Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/miqCB1PzoAuSurGa6ufcmpqhKbs.roa
File: miqCB1PzoAuSurGa6ufcmpqhKbs.roa (raw, json)
Hash identifier: 2/kApnW2JonWF4l7AN8c2I6qYYPzeVebxzbmKB0eWS4=
Subject key identifier: 9A:2A:82:07:53:F3:A0:0B:92:BA:B1:9A:EA:E7:DC:9A:9A:A1:29:BB
Certificate issuer: /CN=81891b261c62dabf777e552eb5ec27d77e484139
Certificate serial: 02C3E5DF
Authority key identifier: 81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/miqCB1PzoAuSurGa6ufcmpqhKbs.roa
Signing time: Mon 04 Apr 2022 12:59:16 +0000
ROA not before: Mon 04 Apr 2022 12:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201337
IP address blocks: 86.105.31.0/24 maxlen: 24
89.47.7.0/24 maxlen: 24
89.47.6.0/24 maxlen: 24
188.240.206.0/24 maxlen: 24
195.82.122.0/24 maxlen: 24
188.240.204.0/24 maxlen: 24
195.82.120.0/24 maxlen: 24
195.82.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46392799 (0x2c3e5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81891b261c62dabf777e552eb5ec27d77e484139
Validity
Not Before: Apr 4 12:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a2a820753f3a00b92bab19aeae7dc9a9aa129bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:df:cf:99:ce:74:2d:bc:b1:fc:2c:13:f3:
2e:71:61:c4:9b:49:05:bf:d7:45:a4:89:1b:b7:92:
c5:7a:2f:d8:d7:41:df:06:38:c8:ca:83:45:77:97:
df:b1:31:f3:6f:e3:c0:c1:b3:c2:65:45:88:d4:18:
76:e3:52:ca:17:8f:0e:05:2e:40:a6:c0:c7:6b:3a:
4f:a6:7a:63:b5:c0:42:73:26:a6:a7:97:9b:77:39:
a9:d8:d9:4a:b3:4b:84:1d:18:99:0c:51:20:ec:5c:
15:60:84:31:d4:9b:44:fd:cf:46:15:2c:ca:8c:6c:
5c:08:d9:96:97:42:e9:b0:fd:67:94:58:bd:45:5f:
af:4f:55:a1:86:40:99:e7:3e:84:b3:55:d7:00:cc:
2b:ac:05:55:65:f5:1e:69:82:48:0e:ca:65:2f:33:
01:28:43:6d:3d:e9:14:ae:7b:ba:f2:2a:bd:f4:ca:
2b:e7:5a:ce:ba:e0:5e:84:e4:d4:91:07:a4:50:19:
c5:08:ac:91:91:50:2b:63:c6:f2:ee:15:b8:ad:ab:
ff:be:53:2d:7a:40:34:8b:43:57:14:32:43:90:2a:
3e:09:7c:3c:13:ed:3a:0a:65:ca:07:aa:02:b0:c6:
4f:2e:7b:54:53:e3:60:1b:85:76:55:87:2e:c5:8b:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:82:07:53:F3:A0:0B:92:BA:B1:9A:EA:E7:DC:9A:9A:A1:29:BB
X509v3 Authority Key Identifier:
keyid:81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/miqCB1PzoAuSurGa6ufcmpqhKbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.31.0/24
89.47.6.0/23
188.240.204.0/24
188.240.206.0/24
195.82.120.0-195.82.122.255
Signature Algorithm: sha256WithRSAEncryption
4b:d5:58:07:5a:c9:23:39:10:aa:81:5d:0f:31:66:f3:3e:7b:
a4:8c:3d:42:40:50:01:86:37:45:e9:a1:0b:d2:64:52:3a:d7:
e8:f7:4b:8b:3c:c3:a3:d3:00:2f:0b:2d:df:1e:5a:89:31:13:
71:a2:a3:2d:42:db:ce:ba:24:ed:de:91:33:7d:fd:91:af:02:
08:f5:31:dd:8e:92:68:b0:46:28:07:f2:79:22:f3:7d:75:22:
13:2d:c6:00:0a:5b:a2:a4:90:e4:40:f7:f9:c0:c5:bf:62:16:
18:57:bb:6c:e3:dc:2c:2b:b0:59:5f:65:50:03:f0:5f:e5:11:
25:33:19:2d:b7:6e:a0:d7:e0:7e:9a:19:64:2c:07:34:db:19:
53:a4:39:5e:e1:c7:35:82:28:3d:b5:8e:4b:69:5a:22:8f:55:
54:b2:87:ec:ce:a7:0b:87:e2:51:8c:4f:44:6b:2f:40:e8:de:
4c:07:f2:c1:c7:b5:53:9f:1a:56:0c:9e:db:7d:8d:db:27:e5:
e4:79:5b:81:99:a6:49:fd:96:f3:d0:51:a8:f2:88:41:4e:25:
16:67:51:85:47:e8:e5:53:39:e9:c6:9b:fa:f7:22:f0:74:a1:
91:f4:34:42:eb:b2:91:f5:df:eb:b2:c0:a1:6f:3b:a3:f7:60:
65:67:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:21 2025 by rpki-client