Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FpBTn93YcfO2pIN1IqsyVuRdzKQ.roa
File: FpBTn93YcfO2pIN1IqsyVuRdzKQ.roa (raw, json)
Hash identifier: pq9mDIeZ34OpP/lv9oPy1gzV8OmlerE3SaSSFZznfHQ=
Subject key identifier: 16:90:53:9F:DD:D8:71:F3:B6:A4:83:75:22:AB:32:56:E4:5D:CC:A4
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0181D859BDD7F00E57E2D76FF7303EEF4863
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FpBTn93YcfO2pIN1IqsyVuRdzKQ.roa
Signing time: Thu 07 Jul 2022 11:09:28 +0000
ROA not before: Thu 07 Jul 2022 11:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 176.118.189.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
84.252.64.0/22 maxlen: 24
77.83.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:59:bd:d7:f0:0e:57:e2:d7:6f:f7:30:3e:ef:48:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 7 11:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1690539fddd871f3b6a4837522ab3256e45dcca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:26:f8:44:33:92:4d:e6:13:35:f5:20:a8:
4a:06:42:8f:5e:6f:90:0a:d2:3b:55:e7:fe:c6:1f:
1f:3c:c1:13:8d:47:6f:92:00:f2:4c:19:ff:e5:a0:
79:4d:0a:b5:4b:c5:0f:3b:bd:18:38:e7:5e:e9:d5:
a0:9c:98:10:61:ca:02:b2:5b:49:ed:a5:78:0a:7e:
b8:fa:9a:11:5b:74:fc:6e:9b:f6:bb:0a:ce:76:0d:
d3:2e:d0:72:c6:19:4a:40:6d:fe:08:cd:83:ae:f3:
c1:17:a7:7e:41:4d:ce:ee:07:fb:37:5b:08:ce:be:
09:5c:e3:0f:ef:07:eb:11:5e:42:bc:69:f2:76:54:
88:22:64:f8:46:6f:03:e7:b3:83:76:ca:e3:f8:02:
f0:18:c7:11:25:a5:a1:03:c0:06:f3:c5:08:17:9a:
25:bb:31:6d:b9:30:e4:eb:64:81:71:df:b2:7a:9d:
67:48:6b:21:1f:7d:e1:d1:43:ff:6f:c7:ce:47:56:
b3:3d:b9:2f:d9:ff:7e:63:0f:a6:87:d8:e4:53:ec:
48:69:b7:33:c8:94:52:6c:ea:51:30:cb:12:28:3c:
4a:d0:da:a3:e5:cc:da:48:2b:77:ad:79:d4:a1:e2:
12:38:b7:be:40:0a:dd:3d:6e:29:d8:65:b2:79:39:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:90:53:9F:DD:D8:71:F3:B6:A4:83:75:22:AB:32:56:E4:5D:CC:A4
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FpBTn93YcfO2pIN1IqsyVuRdzKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.20.0/22
84.252.64.0/22
176.118.188.0/23
185.177.76.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:0e:48:ef:c7:5b:f4:b6:91:f1:a1:2e:9b:d8:93:89:8d:0e:
b6:15:a8:c4:e0:8f:50:bb:3f:06:ec:52:30:44:cb:c6:67:7d:
38:2e:c5:80:10:fd:1d:34:89:83:ab:f8:e6:88:58:5e:bc:8a:
5a:03:46:a6:ea:51:e6:61:7b:31:92:34:c6:b6:25:e4:89:42:
ce:be:e7:ea:f3:59:61:8c:3a:4a:62:76:92:8a:4b:c5:f0:24:
e3:4f:8a:25:7e:90:0c:1b:89:b9:a1:b0:e2:35:cc:b7:8a:8f:
ba:92:a6:e6:ab:97:c7:c8:00:63:1a:a0:0d:25:dc:a9:30:1c:
db:ae:b5:4c:d4:c0:39:a5:86:ee:d1:2b:ac:5e:d1:f1:33:2e:
2e:1e:f3:40:00:fe:bf:9b:da:4b:e0:53:ed:93:2e:1f:db:de:
b0:c1:36:73:07:ab:8b:00:3d:6e:9e:6d:e5:62:d8:c3:85:44:
47:3f:f2:09:e2:4f:b8:03:53:40:cc:b2:7b:a9:26:7e:23:62:
cf:43:d0:11:2f:79:cd:76:b6:9f:ad:98:24:b1:c5:8b:10:ef:
ec:2e:a2:d6:73:94:75:7b:3e:5a:dd:d1:dd:1c:01:3a:52:43:
50:69:c4:de:db:c6:9b:6c:46:a9:e1:6b:ef:69:e7:3d:6b:c3:
ee:ae:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:40 2025 by rpki-client