Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/53w0dh44jcN-2dkmhnqSIMfu37Y.roa
File: 53w0dh44jcN-2dkmhnqSIMfu37Y.roa (raw, json)
Hash identifier: ufqebxcxML0331/RSxN88bcDpuvJl+4XzY522wAVhGA=
Subject key identifier: E7:7C:34:76:1E:38:8D:C3:7E:D9:D9:26:86:7A:92:20:C7:EE:DF:B6
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0261251A
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/53w0dh44jcN-2dkmhnqSIMfu37Y.roa
Signing time: Sat 01 Jan 2022 06:06:25 +0000
ROA not before: Sat 01 Jan 2022 06:06:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.160.68.0/23 maxlen: 24
176.118.191.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39920922 (0x261251a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 06:06:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e77c34761e388dc37ed9d926867a9220c7eedfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:0c:c0:4a:6c:65:f4:24:bc:fd:67:95:b7:
99:34:24:dd:ad:ec:93:8c:e9:f7:b1:d0:d4:62:b0:
da:d4:68:09:d0:c3:4f:dd:f9:66:15:25:d5:13:0d:
f3:d5:7f:9b:56:ba:e5:5f:8c:de:e4:0f:9b:61:c1:
1b:6f:6e:50:4e:07:43:26:8e:ce:5a:87:e2:51:12:
d6:3c:97:55:ee:ac:53:b7:41:59:36:ee:86:f8:d0:
f6:c4:41:81:2d:15:7a:b0:08:19:18:8f:40:0a:fc:
7c:7a:46:fc:a2:a2:84:2d:7f:ee:56:f4:e9:6b:47:
2a:5d:8d:ee:4f:ec:42:57:54:ae:51:26:45:2a:b8:
d5:57:ab:e9:25:90:02:db:5c:fc:bc:74:ac:99:60:
e3:12:25:46:c5:43:b3:5c:5e:34:d8:c2:f3:f2:bd:
3f:7a:d2:60:16:d9:7b:72:e4:ef:b7:ca:92:90:87:
d5:60:1d:b0:58:ff:2e:7e:dc:05:d1:c5:37:59:30:
d4:31:b3:ee:7a:f0:fa:be:13:7e:25:63:d2:34:af:
b7:77:92:bd:cc:c8:13:6a:69:24:09:78:78:b3:a3:
02:12:62:ae:07:91:8f:9e:d0:75:aa:ae:6e:84:1e:
2e:f3:b1:45:b9:82:86:dc:dc:59:5e:89:25:ec:d1:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7C:34:76:1E:38:8D:C3:7E:D9:D9:26:86:7A:92:20:C7:EE:DF:B6
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/53w0dh44jcN-2dkmhnqSIMfu37Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.191.0/24
185.177.78.0/23
193.160.68.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:a7:3f:c2:9e:27:02:39:e5:a5:e9:78:fe:5c:89:74:70:f1:
a1:f4:dc:71:a5:98:b7:b5:e5:24:1f:d4:2e:d5:c9:3a:60:4d:
24:9c:c0:ee:86:fd:5f:d6:42:eb:82:39:4d:7c:8e:8e:b7:66:
61:0e:f3:98:af:80:d2:e8:39:a1:0e:27:6a:a1:c7:4d:92:8f:
52:88:2a:8b:28:2f:34:16:71:e3:66:8c:46:f2:8a:af:c9:b3:
24:e0:fa:f1:8e:94:1b:ca:0d:65:2b:b3:9a:7a:21:21:30:24:
2f:7e:52:ed:69:fb:ad:e0:7e:f0:af:53:1c:ed:63:f3:86:1b:
c1:71:21:ed:64:04:96:41:a4:2e:a9:e8:2e:40:ab:c9:ba:19:
74:51:44:5a:a4:d3:01:3b:d4:4b:da:d5:a8:90:0c:9f:14:f2:
bb:16:4b:d4:df:9e:32:90:af:cf:25:01:75:12:f7:9e:64:65:
7a:14:84:6c:99:04:ea:b5:bc:60:26:b3:d4:4f:82:b0:c2:bf:
99:af:e2:5e:2d:6d:68:cf:ce:75:6f:1f:c2:3a:c5:52:db:7c:
e0:25:8a:94:fb:cf:85:13:77:37:70:f6:bb:09:b8:71:6d:7f:
cb:56:62:8e:db:36:7d:93:b9:7e:06:af:90:68:33:9b:d3:01:
94:b5:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:55 2025 by rpki-client