Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/vLn2pFYg_LuFJRjA9gPdQzCTOuo.roa
File: vLn2pFYg_LuFJRjA9gPdQzCTOuo.roa (raw, json)
Hash identifier: RzXxzCiEqPDcTsNOw72pXXxQ3jmnmMWNiHO/h6I5IFQ=
Subject key identifier: BC:B9:F6:A4:56:20:FC:BB:85:25:18:C0:F6:03:DD:43:30:93:3A:EA
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 01835EC28642CEA1A1D0E9B0F2CBC1AD6DA3
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/vLn2pFYg_LuFJRjA9gPdQzCTOuo.roa
Signing time: Wed 21 Sep 2022 06:35:50 +0000
ROA not before: Wed 21 Sep 2022 06:35:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20766
IP address blocks: 185.57.124.0/22 maxlen: 22
80.67.160.0/19 maxlen: 19
80.67.182.0/24 maxlen: 24
193.23.30.0/24 maxlen: 24
45.94.16.0/22 maxlen: 22
2a0f:6780::/29 maxlen: 29
2a04:9ac2::/32 maxlen: 32
2001:910::/32 maxlen: 32
2001:913:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5e:c2:86:42:ce:a1:a1:d0:e9:b0:f2:cb:c1:ad:6d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Sep 21 06:35:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcb9f6a45620fcbb852518c0f603dd4330933aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:cb:fa:ed:6c:75:fa:3b:eb:7f:7b:21:37:
84:39:7c:97:67:f2:ff:dd:1f:6d:c7:c7:5c:ec:4b:
50:1e:81:c5:b2:89:05:1b:54:55:75:54:15:4e:86:
26:0c:6f:e1:d9:85:13:db:15:21:4f:ef:83:f9:d4:
e7:0d:48:e9:e7:7e:51:08:16:38:6b:eb:8e:f8:e0:
4e:51:b9:ca:f8:26:10:3b:b1:87:f7:dd:2d:f3:47:
b5:96:6b:f1:63:bc:10:d2:eb:fe:5c:87:84:aa:b6:
a4:96:40:0e:ef:ec:07:de:af:05:3b:d9:1d:18:27:
5f:65:f9:71:dc:8b:85:dd:58:19:ca:d7:76:77:07:
2b:2d:91:c5:90:56:09:3d:04:50:27:81:d5:a8:49:
3a:52:dc:cc:50:c3:91:af:28:ae:28:eb:23:e0:95:
5e:12:f9:70:95:cf:94:32:c8:00:bd:67:12:0f:b2:
b7:21:fc:bc:dc:a6:10:47:de:fe:4b:01:60:0b:38:
18:51:0c:d0:e7:7e:ba:68:42:9a:ef:1d:d1:5a:09:
13:af:d3:ec:8b:77:c4:8b:78:01:fe:1c:fd:ff:1d:
24:fc:e8:b4:de:78:a2:de:d9:07:d8:f4:98:1c:14:
c7:29:d7:1a:62:45:4e:68:43:2b:df:26:e0:39:40:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B9:F6:A4:56:20:FC:BB:85:25:18:C0:F6:03:DD:43:30:93:3A:EA
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/vLn2pFYg_LuFJRjA9gPdQzCTOuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.16.0/22
80.67.160.0/19
185.57.124.0/22
193.23.30.0/24
IPv6:
2001:910::/32
2001:913:4000::/36
2a04:9ac2::/32
2a0f:6780::/29
Signature Algorithm: sha256WithRSAEncryption
53:8f:a6:30:a5:0f:8c:f3:24:58:ca:29:d7:ff:a9:3e:88:a7:
99:96:bc:27:9b:08:2b:49:29:d7:b8:77:6a:d6:d2:54:5c:65:
aa:31:50:a3:7a:60:01:99:ac:2a:40:99:f9:d3:2a:65:08:99:
e8:18:8a:3e:e8:20:4f:b7:6a:6d:6b:f4:b2:87:e9:e3:75:82:
0d:1b:5e:bf:b3:d6:39:16:e3:0c:77:f6:1e:44:16:99:b2:c1:
9e:5a:24:b9:e6:67:7e:06:4a:15:e1:fc:4a:ee:f6:6f:b5:84:
db:6c:a5:14:f3:fc:bd:da:37:9e:d4:6a:e1:1c:bd:8b:00:8f:
de:91:1a:5e:3f:2f:e1:67:83:81:0f:17:78:9a:8f:20:0a:3b:
6c:36:ec:05:75:3a:8c:c4:6d:29:0b:58:5b:d6:b5:80:69:54:
b1:f0:0b:3e:98:e7:d5:c2:c1:c2:0a:dc:92:e9:5f:df:73:ea:
7f:af:58:f2:89:1a:48:23:df:23:06:01:aa:d5:20:b7:b6:a4:
b3:f2:9f:af:24:9d:e4:2e:70:27:6a:03:65:d9:95:78:cc:07:
79:34:7c:98:3b:2c:a8:ca:83:ec:87:13:9c:23:ec:98:a3:9a:
82:ab:43:2a:cf:0d:c9:4b:3d:9b:55:7e:71:f8:36:2e:8c:37:
8f:eb:17:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:13 2025 by rpki-client