21:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C4:13:30:4E:9D:31:3A:38:35:51:3B:F7:BA:D2:B5:A2:C8:FD:D1
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/acQTME6dMTo4NVE797rStaLI_dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.20.0/23
193.5.30.0/24
193.5.158.0/23
193.5.252.0/24
193.134.248.0/23
194.209.74.0/24
212.243.101.0/24
IPv6:
2001:918:1ab::/48
2001:918:f00::/40
2001:918:ff70::/44
2001:918:ffb7::/48
Signature Algorithm: sha256WithRSAEncryption
44:33:53:7c:02:c7:60:bc:18:54:1a:16:1f:1d:cc:5c:8e:82:
11:98:5a:8d:21:49:11:e5:40:85:7c:00:4c:c5:75:8b:a7:8d:
70:97:fd:13:f3:88:5a:96:05:2c:88:ed:4b:6b:95:ca:3c:b5:
c8:ca:12:4e:24:6e:45:9b:49:1c:a8:f5:34:5f:f6:0c:e9:49:
95:72:43:73:58:d7:90:d8:e7:50:e8:eb:1a:62:40:a6:69:4b:
35:3a:52:ac:01:7f:2d:cb:d6:f2:9f:4a:5e:8d:4f:ba:22:18:
da:45:20:7a:29:5c:fb:00:00:5a:72:a1:b5:6e:7c:3f:fe:c7:
ba:bb:cb:33:d0:0a:1e:2a:52:f2:f2:c3:39:7b:9c:51:f1:6d:
0d:20:34:13:ce:d9:bc:c0:31:55:f4:e3:44:8f:af:1f:db:f6:
a6:65:14:89:be:f1:c1:6d:d8:81:83:c9:02:46:2f:39:ed:dc:
ef:ad:c1:d2:25:9b:47:aa:a1:7a:2e:7c:13:c6:a9:9f:45:0e:
54:f9:95:ba:de:ad:69:bd:c1:ab:27:8d:8e:25:1e:47:34:18:
04:e0:f7:a6:c6:08:63:bb:ae:3d:fc:9c:8b:c1:9e:47:18:4a:
f7:cf:cb:87:f1:df:3b:cf:0b:da:b7:98:71:d7:9f:eb:7c:4b:
cc:c8:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:35 2025 by rpki-client