Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/AcSJtAi5TQdPvHQgcblPft0idqM.roa
File: AcSJtAi5TQdPvHQgcblPft0idqM.roa (raw, json)
Hash identifier: v8foW60GD01exv9UkFRsTtp+fbf2JMHn8JjbQ7MR2q8=
Subject key identifier: 01:C4:89:B4:08:B9:4D:07:4F:BC:74:20:71:B9:4F:7E:DD:22:76:A3
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0333D6A1
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/AcSJtAi5TQdPvHQgcblPft0idqM.roa
Signing time: Mon 28 Mar 2022 22:36:38 +0000
ROA not before: Mon 28 Mar 2022 22:36:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.160.68.0/23 maxlen: 24
176.118.191.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53728929 (0x333d6a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Mar 28 22:36:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01c489b408b94d074fbc742071b94f7edd2276a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:df:11:f3:e5:9b:c0:88:89:01:e4:99:fb:
e2:77:58:57:39:47:7b:33:2b:7c:19:c7:34:a6:ac:
f3:f5:fd:33:60:3a:7c:bb:a3:01:18:fa:63:1b:21:
97:18:d0:96:aa:97:0b:4c:93:a4:c7:51:7d:06:1f:
0f:db:e2:d0:b4:98:f6:e2:73:66:fa:88:34:d0:64:
a0:76:8d:97:5f:48:9d:a4:97:62:fe:d0:4b:1e:09:
61:09:7c:3e:4f:9c:51:e0:83:2b:75:47:dd:2d:e1:
92:ad:f8:fa:ca:e3:3d:72:53:ed:1e:fd:57:fe:ff:
7e:98:7a:b1:07:65:dd:b5:84:09:bf:30:b7:9c:2e:
e7:fd:88:27:46:a4:de:84:04:4f:30:f5:b1:bf:37:
6f:15:c9:e2:19:c7:96:0c:b6:5d:6e:9e:ad:ec:c3:
44:ab:59:dc:55:af:f3:de:ce:9c:e2:96:aa:5e:0e:
a1:67:1a:fa:fd:b9:ab:17:d0:0d:61:67:bd:78:21:
85:46:c3:4d:b7:3f:dc:0c:d7:30:56:47:68:19:28:
3d:bf:e3:6d:9b:e8:b5:43:28:17:fc:95:e5:19:9d:
5e:a4:dc:0b:f4:98:fd:01:f7:ff:69:92:88:39:50:
47:e3:20:f9:4d:ef:1c:e6:e0:cc:17:97:4e:c2:25:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:89:B4:08:B9:4D:07:4F:BC:74:20:71:B9:4F:7E:DD:22:76:A3
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/AcSJtAi5TQdPvHQgcblPft0idqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.191.0/24
185.177.78.0/23
193.160.68.0/23
Signature Algorithm: sha256WithRSAEncryption
38:ed:60:20:46:04:47:e0:a6:a9:f7:dc:5d:4a:f4:33:6e:4e:
71:0a:b3:bc:37:9b:36:f2:f0:cd:fd:a7:ad:e4:73:c9:b1:8b:
5a:8a:9b:5a:d4:3b:ef:9f:79:d2:c5:0f:ad:67:ec:d0:d7:ea:
d1:9b:26:bf:45:2b:38:3e:34:48:12:b4:e7:98:1f:58:c7:7f:
68:ea:21:e7:0a:cd:89:61:85:30:ff:57:57:7f:13:2f:5f:be:
65:60:5c:75:49:5e:90:d0:be:52:91:f4:31:c0:7f:61:81:72:
9b:cf:d4:d4:b1:66:3e:94:3c:3b:74:8f:b9:2e:dd:f1:f9:2b:
b4:5c:22:12:a7:97:4d:bc:4f:f5:0e:c5:67:48:2c:81:48:7c:
22:93:75:5e:07:68:86:a4:28:6d:0e:27:32:e5:0f:68:73:1a:
42:76:87:98:f2:ec:c8:b6:75:f2:46:d3:01:8c:08:91:2d:2f:
71:4d:59:46:ec:43:62:00:47:cc:95:51:a1:0d:36:a5:64:e9:
03:9e:f4:4b:8e:41:70:0c:ea:72:cf:da:b9:a0:b5:42:ce:d6:
c5:77:21:62:90:59:18:15:89:39:3d:a4:35:51:91:8e:8a:98:
04:eb:fe:23:01:6b:75:03:de:45:e4:2e:04:12:c2:86:1d:13:
31:42:30:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:20 2025 by rpki-client