Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/m5s3b_GBzI_vqeolAber2reOBw4.roa
File: m5s3b_GBzI_vqeolAber2reOBw4.roa (raw, json)
Hash identifier: C4qMXoy+snDlwoNHMr4H0BxVPms0wdYA0/G8j1Olo6E=
Subject key identifier: 9B:9B:37:6F:F1:81:CC:8F:EF:A9:EA:25:01:B7:AB:DA:B7:8E:07:0E
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0181F732CBE677B1604E21015EFA3EB9DFAB
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/m5s3b_GBzI_vqeolAber2reOBw4.roa
Signing time: Wed 13 Jul 2022 10:55:10 +0000
ROA not before: Wed 13 Jul 2022 10:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 193.160.68.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
84.252.64.0/22 maxlen: 24
77.83.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:32:cb:e6:77:b1:60:4e:21:01:5e:fa:3e:b9:df:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 13 10:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b9b376ff181cc8fefa9ea2501b7abdab78e070e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:88:b7:47:1e:97:3f:d8:30:c1:c4:8b:02:
36:02:b1:33:00:3c:4a:88:e4:cf:77:37:07:5b:a5:
e4:64:23:89:5f:17:73:ee:f0:32:ab:af:09:ab:57:
7a:3b:7c:3b:02:8d:ae:36:2c:a5:16:8d:61:a8:c7:
6b:52:f4:55:c8:6b:f1:2c:fd:cf:ee:3f:d3:02:dc:
9b:3d:ba:7c:41:fe:fc:18:c2:bb:6a:79:fe:0b:21:
78:4b:70:b1:e9:f0:d1:4c:1b:82:0b:fb:de:3a:1f:
42:74:c5:c4:6f:5d:07:55:c6:35:23:16:46:f3:be:
12:49:2c:f4:49:1e:42:d4:8c:9c:bb:f3:2e:e9:43:
d4:8c:4b:64:fa:42:86:1f:1d:87:0a:dd:a0:96:a2:
bc:2d:f9:85:93:6c:66:72:ed:e9:f0:af:81:15:ee:
5e:0f:99:a2:68:d3:08:4a:e7:91:04:f6:bf:d1:48:
ff:ca:81:7d:dd:9b:56:05:b0:e7:e8:19:12:2c:dc:
38:0d:81:f2:4c:9c:5f:ed:e9:a2:03:63:36:04:31:
8f:df:ca:06:ff:80:d6:be:85:e0:04:2b:72:e7:7c:
4a:05:9d:07:2e:b5:75:e3:4c:2e:b8:4d:b0:a8:57:
77:66:a4:25:68:7d:2d:93:a2:af:a6:2b:61:4e:ae:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9B:37:6F:F1:81:CC:8F:EF:A9:EA:25:01:B7:AB:DA:B7:8E:07:0E
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/m5s3b_GBzI_vqeolAber2reOBw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.20.0/22
84.252.64.0/22
176.118.188.0/23
176.118.191.0/24
185.177.76.0/23
193.160.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:35:df:3a:de:78:eb:10:6f:c3:60:a2:f8:ee:b7:c4:5f:69:
86:f1:d8:30:b2:70:c2:a7:8d:78:b5:f8:23:49:9a:e8:1d:eb:
b0:76:ff:97:8e:45:12:f2:1e:f3:91:18:1b:9c:6b:0e:e0:a7:
c6:8a:00:b7:e7:b4:07:d2:8e:6d:b7:ff:16:45:2e:fb:58:47:
77:e2:36:e0:a1:3e:47:f0:75:0f:41:f1:81:25:59:70:ab:98:
1d:c6:fc:cc:2a:6d:27:96:39:06:6c:ec:54:54:da:56:82:12:
71:f1:71:15:e7:a7:eb:25:ff:20:63:91:02:24:e5:60:43:0a:
f7:a6:e7:cf:5a:b9:01:25:ed:b0:58:5f:e2:ab:01:4b:d5:42:
0e:f3:5d:6e:04:ea:80:1e:7e:f9:48:8d:90:41:58:bb:1f:28:
75:e6:ac:ee:c1:0c:db:ce:4b:23:d0:45:c1:af:fb:ad:73:59:
51:87:18:b1:b4:96:fc:f3:a8:d8:c3:4b:1e:a2:3f:80:98:b0:
fd:a3:b3:ca:50:a2:bb:b6:9a:77:0e:32:a1:6e:4b:6f:76:0e:
2b:00:67:1c:22:07:d2:db:84:5a:c1:46:9e:ba:9f:ce:63:15:
12:5e:57:62:98:08:9d:50:69:c4:21:a2:09:cd:7a:9e:f5:6c:
63:dc:0b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:26 2025 by rpki-client