Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/162815-bb29-4b64-a9ff-74be74217df9/1/fitz_TXjZkS64eimEay75297lV8.roa
File: fitz_TXjZkS64eimEay75297lV8.roa (raw, json)
Hash identifier: nPedJCLwaxv5ipFSBr8wlTDDf2zTYyWo4Geoul6XigM=
Subject key identifier: 7E:2B:73:FD:35:E3:66:44:BA:E1:E8:A6:11:AC:BB:E7:6F:7B:95:5F
Certificate issuer: /CN=5f8174d78a27f82fb4c2d205e42d035017101836
Certificate serial: 0C84C544
Authority key identifier: 5F:81:74:D7:8A:27:F8:2F:B4:C2:D2:05:E4:2D:03:50:17:10:18:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4F014on-C-0wtIF5C0DUBcQGDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/162815-bb29-4b64-a9ff-74be74217df9/1/fitz_TXjZkS64eimEay75297lV8.roa
Signing time: Sat 01 Jan 2022 12:01:47 +0000
ROA not before: Sat 01 Jan 2022 12:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206206
IP address blocks: 185.106.31.0/24 maxlen: 24
185.106.30.0/23 maxlen: 24
185.106.30.0/24 maxlen: 24
185.106.29.0/24 maxlen: 24
185.106.28.0/23 maxlen: 24
185.106.28.0/24 maxlen: 24
213.32.253.0/24 maxlen: 24
213.32.252.0/23 maxlen: 24
213.32.252.0/24 maxlen: 24
213.32.254.0/23 maxlen: 24
213.32.254.0/24 maxlen: 24
213.32.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210027844 (0xc84c544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8174d78a27f82fb4c2d205e42d035017101836
Validity
Not Before: Jan 1 12:01:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e2b73fd35e36644bae1e8a611acbbe76f7b955f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:d5:c6:e3:1f:f8:7e:9b:a5:14:de:26:ad:
70:c8:c1:ea:a7:2a:39:b9:02:c0:fc:75:42:02:f7:
2e:b6:7a:01:e4:34:94:36:8d:7f:70:b0:60:d0:7f:
8d:57:ab:90:76:2d:d2:46:6b:9c:eb:ef:96:74:73:
8b:84:7c:7e:83:59:e2:10:de:8a:1c:24:bd:1b:66:
5c:23:7f:4f:7e:eb:15:eb:3d:fd:1c:df:37:b4:7b:
af:50:58:c7:b8:ec:49:52:69:93:77:bc:fd:c9:10:
c4:da:52:13:2b:c1:d2:5d:f9:e8:c9:f3:99:d2:5f:
da:5a:4a:29:fe:fa:cf:6b:ae:68:91:81:2f:5f:7e:
de:3f:99:19:d8:dd:fd:e7:f2:19:0e:5c:c4:ac:a6:
96:b0:e0:f2:37:23:9a:71:9d:d7:c2:89:57:5b:b6:
8c:02:a5:59:55:77:76:4c:cd:92:9a:75:2b:58:8c:
da:aa:3e:74:82:45:49:40:83:25:15:41:b1:78:a5:
c1:43:59:2e:01:6c:86:b3:db:8b:0e:17:bc:42:3e:
ba:61:96:bf:8d:b4:d1:7b:64:d6:64:e4:82:5f:0e:
d6:0e:66:b3:7c:59:2b:9c:bb:06:ec:ec:f8:bd:66:
86:f2:59:a2:64:ca:68:06:c3:ae:ee:58:97:31:9d:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2B:73:FD:35:E3:66:44:BA:E1:E8:A6:11:AC:BB:E7:6F:7B:95:5F
X509v3 Authority Key Identifier:
keyid:5F:81:74:D7:8A:27:F8:2F:B4:C2:D2:05:E4:2D:03:50:17:10:18:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4F014on-C-0wtIF5C0DUBcQGDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/162815-bb29-4b64-a9ff-74be74217df9/1/fitz_TXjZkS64eimEay75297lV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/162815-bb29-4b64-a9ff-74be74217df9/1/X4F014on-C-0wtIF5C0DUBcQGDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.28.0/22
213.32.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:7d:bd:58:69:46:5e:2d:0a:84:a0:ec:e1:b0:a7:18:67:79:
50:b0:a2:34:f2:27:91:1c:27:0e:27:bd:1e:8a:60:45:90:76:
88:3c:c0:30:4d:0e:07:39:54:8e:d4:e8:fb:ed:91:e0:3f:a7:
92:f9:e6:aa:98:32:c1:c7:87:77:d5:c9:3a:39:4d:1b:3c:d0:
27:bf:ef:0f:df:74:6a:a2:e5:0d:b3:51:14:85:25:c2:97:69:
58:e0:4e:7a:70:ae:6a:69:0d:bc:4b:17:01:d7:66:2a:3b:d7:
06:ba:b5:fd:18:d3:7d:14:d2:19:c6:14:21:32:49:b3:30:c3:
13:90:9f:d2:b2:8f:d8:c8:dd:6b:53:60:0f:bc:c4:15:df:db:
76:af:43:af:5b:5e:54:34:fa:3d:fa:84:5c:5a:6d:66:54:95:
ee:69:3a:7d:66:3b:95:af:15:ba:39:39:dc:46:d6:25:7e:13:
26:25:fb:1c:08:79:39:1d:14:d6:05:7c:66:c4:75:6d:83:cd:
f8:aa:f1:79:30:4f:2d:47:78:35:ad:6b:a2:93:05:ca:79:cf:
ca:c7:cf:d1:7c:fc:2e:05:53:9b:0a:e7:1a:47:fc:dc:36:e6:
e6:7b:e7:00:b9:5d:f2:d0:ab:56:55:cd:17:29:14:16:5d:c0:
fc:a7:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:51 2025 by rpki-client