Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bEF6qExAMHTatvs_c5_U_E24gxw.roa
File: bEF6qExAMHTatvs_c5_U_E24gxw.roa (raw, json)
Hash identifier: eIkVzC38uea1uvwdbKfrblEA6SuDev64sPq+p5jOsC4=
Subject key identifier: 6C:41:7A:A8:4C:40:30:74:DA:B6:FB:3F:73:9F:D4:FC:4D:B8:83:1C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01927B552C26B6ED8B23A38AD1548B08B9BF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bEF6qExAMHTatvs_c5_U_E24gxw.roa
Signing time: Fri 11 Oct 2024 11:27:12 +0000
ROA not before: Fri 11 Oct 2024 11:27:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41124
IP address blocks: 92.253.208.0/22 maxlen: 24
93.171.64.0/21 maxlen: 24
93.171.228.0/23 maxlen: 24
95.47.32.0/22 maxlen: 24
95.47.192.0/22 maxlen: 24
146.120.124.0/22 maxlen: 24
146.120.152.0/22 maxlen: 24
146.120.176.0/22 maxlen: 24
146.158.24.0/22 maxlen: 24
146.158.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:55:2c:26:b6:ed:8b:23:a3:8a:d1:54:8b:08:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 11 11:27:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c417aa84c403074dab6fb3f739fd4fc4db8831c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:7f:f6:73:1f:0b:81:dd:a9:8d:82:53:d8:
9b:3b:95:0d:1a:a9:5f:5c:f0:61:d6:8f:81:0d:20:
d8:6e:07:3c:32:9e:fc:2a:4b:26:77:38:e8:6d:c8:
fa:db:31:6d:4a:35:d7:13:4b:60:3c:5a:33:00:f3:
87:4d:b1:cd:74:df:33:49:9a:71:df:a6:8d:d9:63:
88:53:97:1e:9e:5d:b1:92:38:d3:4e:ad:78:ad:37:
2f:f8:58:f3:5c:fa:16:7d:38:df:9a:b0:d7:7f:f1:
04:52:2f:ae:18:49:9c:5c:e0:eb:12:d5:68:56:42:
44:45:07:be:34:da:66:89:89:13:56:47:25:24:7c:
d5:a0:58:8b:a1:01:ec:06:c4:80:a6:44:a6:df:c0:
75:8b:6f:d3:41:cf:09:d1:0a:7a:55:dc:32:97:79:
63:cb:f7:8b:f3:1f:e5:77:fa:d0:bb:af:96:0c:3b:
b4:87:2c:dc:a5:58:86:71:e1:b6:f1:20:33:61:44:
f7:8c:6c:7b:8c:19:ca:74:59:c6:1f:ec:b4:34:52:
96:42:f1:d9:2e:3b:67:21:2b:92:78:b6:6d:a8:73:
00:90:0c:c1:3e:c3:28:a6:ca:06:b6:b2:54:68:fd:
8c:8b:d4:b8:2b:3e:21:22:4f:ab:2b:ac:dc:e1:62:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:41:7A:A8:4C:40:30:74:DA:B6:FB:3F:73:9F:D4:FC:4D:B8:83:1C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bEF6qExAMHTatvs_c5_U_E24gxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.208.0/22
93.171.64.0/21
93.171.228.0/23
95.47.32.0/22
95.47.192.0/22
146.120.124.0/22
146.120.152.0/22
146.120.176.0/22
146.158.24.0/22
146.158.64.0/22
Signature Algorithm: sha256WithRSAEncryption
85:b7:9b:04:28:bf:f9:c0:9c:50:8d:ef:4a:f2:01:ed:99:6a:
ba:1a:ca:30:3e:a3:14:df:dc:0e:36:2c:db:22:7c:30:88:b5:
ed:7a:e1:6a:ac:94:19:b6:6e:62:ed:71:b4:3c:97:4d:47:03:
c7:47:90:14:d3:24:0a:6f:52:e4:c3:a6:86:7b:cf:f8:a5:98:
ef:be:2d:90:c0:ad:51:c4:46:6d:98:c1:b2:2a:fe:46:dc:59:
35:bd:50:39:26:43:1b:5a:fc:86:d6:c2:90:66:05:33:bd:d3:
d8:46:49:80:07:05:4e:5f:49:85:0e:45:37:f0:2a:b0:9f:40:
50:86:bf:b7:fe:e8:b9:d0:99:eb:18:ff:bc:ad:ef:d0:ec:76:
52:58:62:70:d9:f0:32:96:cb:c4:e1:62:3f:1e:9a:7d:e8:f1:
a7:7a:52:20:d0:ca:ed:7c:9a:86:80:a3:5d:bd:51:3c:69:d1:
56:c5:a1:cd:ef:8d:55:07:0e:37:37:d6:f5:a7:3a:53:c6:96:
48:29:55:ba:c7:76:af:89:cb:93:0c:79:d9:a1:89:78:67:06:
34:99:03:d2:26:99:d3:83:c7:74:54:d6:0a:bb:40:3a:71:b2:
d5:3f:57:de:5a:ca:f8:55:38:cc:da:84:ea:74:48:48:3f:6e:
8b:52:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:25 2025 by rpki-client