Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/jM3mFYh8LoKNgXhHILxwKjEa2t8.roa
File: jM3mFYh8LoKNgXhHILxwKjEa2t8.roa (raw, json)
Hash identifier: bamY5wdYuPF4POUO7SzIKYvra1Hgn3lf+B9yLjIBK+4=
Subject key identifier: 8C:CD:E6:15:88:7C:2E:82:8D:81:78:47:20:BC:70:2A:31:1A:DA:DF
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 01866E730582AEF6821EF10A69692973DEDF
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/jM3mFYh8LoKNgXhHILxwKjEa2t8.roa
Signing time: Mon 20 Feb 2023 10:51:17 +0000
ROA not before: Mon 20 Feb 2023 10:51:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25773
IP address blocks: 94.188.232.0/24 maxlen: 24
94.188.236.0/24 maxlen: 24
94.188.234.0/24 maxlen: 24
94.188.206.0/24 maxlen: 24
94.188.205.0/24 maxlen: 24
94.188.209.0/24 maxlen: 24
94.188.208.0/24 maxlen: 24
94.188.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:73:05:82:ae:f6:82:1e:f1:0a:69:69:29:73:de:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 20 10:51:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ccde615887c2e828d81784720bc702a311adadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:6b:99:fe:50:16:ef:c9:11:87:c0:1d:7c:
d8:d3:eb:06:9d:03:97:8a:1a:fb:f2:f8:f0:c2:0b:
91:7a:51:ce:d7:1e:a1:e0:fe:f5:0e:77:4c:a6:59:
bc:08:da:1f:cd:29:84:15:9e:19:23:44:1c:b2:26:
ea:b4:05:ed:b7:28:17:d4:5f:5b:5b:5d:8c:8d:5e:
ba:c9:ab:68:51:99:8b:74:aa:69:9f:7f:0e:2f:7e:
ee:4e:1d:5e:54:d4:30:16:4a:c6:83:ce:a3:4f:15:
c6:4f:8f:2e:b8:50:8b:f0:fa:40:7e:e3:f0:cf:e9:
27:88:4d:ce:33:52:cd:06:f5:60:61:32:d6:40:f5:
58:16:88:2d:3c:c1:3b:a0:da:ad:9c:ca:b3:4b:f8:
39:01:e9:31:80:8a:a6:36:49:e3:21:0a:5a:69:a3:
6d:9b:33:02:ee:74:99:5d:52:37:be:1f:2a:af:91:
85:15:a1:cd:cb:0f:67:06:81:b1:a9:81:5f:10:76:
cb:09:b3:39:df:35:e4:18:ea:87:bc:e8:ac:56:78:
60:ca:76:9e:e0:9f:0a:dd:80:fe:38:f1:e6:08:49:
d7:66:9b:e2:89:c0:8b:41:9e:9f:0e:28:74:23:41:
b6:ff:4a:8c:a8:9f:50:06:3c:a1:73:f7:41:a3:00:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CD:E6:15:88:7C:2E:82:8D:81:78:47:20:BC:70:2A:31:1A:DA:DF
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/jM3mFYh8LoKNgXhHILxwKjEa2t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.205.0-94.188.209.255
94.188.232.0/24
94.188.234.0/24
94.188.236.0/24
Signature Algorithm: sha256WithRSAEncryption
19:71:87:a0:b9:4b:40:d9:0e:6a:01:c8:05:8b:d7:d3:ef:23:
91:2c:4e:20:23:92:b4:0c:c3:14:10:51:6b:c5:19:68:9b:d4:
d6:3f:ea:89:12:2b:33:ca:77:50:99:37:8a:d4:17:3d:56:bc:
ef:31:9a:54:2e:ae:cd:a6:a8:35:ee:d6:ab:cc:11:64:47:47:
6b:d1:6a:29:50:aa:b8:35:7e:c3:c6:db:fa:78:98:78:80:e4:
5d:03:a8:44:fe:41:8e:34:01:bf:49:f5:42:da:0b:93:01:49:
33:58:8c:0c:e6:06:9e:a5:f6:c7:af:04:b8:f4:10:ae:fd:45:
ad:8b:29:a9:b3:b7:be:c0:f2:1e:43:de:7e:12:22:9f:68:ea:
03:42:e6:1b:87:72:7b:4a:f9:08:cf:47:27:44:46:3b:c5:f0:
d8:4e:2e:45:10:b3:f1:91:5d:ae:fe:09:64:0d:70:dd:40:50:
a3:bb:86:ca:46:a6:a0:89:d6:94:61:f3:d5:bf:19:59:09:fd:
16:a7:d6:2b:25:ee:f5:61:a4:8b:d2:ca:3e:f2:5b:46:57:e5:
fa:38:51:eb:1d:d1:8d:d1:af:28:05:17:88:48:78:48:67:c6:
13:b4:36:90:bf:ba:57:ea:79:70:cf:4a:36:15:f4:ae:c8:9f:
6d:7b:7e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:52 2025 by rpki-client