Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/afHM2ye8uQqhBIzgYmtGw5cpue0.roa
File: afHM2ye8uQqhBIzgYmtGw5cpue0.roa (raw, json)
Hash identifier: 7cjhyFfy8weQPdz5IzXWETnkeCiP2lGblJPitF4sA/I=
Subject key identifier: 69:F1:CC:DB:27:BC:B9:0A:A1:04:8C:E0:62:6B:46:C3:97:29:B9:ED
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0193CB016D655A5D2CFDFA6FDF78EEECCDD9
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/afHM2ye8uQqhBIzgYmtGw5cpue0.roa
Signing time: Sun 15 Dec 2024 15:48:08 +0000
ROA not before: Sun 15 Dec 2024 15:48:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 93.190.12.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cb:01:6d:65:5a:5d:2c:fd:fa:6f:df:78:ee:ec:cd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Dec 15 15:48:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69f1ccdb27bcb90aa1048ce0626b46c39729b9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:b2:24:ca:92:e4:28:7e:fe:48:c4:b5:51:
a5:ec:7e:c1:85:4b:a2:0e:02:6a:cc:fe:0d:a1:7c:
90:01:60:ae:8b:f4:6b:82:3d:d6:af:12:55:96:93:
1d:92:6c:03:5a:65:8a:3c:cf:8f:60:f7:ba:a5:7d:
2d:78:ff:05:40:87:b5:c4:87:0d:d7:35:e0:a9:bc:
79:ab:23:9f:19:81:4f:9a:6d:da:8b:c5:6d:af:39:
e4:90:3e:ae:77:9f:ed:42:3d:ad:4a:32:15:6a:71:
24:01:66:be:30:1b:c4:6f:4d:84:ac:ce:91:1d:b3:
40:df:6a:9c:6a:b5:b0:e6:12:4e:b3:11:04:86:cd:
ab:46:82:77:30:2e:6d:58:79:46:2f:83:3d:9a:8b:
80:8c:10:30:1f:01:f8:06:5b:d7:4b:ee:13:41:33:
50:0d:6d:fb:46:9f:70:1c:b1:45:6d:16:1e:5e:9d:
b3:0d:61:91:da:50:8a:53:1a:3a:0f:fb:9c:64:05:
33:45:9f:29:48:0e:4e:e1:70:9a:2c:a7:70:1d:a8:
92:fd:ac:e0:c2:cc:b3:58:36:f2:49:29:c4:d4:70:
22:ef:8d:7b:61:a6:32:2c:57:51:a1:91:22:b4:9b:
12:20:21:a7:75:57:61:bf:fa:39:11:0d:d9:d2:b7:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F1:CC:DB:27:BC:B9:0A:A1:04:8C:E0:62:6B:46:C3:97:29:B9:ED
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/afHM2ye8uQqhBIzgYmtGw5cpue0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.12.0/24
109.236.51.0/24
160.20.109.0/24
185.86.6.0/24
185.243.181.0/24
185.254.28.0/23
185.254.239.0/24
193.35.152.0/24
193.35.155.0/24
193.160.143.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ec:b7:8e:08:49:89:6c:14:55:c5:45:ce:6e:41:54:2a:40:
6e:b8:6b:b8:aa:2a:44:cf:ce:6f:23:b6:21:7e:21:b9:86:96:
29:0d:cb:b9:6a:70:2c:7b:ff:d9:02:83:a9:d0:b1:4a:5d:09:
d4:77:b5:72:21:06:55:ed:a4:da:e7:06:3d:99:53:04:4f:18:
ae:8c:ea:15:fe:77:ee:ee:01:13:08:37:e1:f0:8f:2b:d8:db:
94:9c:d1:6b:83:e4:af:ce:00:d4:e2:06:21:7f:fb:1f:c3:c7:
6b:35:7c:60:c6:15:0b:17:2c:94:e6:60:3e:3a:a3:f3:d9:a2:
c5:48:70:36:61:65:5c:61:01:44:5d:dc:9e:ef:61:9f:1a:48:
d2:68:6b:d4:4d:ce:59:40:cd:ff:85:c7:c9:b8:21:70:a1:7d:
1b:70:d2:08:58:c8:80:36:c9:19:44:07:91:95:1b:39:0e:50:
50:40:e7:e3:48:f5:1c:a8:e2:0f:91:a7:64:ae:5f:94:d2:fe:
85:1d:ab:86:0b:5a:25:21:b8:a3:cb:c6:f6:2d:b4:f0:54:e1:
a4:d8:bd:ff:20:b4:2f:78:4a:30:96:65:a6:58:f0:22:bf:cf:
f2:6b:35:e6:e7:f1:06:8f:b5:63:fb:77:45:0c:91:03:73:86:
f4:b7:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:50 2025 by rpki-client