Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/106tjtweNFLGIibNtwP1RcNjFQY.roa
File: 106tjtweNFLGIibNtwP1RcNjFQY.roa (raw, json)
Hash identifier: KAIFJE4P/4GcSxFtbWny2vhPUlTgwjipN0SAbFGYvTM=
Subject key identifier: D7:4E:AD:8E:DC:1E:34:52:C6:22:26:CD:B7:03:F5:45:C3:63:15:06
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 01865C0E77A0856732B6674379522613F9C0
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/106tjtweNFLGIibNtwP1RcNjFQY.roa
Signing time: Thu 16 Feb 2023 21:08:17 +0000
ROA not before: Thu 16 Feb 2023 21:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 79.139.52.0/22 maxlen: 24
95.178.8.0/21 maxlen: 24
116.50.16.0/21 maxlen: 24
83.142.200.0/21 maxlen: 24
198.14.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:0e:77:a0:85:67:32:b6:67:43:79:52:26:13:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Feb 16 21:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d74ead8edc1e3452c62226cdb703f545c3631506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:e8:aa:4b:33:05:17:74:a1:04:0c:fc:c5:
d2:e5:55:aa:4a:35:ef:e0:94:cf:9d:bf:c9:4d:b9:
cd:31:b9:3b:3f:e8:3b:a5:85:f5:f0:b7:ac:56:c8:
7a:b0:c0:55:ee:f0:40:79:0e:f0:3c:52:14:1e:b2:
64:66:d5:eb:e9:fe:48:cf:18:51:f6:00:6c:bc:26:
9b:05:be:26:4c:50:a2:6d:bb:e3:be:db:27:79:88:
8e:da:44:f0:67:c5:de:f0:86:86:5f:bb:1f:01:20:
70:02:68:35:b2:be:bf:6c:61:6c:da:8b:b7:8a:54:
d8:7e:0f:74:59:59:07:64:53:22:f9:ca:f9:5b:6e:
c8:72:cd:1c:8d:75:88:11:7d:05:53:a3:57:f7:89:
6b:87:7e:03:07:09:a6:a2:ba:9e:9b:cb:46:81:08:
56:51:06:06:09:3d:2b:90:c4:c2:40:15:95:98:78:
9d:61:5f:cf:5d:4c:11:03:d5:ef:4d:57:98:0f:c7:
8f:2e:3d:48:37:c6:dc:2e:92:ee:60:d1:33:61:33:
1b:5d:03:ce:9b:1d:ed:6c:fb:51:6a:f2:7f:3f:24:
99:9b:94:5b:ed:1a:30:32:85:96:73:67:ed:d4:e3:
ff:41:5e:03:d0:4f:aa:2f:db:60:83:ab:72:56:c8:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4E:AD:8E:DC:1E:34:52:C6:22:26:CD:B7:03:F5:45:C3:63:15:06
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/106tjtweNFLGIibNtwP1RcNjFQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.52.0/22
83.142.200.0/21
95.178.8.0/21
116.50.16.0/21
198.14.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:31:55:7e:a0:e1:d7:49:22:6d:7e:a9:8c:2f:94:74:51:1c:
7d:0b:85:8b:11:06:0f:69:1a:e7:93:6d:76:10:22:41:8d:91:
08:4c:99:79:18:19:60:a5:85:46:2b:e5:07:fb:c3:44:94:12:
36:92:b2:65:db:3d:27:44:a9:5d:44:75:9d:f4:63:03:ec:25:
35:dd:c1:94:6c:6b:42:04:e0:1c:7f:ea:da:aa:43:44:93:df:
47:bf:68:d2:47:f7:0d:61:d3:c4:d0:12:45:a2:64:82:7c:93:
a2:fd:ed:f0:4f:09:41:cc:09:76:fb:6d:7f:76:a7:88:33:12:
5b:98:8e:8a:0d:06:19:87:b9:0a:86:d9:3a:74:06:e3:f3:6b:
c3:e8:5a:27:a9:ce:41:47:fd:c6:ad:13:5b:6c:a6:7b:f2:19:
1b:27:6f:60:cd:37:4f:14:2b:3c:61:a4:0d:79:fe:a5:0f:fd:
61:1a:6e:e6:b1:f7:b9:e7:1c:0c:82:91:7c:9a:10:5c:40:67:
fb:88:7c:97:f0:40:81:c8:c2:d4:58:bc:5e:ef:6d:1e:72:af:
35:83:f6:70:da:0c:29:37:86:d3:62:37:99:d1:c0:34:51:91:
b2:8c:31:8f:06:4b:61:ef:55:a1:ed:2d:a4:e0:2b:80:44:57:
bb:21:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:40:38 2025 by rpki-client