Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/h4k4YYeB5IZKRYFChys9laZ7gY4.roa
File: h4k4YYeB5IZKRYFChys9laZ7gY4.roa (raw, json)
Hash identifier: wdPMyL4F4iTwCpMWoHCODqnlVw+6QbbTByOQEKglROA=
Subject key identifier: 87:89:38:61:87:81:E4:86:4A:45:81:42:87:2B:3D:95:A6:7B:81:8E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01866FCC2CDCF1BC6C6CF8B67440DFEEF11D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/h4k4YYeB5IZKRYFChys9laZ7gY4.roa
Signing time: Mon 20 Feb 2023 17:08:17 +0000
ROA not before: Mon 20 Feb 2023 17:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 212.221.0.0/17 maxlen: 24
46.33.64.0/19 maxlen: 24
77.77.128.0/18 maxlen: 24
213.251.0.0/18 maxlen: 24
212.115.128.0/18 maxlen: 24
185.160.40.0/22 maxlen: 22
213.200.64.0/18 maxlen: 18
195.143.0.0/16 maxlen: 24
141.136.96.0/20 maxlen: 20
194.121.52.0/22 maxlen: 24
213.254.192.0/18 maxlen: 24
89.149.128.0/18 maxlen: 24
77.67.0.0/17 maxlen: 24
87.119.64.0/18 maxlen: 24
134.222.0.0/16 maxlen: 16
212.222.0.0/16 maxlen: 24
2001:668::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:cc:2c:dc:f1:bc:6c:6c:f8:b6:74:40:df:ee:f1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Feb 20 17:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=878938618781e4864a458142872b3d95a67b818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:6a:54:37:d6:bf:a4:59:f2:de:7b:a5:55:
b6:39:9d:5b:f5:40:92:c4:61:6d:a6:ec:ec:6e:2c:
4f:1b:7c:4f:c1:23:66:13:c1:6e:d0:58:90:3a:20:
10:19:0e:51:fe:cf:d6:31:25:e0:85:db:be:77:b3:
d9:15:98:e7:c3:f2:09:1c:cd:8a:8b:80:dd:82:7c:
87:d1:56:24:a5:13:ae:17:76:bf:be:ef:cd:c4:f8:
51:24:e0:51:b4:7d:9a:d5:af:3a:29:92:6f:ca:a8:
0d:4c:57:55:c4:8f:82:de:de:f6:3f:84:0b:38:63:
90:9d:8d:96:b1:0e:58:0b:cb:c0:06:1f:e7:e7:6e:
78:fd:2d:c8:97:de:fe:fb:e6:fb:8a:e0:d4:e5:06:
b8:5c:46:61:7d:3c:29:2b:96:23:56:bd:8b:26:4f:
89:4a:eb:45:ec:dd:e5:73:84:80:11:6a:4f:48:2a:
96:9f:76:78:28:ce:57:c2:cf:9c:52:e9:5c:f4:6d:
ad:00:ca:c2:28:e9:83:ea:bb:63:41:b0:dd:bb:6e:
eb:34:17:b1:05:44:de:1c:33:6a:8e:76:72:e5:47:
03:96:06:0e:47:15:74:39:11:93:83:a9:29:86:7f:
72:7e:6f:4b:c6:b4:65:d0:49:46:a9:57:92:60:03:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:38:61:87:81:E4:86:4A:45:81:42:87:2B:3D:95:A6:7B:81:8E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/h4k4YYeB5IZKRYFChys9laZ7gY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.64.0/19
77.67.0.0/17
77.77.128.0/18
87.119.64.0/18
89.149.128.0/18
134.222.0.0/16
141.136.96.0/20
185.160.40.0/22
194.121.52.0/22
195.143.0.0/16
212.115.128.0/18
212.221.0.0/17
212.222.0.0/16
213.200.64.0/18
213.251.0.0/18
213.254.192.0/18
IPv6:
2001:668::/29
Signature Algorithm: sha256WithRSAEncryption
ad:e3:6f:21:df:83:4a:f0:10:c1:ab:ee:32:15:99:38:05:02:
8b:1d:38:a4:63:67:39:c9:41:c4:2c:f7:1b:a8:92:13:36:e1:
e5:71:d1:90:09:81:51:88:92:f7:0b:4a:5b:a3:c2:b0:c1:99:
e1:c9:f8:02:37:03:c9:9a:ba:9d:2a:3a:aa:17:26:df:cf:40:
3b:9c:2c:b5:7d:64:4a:cc:2a:2a:87:49:ea:6d:4d:63:d8:b5:
4d:f4:d2:13:8c:d0:f5:13:1b:19:e7:20:69:24:ca:ff:0f:37:
78:04:e8:06:17:e7:5b:95:48:bd:65:94:82:38:c2:7f:41:8a:
40:5e:9f:13:d6:d7:35:5f:90:3f:54:34:19:53:5e:e3:58:ef:
ce:ce:61:cc:c6:2a:97:cf:28:c8:0a:e5:7c:ff:8d:1a:e7:b4:
32:fd:5a:95:80:3b:f6:b4:98:85:0f:ce:92:61:3e:d9:ad:f5:
dc:6b:11:0d:da:16:a0:cc:9e:57:e0:a4:11:47:be:a1:8e:f8:
96:fb:15:c8:09:b8:38:46:7c:c3:0d:62:f5:d9:09:15:da:90:
54:df:d3:55:ec:8c:2f:28:33:f4:dd:e2:af:ee:00:f2:5f:06:
22:3b:16:8d:57:46:e2:0a:d1:83:da:76:20:22:70:3a:89:0a:
44:e8:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:09 2025 by rpki-client