Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2APipa7bOAYvb9bsK3-mUxpcOuU.roa
File: 2APipa7bOAYvb9bsK3-mUxpcOuU.roa (raw, json)
Hash identifier: pZ0COpprtbml+dJT8oAHEWyNLiHj77Z1//hoHtH00wk=
Subject key identifier: D8:03:E2:A5:AE:DB:38:06:2F:6F:D6:EC:2B:7F:A6:53:1A:5C:3A:E5
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0193794F2522FAF3C02C02B499ADF55A8548
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2APipa7bOAYvb9bsK3-mUxpcOuU.roa
Signing time: Fri 29 Nov 2024 19:04:10 +0000
ROA not before: Fri 29 Nov 2024 19:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 93.190.12.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.153.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:79:4f:25:22:fa:f3:c0:2c:02:b4:99:ad:f5:5a:85:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 29 19:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d803e2a5aedb38062f6fd6ec2b7fa6531a5c3ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:0c:9b:8c:42:b7:1c:40:c9:a4:31:e5:fe:
7d:4c:2d:64:bd:b2:d5:f9:3a:f6:c8:55:7a:29:db:
f4:86:98:8f:79:99:e9:44:cf:03:24:ff:71:e4:23:
39:5c:b1:5c:a0:0f:56:92:2b:15:3c:25:55:ad:25:
0a:9a:ba:4c:b3:72:e4:2c:b5:2b:d7:45:ea:d5:08:
29:a5:60:61:21:6b:4d:d1:0c:42:fb:b2:13:f2:d1:
7c:2d:85:85:89:dc:9c:81:f2:61:48:17:43:5c:66:
71:f2:69:12:3f:d2:b1:0a:ff:ec:f0:73:ef:1b:b3:
0b:64:dd:40:0c:f6:42:e9:50:99:21:80:fa:b3:7f:
c4:62:1d:28:ee:16:1f:48:39:c3:f7:32:62:c2:6a:
56:91:82:ae:7c:68:84:b5:ca:03:77:ee:9d:2e:f0:
eb:07:60:3a:ac:e7:4d:e6:46:e6:a7:8a:d2:c2:dd:
c3:b0:b5:07:8f:7a:0e:b8:02:1a:39:f1:17:10:66:
96:9a:46:ed:2d:8b:49:a3:6c:7a:5a:95:63:51:f7:
88:5b:4a:f1:ac:fa:c1:7b:dc:84:f8:98:df:2e:28:
6d:11:53:ee:1e:ac:70:ba:90:82:71:96:ba:93:7e:
b8:7f:84:06:b2:24:17:00:31:d4:32:f5:a4:cb:cd:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:03:E2:A5:AE:DB:38:06:2F:6F:D6:EC:2B:7F:A6:53:1A:5C:3A:E5
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2APipa7bOAYvb9bsK3-mUxpcOuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.12.0/24
109.236.51.0/24
160.20.109.0/24
185.86.6.0/24
185.243.181.0/24
185.254.28.0/23
185.254.31.0/24
185.254.239.0/24
193.35.152.0/23
193.35.155.0/24
193.160.143.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f1:a0:cd:3c:ba:fb:25:77:d5:94:62:28:0a:09:29:b3:94:
05:f0:1f:3f:cb:fc:27:17:84:64:bd:40:fc:dc:1a:ee:ec:ee:
d2:51:a1:63:a3:68:87:9f:93:64:03:23:9b:38:dd:6c:83:9f:
3c:05:58:2f:38:ff:5b:60:80:34:34:82:66:f0:db:ea:88:3e:
7c:34:6b:cd:8a:8e:28:a2:21:b6:f2:02:a2:75:ff:43:48:84:
7d:c9:a6:81:1c:88:62:3d:7e:68:95:bd:ce:24:10:cc:14:bc:
a3:f6:c8:55:ed:33:19:cc:64:be:f7:c6:a8:58:97:1d:b9:c4:
ab:db:8d:de:ab:55:f0:a3:24:15:2e:a8:81:1c:7a:f1:8c:8a:
c5:48:61:14:f1:0c:df:7d:8b:56:92:f0:0f:51:1b:1e:32:d2:
ce:9d:b9:a0:a3:64:81:e3:4a:76:57:b6:c6:bb:9b:0f:ea:18:
52:1d:02:c7:3d:9e:fb:35:cf:67:d1:e1:cf:91:1b:51:26:91:
b0:f8:ec:d7:81:6b:1a:de:2b:89:37:02:fc:9c:b4:0b:12:26:
68:2d:28:40:73:5d:b3:d3:17:af:7e:9f:7d:ed:a5:c5:51:0a:
f2:90:8c:a5:6b:f2:f9:30:6f:52:d3:b0:83:17:bb:ae:e7:ed:
36:2a:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:47 2025 by rpki-client