Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/oERBKyekvDSX5YoyPJXARtWe_9E.roa
File: oERBKyekvDSX5YoyPJXARtWe_9E.roa (raw, json)
Hash identifier: 1ah9iiJwLzPZi1KDXCtqOLwYJ63Cd/7l1Y9Rv9ztSLQ=
Subject key identifier: A0:44:41:2B:27:A4:BC:34:97:E5:8A:32:3C:95:C0:46:D5:9E:FF:D1
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 02630164
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/oERBKyekvDSX5YoyPJXARtWe_9E.roa
Signing time: Sat 01 Jan 2022 06:06:26 +0000
ROA not before: Sat 01 Jan 2022 06:06:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 193.142.36.0/22 maxlen: 24
212.87.216.0/24 maxlen: 24
212.87.219.0/24 maxlen: 24
212.87.218.0/24 maxlen: 24
91.132.124.0/23 maxlen: 23
93.177.94.0/24 maxlen: 24
93.177.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40042852 (0x2630164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 06:06:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a044412b27a4bc3497e58a323c95c046d59effd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:46:98:8b:37:83:f1:2a:1a:67:5a:22:99:
7f:c2:46:af:12:16:57:be:dc:54:b0:8b:aa:28:2a:
92:ce:07:36:0c:98:61:2b:99:03:35:0d:05:4c:64:
00:8b:db:73:b5:05:0f:8d:91:b3:42:d4:90:a2:ee:
4d:b8:83:aa:62:2f:2c:eb:25:9a:0c:03:17:50:5c:
26:6d:25:29:58:f1:cd:8a:1d:b1:a5:5c:0f:85:e0:
17:9c:4d:f7:33:b3:dc:d3:33:c7:dd:39:bb:3d:77:
eb:c0:b8:43:e9:f7:c8:1a:1f:4c:0c:4e:33:92:97:
81:51:f1:57:4b:ea:35:78:1b:0c:4f:9b:24:80:db:
e7:c6:e4:07:b3:16:f2:15:37:5f:0c:6b:e2:5e:81:
ef:b6:df:21:07:1a:50:a2:56:ab:b5:81:3e:48:ff:
39:60:1b:51:ec:99:e1:77:73:7c:d1:27:d3:73:9e:
60:00:5d:cf:41:69:0b:9f:7e:d3:a7:1b:24:bb:a9:
c0:16:65:2f:8e:6b:52:09:3b:71:5b:e8:02:73:08:
cd:f2:04:aa:3a:67:4c:ba:71:c5:8b:5c:b1:5d:3b:
00:c4:c7:1c:ab:b9:4c:b1:36:fa:42:19:d8:df:04:
6a:09:dd:97:49:67:9b:1a:56:79:ec:b5:4b:16:9e:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:41:2B:27:A4:BC:34:97:E5:8A:32:3C:95:C0:46:D5:9E:FF:D1
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/oERBKyekvDSX5YoyPJXARtWe_9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.124.0/23
93.177.94.0/23
193.142.36.0/22
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:2b:9f:58:c3:1b:fc:43:c8:ba:a0:7e:f4:12:58:3e:90:fd:
88:b2:9b:14:0f:b1:66:2e:ef:55:0d:92:c6:8f:ba:be:ff:14:
1c:91:3d:ad:e4:fd:c2:d7:fb:fb:1d:6c:0a:03:e1:83:63:1b:
3b:a1:18:80:b8:ae:5d:54:08:05:0e:cb:de:40:28:de:80:b9:
76:4b:cf:b0:35:48:cc:35:13:a8:fd:35:fd:ca:04:bb:3d:89:
84:41:e4:ad:cb:80:d6:da:fd:d1:62:00:db:7f:ae:cd:c1:fe:
83:17:17:e4:57:1a:9e:af:65:63:93:06:7f:66:fb:c4:5a:5b:
49:3d:1a:ce:a1:ef:ca:70:ce:b0:b1:d5:04:d3:aa:4f:14:e3:
66:06:6a:c0:82:5a:84:66:97:8e:fa:88:48:21:b6:68:42:23:
16:73:41:a8:28:6b:24:50:5f:c8:8c:c5:fb:90:dd:4b:55:5e:
17:81:4d:dd:c7:a8:31:ae:44:79:6a:80:a9:9c:7c:38:80:e1:
f8:f8:2d:14:c6:27:fb:b7:9b:88:8e:15:08:b3:80:a9:00:af:
20:da:56:b0:e4:3d:df:64:2e:7a:80:b5:c1:7c:fa:1b:8b:b0:
de:a5:6e:01:58:c5:57:d0:d8:74:1a:b4:3b:cc:61:94:8b:97:
ad:ec:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:22 2025 by rpki-client