Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/_1MbS75neK0OfHH5cQfHLledObA.roa
File: _1MbS75neK0OfHH5cQfHLledObA.roa (raw, json)
Hash identifier: n/m9uDKG5XGN2Lix9tsCCz30GU/UuRy/chtj19TvQOw=
Subject key identifier: FF:53:1B:4B:BE:67:78:AD:0E:7C:71:F9:71:07:C7:2E:57:9D:39:B0
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 01942068206CA0BC639EB678A3F971F43041
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/_1MbS75neK0OfHH5cQfHLledObA.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33965
IP address blocks: 193.72.32.0/24 maxlen: 24
193.72.36.0/24 maxlen: 24
193.72.40.0/24 maxlen: 24
193.72.48.0/24 maxlen: 24
193.72.52.0/24 maxlen: 24
193.72.56.0/25 maxlen: 25
193.72.60.0/24 maxlen: 24
193.72.64.0/24 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:20:6c:a0:bc:63:9e:b6:78:a3:f9:71:f4:30:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff531b4bbe6778ad0e7c71f97107c72e579d39b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:ca:cc:53:5f:38:40:91:2b:79:03:3c:d9:
3b:40:24:d5:03:08:0f:35:65:b1:61:32:f9:ad:1b:
80:79:49:f1:13:4c:7b:c6:5d:99:3f:c8:14:96:bd:
34:0b:61:70:a4:9e:6c:13:17:d6:4a:b4:72:ab:7a:
99:52:90:15:b0:9e:89:40:78:86:1c:1e:c8:87:2c:
9e:1e:17:92:49:f1:b6:77:c6:7d:ab:df:d5:f2:09:
df:ee:92:80:55:91:93:be:56:b3:f4:0e:d5:54:4a:
e3:1d:3b:a9:7b:47:db:0f:a2:bb:5b:5d:91:5d:93:
af:8d:ea:05:9e:e4:9d:9f:fa:32:58:0e:4b:e0:eb:
7a:bc:9a:64:50:14:91:26:52:6e:65:17:e8:24:48:
e9:cd:9f:da:ba:68:13:21:d5:ae:58:99:92:c5:df:
bd:3e:de:c6:88:4f:74:63:f7:b3:c2:16:83:60:d4:
7f:8d:dc:89:c5:d9:c1:bd:a6:f2:69:4f:4e:b5:69:
e5:a1:a1:16:1c:3c:92:00:ad:70:a8:a5:c1:79:4c:
d9:06:c1:33:47:77:ce:97:64:96:76:f5:c8:f0:03:
1c:61:33:66:67:1e:db:dc:21:54:45:ab:d1:24:e9:
b0:14:86:f2:a6:53:11:39:6c:79:a8:5e:cf:26:d9:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:1B:4B:BE:67:78:AD:0E:7C:71:F9:71:07:C7:2E:57:9D:39:B0
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/_1MbS75neK0OfHH5cQfHLledObA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.72.32.0/24
193.72.36.0/24
193.72.40.0/24
193.72.48.0/24
193.72.52.0/24
193.72.56.0/25
193.72.60.0/24
193.72.64.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ca:ed:c5:a9:db:92:09:7c:a2:91:e9:7b:0b:e3:ca:17:6e:
14:6a:bf:04:5b:ae:1a:97:48:11:30:0b:14:10:00:8a:ea:59:
49:1b:86:3e:bf:6e:38:a5:2b:60:20:07:d4:ce:e9:47:e0:33:
a6:01:46:54:68:df:bd:94:40:40:3e:e8:2e:fe:08:3a:ce:4a:
87:1d:7b:4b:9a:c0:c6:24:b0:a6:c9:a7:2c:d7:54:79:7d:f0:
71:2b:e3:77:a5:08:12:bf:76:bb:db:18:c9:8e:be:21:c9:e8:
6d:cc:68:b3:4e:c7:99:95:4c:4c:a4:8f:7c:9d:47:b8:1d:17:
72:25:f1:a7:e7:58:15:3a:4d:68:00:42:59:13:17:08:8f:fa:
ec:e3:0e:22:cd:d1:45:b4:63:fb:b0:98:72:e0:5f:05:df:60:
af:23:2d:2b:7b:aa:df:04:05:d4:bb:a7:c0:8e:b7:a7:69:cd:
9a:96:b1:cf:b0:79:3f:01:bd:42:d3:45:e9:9f:2a:a9:0b:0d:
ca:3e:f5:f2:f0:67:18:b6:ce:e4:52:1a:89:4f:d5:e2:56:45:
22:41:86:13:57:13:a7:24:d8:9d:5c:66:bc:ba:a2:b6:cd:4c:
7f:f4:31:3f:a6:88:67:2f:aa:92:14:ff:98:5a:85:79:b8:75:
87:85:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:23 2025 by rpki-client