Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/R_9LOMY7WTRAcYWczAgzeWuFUtg.roa
File: R_9LOMY7WTRAcYWczAgzeWuFUtg.roa (raw, json)
Hash identifier: mn81AbrCpGqo2hGGZdBkgXQnzp7k2mXF1ZIZ6S7s/+4=
Subject key identifier: 47:FF:4B:38:C6:3B:59:34:40:71:85:9C:CC:08:33:79:6B:85:52:D8
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03D4E3F8
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/R_9LOMY7WTRAcYWczAgzeWuFUtg.roa
Signing time: Tue 08 Mar 2022 14:51:13 +0000
ROA not before: Tue 08 Mar 2022 14:51:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.198.66.0/24 maxlen: 24
45.152.240.0/23 maxlen: 23
193.142.4.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64283640 (0x3d4e3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 8 14:51:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47ff4b38c63b59344071859ccc0833796b8552d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:57:12:b0:da:9a:ed:97:30:9d:83:e5:19:
6a:c1:b2:8a:cc:cf:9b:18:4f:f6:7c:5f:59:06:a7:
bc:b0:46:7d:28:a7:3f:0e:8c:7d:19:ba:45:8e:c1:
d4:49:c0:d4:4e:3b:df:be:7f:d3:81:32:94:b8:3c:
f6:0d:95:08:2d:00:d5:39:a4:0f:d3:c2:a6:f7:ad:
a3:0c:18:53:43:6e:0d:b6:3f:e3:37:76:78:ff:9a:
28:46:11:25:01:87:1b:30:6a:a0:ef:52:7b:44:a7:
4c:6c:1d:f5:e0:9f:c5:8a:0c:87:c6:ea:9b:0a:c3:
6b:0f:44:37:af:c3:30:a0:33:b4:f6:8f:bf:ec:a3:
11:7d:68:ba:d3:e5:17:0c:da:07:de:62:88:99:7a:
60:59:1c:29:93:2f:56:bf:b6:45:fa:76:d9:db:4d:
8c:d5:13:a8:ef:5f:a5:b1:05:70:5c:4d:bb:48:9f:
e4:02:fc:69:ed:c7:8a:06:ff:6a:c5:c7:f1:a0:8b:
1c:b5:2f:da:01:90:b7:57:b0:32:60:7d:f4:ac:dd:
db:08:ff:9d:b9:af:18:8d:f1:bc:a6:ad:50:99:e1:
bc:13:6e:eb:15:08:22:72:33:7b:8e:c0:42:75:13:
4d:ea:f7:61:6c:b8:5b:57:be:ad:82:76:ea:20:d7:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FF:4B:38:C6:3B:59:34:40:71:85:9C:CC:08:33:79:6B:85:52:D8
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/R_9LOMY7WTRAcYWczAgzeWuFUtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.198.66.0/24
193.111.125.0/24
193.142.4.0/24
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3e:7e:43:2a:09:19:b8:11:f3:df:ae:c8:08:00:35:ae:af:
98:cb:a2:ec:18:31:88:20:77:e9:d1:55:2e:03:3f:27:6a:2e:
47:af:a7:65:f4:d2:23:1f:84:19:9b:bc:ae:50:5a:b7:9e:9e:
0a:40:56:63:be:77:af:d9:ca:df:41:df:37:3a:bc:f4:7a:5e:
9f:65:70:03:39:9d:6e:de:8b:59:eb:0f:85:2f:c7:59:c8:69:
66:34:d6:36:45:5b:8f:3c:44:12:4a:ec:67:07:09:8c:98:19:
e6:f8:bd:3f:7e:88:f8:89:9c:cf:9b:bf:ad:8c:90:8e:d0:0e:
51:99:0c:26:a4:a4:3c:f8:8a:59:fa:60:6b:9d:0d:cf:8e:23:
8d:9b:06:c3:c7:bd:45:6b:de:57:39:ee:10:0c:38:fa:5d:09:
d3:13:86:05:76:87:4e:74:90:43:39:17:e5:43:eb:98:f4:c6:
89:ab:26:a0:3b:d0:de:72:59:6f:1f:3d:cc:5e:bb:d1:12:ff:
9a:59:a8:12:b5:ac:32:02:c6:67:5a:06:f3:8e:47:b3:81:ee:
d0:64:e5:38:e8:a8:ee:eb:06:cd:69:62:d9:25:7a:ac:8c:2b:
ef:12:91:32:c5:c1:a9:be:70:a8:6e:71:d9:21:59:a6:ea:ec:
f0:5a:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:54 2025 by rpki-client