Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/dCC2LXFHtyuhj2bFK9SpNBsPPfY.roa
File: dCC2LXFHtyuhj2bFK9SpNBsPPfY.roa (raw, json)
Hash identifier: DivhUmLC3Ng8x30LfVNv2YL0KGtlOjFJlo//Z0HjGdc=
Subject key identifier: 74:20:B6:2D:71:47:B7:2B:A1:8F:66:C5:2B:D4:A9:34:1B:0F:3D:F6
Certificate issuer: /CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Certificate serial: 0183360DFD0911DD90C2B0D70D5980057D33
Authority key identifier: 7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/dCC2LXFHtyuhj2bFK9SpNBsPPfY.roa
Signing time: Tue 13 Sep 2022 08:53:49 +0000
ROA not before: Tue 13 Sep 2022 08:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59460
IP address blocks: 91.241.32.0/22 maxlen: 22
91.241.32.0/24 maxlen: 24
91.241.33.0/24 maxlen: 24
91.241.34.0/24 maxlen: 24
91.241.35.0/24 maxlen: 24
194.146.4.0/24 maxlen: 24
194.146.4.0/22 maxlen: 22
185.135.192.0/22 maxlen: 22
185.135.192.0/24 maxlen: 24
185.135.193.0/24 maxlen: 24
185.135.194.0/24 maxlen: 24
185.135.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:0d:fd:09:11:dd:90:c2:b0:d7:0d:59:80:05:7d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Validity
Not Before: Sep 13 08:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7420b62d7147b72ba18f66c52bd4a9341b0f3df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:9f:74:df:17:37:f4:f9:36:bb:f9:11:ae:
11:44:82:48:e3:db:d9:88:45:e7:7d:84:3d:22:9d:
42:6a:98:cd:fa:33:18:1d:6d:4a:71:ed:0d:1b:18:
c1:6c:99:a9:18:92:29:20:78:89:cb:8b:bb:77:b7:
30:c3:39:10:58:fc:00:5c:1b:ae:86:33:d6:1b:d1:
92:24:a1:07:8d:60:31:bd:d4:60:f2:5f:02:26:aa:
09:e9:3c:ca:9b:02:29:e9:22:20:31:24:50:54:73:
e8:9f:a6:96:d7:53:5a:f8:b7:f7:f4:86:ce:80:73:
62:88:39:64:e1:73:e4:00:3b:e9:2b:ce:f0:c6:0a:
80:5c:a3:db:88:25:cc:2b:0b:79:b8:9e:fd:1c:9e:
3a:34:7d:9a:d2:08:61:53:a3:5b:41:d6:fe:dc:4c:
c0:d8:0c:82:df:a6:8e:1e:00:45:bc:ca:fe:15:b8:
cb:d1:bd:a0:95:82:dd:e1:10:69:6e:51:9c:6b:89:
27:01:1e:83:7e:51:7b:92:6a:b6:93:c8:41:05:a5:
2d:09:35:0f:f3:80:a4:6f:7f:4c:a0:e0:65:54:e2:
d0:e1:45:54:e8:79:22:8b:37:d6:6d:a7:a1:62:f7:
5a:40:d3:6e:24:26:00:99:1d:4c:07:f9:44:62:c5:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:B6:2D:71:47:B7:2B:A1:8F:66:C5:2B:D4:A9:34:1B:0F:3D:F6
X509v3 Authority Key Identifier:
keyid:7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/dCC2LXFHtyuhj2bFK9SpNBsPPfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.32.0/22
185.135.192.0/22
194.146.4.0/22
Signature Algorithm: sha256WithRSAEncryption
68:53:34:b9:06:f9:f1:89:ca:60:c0:05:2e:dd:27:77:9b:aa:
c4:44:26:5c:3d:50:24:76:54:a9:dc:31:c6:65:5d:f5:12:d5:
a3:65:52:21:b4:2c:3c:d9:ee:d1:0f:a9:4e:da:2f:1f:a3:54:
d4:ae:3c:18:13:ee:b9:02:14:2d:9a:a8:43:9c:f2:de:d3:c0:
33:5f:14:64:68:a0:7f:c3:e8:e3:27:3a:c8:39:cc:17:af:b3:
b6:82:a3:90:c3:fd:fa:17:8a:b1:10:9a:46:18:7b:0e:b8:43:
5a:ff:88:98:e1:c5:f2:35:a6:a0:ef:49:6f:d8:51:a2:34:84:
f4:b3:6d:6f:20:e5:cf:1a:94:3a:99:f0:4a:8b:f9:68:10:cc:
d8:95:4f:b6:7c:97:13:c0:c7:36:b6:1a:37:2d:0c:16:3a:7d:
e6:7f:f6:b0:b1:25:53:eb:2b:b1:78:7e:77:ce:14:f1:28:71:
3f:65:cb:68:47:f7:c8:61:34:92:ea:75:92:1d:8b:55:1d:9c:
ee:b2:23:a9:6e:8d:51:a6:0b:7c:aa:58:c4:12:0e:98:91:fa:
af:32:30:11:f4:6b:7f:0c:ea:3d:aa:d8:3f:5f:99:08:37:89:
a9:58:31:5f:39:bc:d9:3d:94:05:d1:21:11:07:0a:f1:68:d9:
0a:a2:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:47 2025 by rpki-client