Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/QUIglT0cnEKe-pMkQ6OAxN_vziA.roa
File: QUIglT0cnEKe-pMkQ6OAxN_vziA.roa (raw, json)
Hash identifier: XStpC5wAgKnt1LjXy5NcZ3XoYafTjC4qmRMjQULmnaU=
Subject key identifier: 41:42:20:95:3D:1C:9C:42:9E:FA:93:24:43:A3:80:C4:DF:EF:CE:20
Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial: 018CC725AC481FCD895499BAB28BC642186D
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/QUIglT0cnEKe-pMkQ6OAxN_vziA.roa
Signing time: Mon 01 Jan 2024 22:29:44 +0000
ROA not before: Mon 01 Jan 2024 22:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28909
IP address blocks: 213.167.4.0/24 maxlen: 24
213.167.3.0/24 maxlen: 24
213.167.2.0/24 maxlen: 24
213.167.1.0/24 maxlen: 24
213.167.0.0/24 maxlen: 24
213.167.11.0/24 maxlen: 24
213.167.10.0/24 maxlen: 24
213.167.9.0/24 maxlen: 24
213.167.8.0/24 maxlen: 24
213.167.7.0/24 maxlen: 24
213.167.6.0/24 maxlen: 24
213.167.5.0/24 maxlen: 24
213.167.17.0/24 maxlen: 24
213.167.16.0/24 maxlen: 24
213.167.15.0/24 maxlen: 24
213.167.14.0/24 maxlen: 24
213.167.13.0/24 maxlen: 24
213.167.12.0/24 maxlen: 24
213.167.18.0/24 maxlen: 24
213.167.24.0/24 maxlen: 24
213.167.23.0/24 maxlen: 24
213.167.22.0/24 maxlen: 24
213.167.21.0/24 maxlen: 24
213.167.20.0/24 maxlen: 24
213.167.19.0/24 maxlen: 24
213.167.31.0/24 maxlen: 24
213.167.30.0/24 maxlen: 24
213.167.29.0/24 maxlen: 24
213.167.28.0/24 maxlen: 24
213.167.27.0/24 maxlen: 24
213.167.26.0/24 maxlen: 24
213.167.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:ac:48:1f:cd:89:54:99:ba:b2:8b:c6:42:18:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Validity
Not Before: Jan 1 22:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=414220953d1c9c429efa932443a380c4dfefce20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:58:50:dd:e9:27:8b:92:1b:a4:75:df:8c:
2d:4f:12:78:7e:3f:46:e3:56:d5:83:99:50:40:ef:
57:13:f0:c6:9c:b2:75:70:97:af:12:8a:da:73:98:
79:ee:7d:78:14:84:0e:ef:23:36:4d:73:30:97:8e:
4b:87:94:21:fe:8d:fd:47:0a:70:05:4d:57:6f:a8:
6c:f0:a3:91:80:e1:4e:53:07:20:15:56:a2:81:97:
5a:7e:53:55:56:66:72:8d:0c:a4:24:da:73:4a:22:
ac:f2:06:56:dc:72:d2:70:70:48:fa:2c:d4:44:dc:
21:fa:d8:c1:48:9a:8a:49:a5:fa:7a:f5:bd:5e:c2:
13:e3:15:53:49:cb:27:30:07:3f:f4:ea:d3:13:f4:
9c:05:b5:7c:97:31:45:2c:9f:a6:42:9e:69:c7:8d:
9c:dc:f7:6b:d7:5f:96:6d:f1:ff:90:96:ce:6f:0c:
3b:b6:5f:bd:6e:74:4f:ee:0d:54:db:21:3d:ad:c8:
71:6a:69:31:94:e6:1d:30:d1:53:9b:f1:7c:a2:2f:
86:d5:80:04:d1:40:36:8e:79:b1:8c:9a:48:01:52:
58:b0:c0:d0:d6:d3:f7:a3:d2:04:41:6b:c6:69:e8:
ac:d8:21:0a:ec:96:69:46:c4:e7:b2:c7:ef:de:48:
bd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:20:95:3D:1C:9C:42:9E:FA:93:24:43:A3:80:C4:DF:EF:CE:20
X509v3 Authority Key Identifier:
keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/QUIglT0cnEKe-pMkQ6OAxN_vziA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.167.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:cc:b8:7e:0e:48:13:41:60:d5:c3:dc:4a:69:73:8d:81:a8:
7a:d4:60:a0:72:01:07:43:ad:d1:70:96:9c:b9:48:15:5c:ec:
c2:c1:4c:9b:9a:6f:b8:5a:fc:4e:4b:f5:d1:f2:07:3a:83:be:
eb:74:87:01:af:ed:32:ad:61:17:7d:73:ee:45:28:57:1e:66:
8d:da:c4:1b:a7:73:99:f5:55:44:e1:ed:d9:bf:ae:d0:8b:44:
9b:e7:06:16:c2:ec:43:68:f1:a5:91:ad:89:7d:49:e2:b0:7e:
ae:24:92:91:7a:3e:ef:2e:6e:e1:f9:62:d5:f8:37:20:0f:51:
4f:58:e8:3e:7b:29:54:27:32:99:fd:9d:0c:61:57:5e:3e:dc:
41:70:f0:b7:3d:bf:7d:2a:bc:65:5d:53:97:fa:8c:1f:ef:79:
99:4b:39:8c:d7:96:ce:29:ed:3d:48:1c:90:78:92:0f:4b:47:
8e:75:ec:a4:47:23:e2:23:f6:ff:04:a7:f1:ec:56:49:a8:d7:
4e:4e:6e:fa:57:f7:d1:85:b5:d1:71:8b:58:24:10:17:8f:d4:
fc:00:8e:75:8e:e2:02:a9:3d:ad:d7:bc:30:b6:70:e6:aa:0a:
01:9f:54:e6:d8:11:ca:a1:f8:1a:cd:84:6a:d0:08:01:c8:e5:
12:c2:27:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:24:20 2025 by rpki-client