Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/e4LglBQSu9LtA6N1rYUIutQz8rw.roa
File: e4LglBQSu9LtA6N1rYUIutQz8rw.roa (raw, json)
Hash identifier: hEZxXZ9ERHOICX6+Mc1Vs/Arwu2/QHHXi43bt7kZe/Y=
Subject key identifier: 7B:82:E0:94:14:12:BB:D2:ED:03:A3:75:AD:85:08:BA:D4:33:F2:BC
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 01880B4D35F35DB23232B628BE4B14591C24
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/e4LglBQSu9LtA6N1rYUIutQz8rw.roa
Signing time: Thu 11 May 2023 14:53:09 +0000
ROA not before: Thu 11 May 2023 14:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3209
IP address blocks: 195.50.128.0/18 maxlen: 18
185.2.132.0/22 maxlen: 22
85.238.224.0/19 maxlen: 19
195.158.128.0/19 maxlen: 19
2a00::/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:4d:35:f3:5d:b2:32:32:b6:28:be:4b:14:59:1c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: May 11 14:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b82e0941412bbd2ed03a375ad8508bad433f2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:02:d8:98:23:48:7f:40:e9:ab:72:66:20:
7f:f3:a2:33:5a:f2:e2:9a:68:11:e6:72:61:6b:bb:
b2:ce:d4:b6:b9:61:c7:81:cb:d6:2c:26:c8:2e:c9:
ad:8f:ad:20:5f:53:73:dd:1c:cb:d6:44:8c:3c:8c:
39:4e:da:fb:1f:22:03:d9:b5:bd:dd:93:09:a9:89:
c3:ff:22:6c:eb:6c:5f:4d:60:5e:cc:56:87:37:a5:
7d:9c:93:26:fe:03:3d:6d:57:18:28:be:a3:c3:ad:
09:1e:01:0b:06:59:a1:e5:3e:34:06:7f:bd:34:10:
f3:b6:0f:0c:e5:ca:6e:95:99:58:41:34:3e:10:04:
c0:72:41:f0:79:dc:de:1b:af:8e:75:82:19:d1:2f:
b3:a3:f6:27:3f:33:e2:98:f3:08:65:e2:fc:63:4e:
b4:4a:8c:b0:a9:f3:90:3b:77:76:4d:82:c2:2b:5e:
2a:ad:dd:ba:24:3a:a3:78:98:88:4c:e4:f4:d0:0c:
2e:db:bf:02:75:d2:4c:c5:6e:2c:88:35:66:5c:82:
07:f9:94:b7:e1:31:88:33:97:27:a8:74:ad:75:02:
89:08:df:35:92:a7:8c:a8:35:80:a8:3a:5f:54:bf:
f5:67:86:65:84:31:e6:9f:3a:d1:56:b7:f2:82:11:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:E0:94:14:12:BB:D2:ED:03:A3:75:AD:85:08:BA:D4:33:F2:BC
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/e4LglBQSu9LtA6N1rYUIutQz8rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.238.224.0/19
185.2.132.0/22
195.50.128.0/18
195.158.128.0/19
IPv6:
2a00::/22
Signature Algorithm: sha256WithRSAEncryption
6a:3c:06:af:db:e4:af:c5:48:bf:db:9d:ca:40:9b:cf:24:1e:
0b:ea:57:5e:9f:9b:9e:25:21:42:5f:2d:42:00:72:7f:76:af:
f4:ac:13:8e:e3:11:f4:05:62:b5:04:0b:28:40:bf:42:1e:f3:
70:a2:ad:cf:85:c3:50:08:f5:36:c8:ba:94:1d:c9:4e:7d:a3:
de:f8:f0:c4:b4:f4:64:fb:8b:4f:14:c1:29:e1:aa:c3:44:ee:
d6:dd:67:ce:97:d7:95:40:d6:53:e3:34:31:57:bc:81:a4:81:
ef:79:2b:ad:1b:96:cf:fb:06:11:29:e2:ce:32:27:b9:dd:40:
91:40:bd:ef:c1:d0:66:1d:47:42:c6:01:bd:2a:ac:11:f1:4d:
d5:22:3b:fa:24:03:41:4f:2a:e0:cb:11:b6:01:49:e7:68:08:
76:e6:49:a5:35:41:4f:51:74:1e:7a:c5:d5:51:e3:45:3e:9f:
06:de:ae:01:20:f6:dc:58:06:2b:b0:4f:14:8b:e7:48:78:f6:
2b:af:00:a6:6c:42:12:e5:9c:1a:8f:fd:26:0a:6a:42:a5:1f:
6c:e4:59:45:99:67:5e:4c:b8:ab:58:e1:b0:f9:bd:3b:76:28:
82:bd:32:e4:ee:5b:db:c2:1a:08:b2:fa:d2:e4:46:c8:b0:5a:
62:7c:c2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:49:59 2025 by rpki-client