Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/sWXZnfwOEQ_jnRhczYbJrGw4zCw.roa
File: sWXZnfwOEQ_jnRhczYbJrGw4zCw.roa (raw, json)
Hash identifier: QArP4JPZHm31opP5qkv/F8rtUN98Owg5rp9q5XhIxOI=
Subject key identifier: B1:65:D9:9D:FC:0E:11:0F:E3:9D:18:5C:CD:86:C9:AC:6C:38:CC:2C
Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial: 018CC9BCFBC4A4D27CF0C83D1AD19F64BB03
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/sWXZnfwOEQ_jnRhczYbJrGw4zCw.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205876
IP address blocks: 194.5.132.0/24 maxlen: 24
194.5.145.0/24 maxlen: 24
45.152.249.0/24 maxlen: 24
45.152.250.0/24 maxlen: 24
31.24.250.0/24 maxlen: 24
2a12:5040:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fb:c4:a4:d2:7c:f0:c8:3d:1a:d1:9f:64:bb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b165d99dfc0e110fe39d185ccd86c9ac6c38cc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:aa:d4:d6:56:ef:e6:cb:55:36:fc:4c:48:2e:
ed:ce:a8:3a:98:32:5b:62:59:6c:3c:df:12:6d:5c:
ab:86:a2:4c:f9:ff:fb:78:f4:ff:c0:e0:5d:72:90:
e7:b9:0a:c4:97:6e:20:05:1b:21:a8:36:70:9b:b0:
01:c5:e0:8f:f1:f3:59:66:8d:cc:df:71:85:6c:03:
06:23:64:c6:75:69:84:20:47:b1:97:30:0b:ba:a5:
eb:9d:ad:7c:62:13:f0:df:38:7c:ee:50:ee:6c:34:
43:6c:81:ee:dc:36:8a:a0:69:cc:04:fe:bc:4e:1d:
25:be:eb:8d:55:b0:33:39:ea:46:0a:d7:30:26:1a:
3b:71:15:52:fb:50:a1:0c:80:8e:20:a6:b4:fa:03:
fa:a9:44:75:0e:49:e0:59:7b:4c:04:19:49:92:7a:
67:30:36:22:9d:58:da:c9:7f:a2:86:2e:12:1e:e9:
ef:50:09:83:50:01:61:b2:ba:10:0c:29:60:91:1d:
d4:d2:fa:78:8f:25:74:3e:bf:62:aa:2e:61:26:22:
27:8f:7d:21:31:a5:8e:4f:af:45:49:94:b5:56:73:
57:58:64:c5:ef:93:6f:0d:f7:53:70:55:0e:57:4e:
48:7f:c9:5d:5a:66:96:b6:da:fc:fb:33:92:4a:69:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:D9:9D:FC:0E:11:0F:E3:9D:18:5C:CD:86:C9:AC:6C:38:CC:2C
X509v3 Authority Key Identifier:
keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/sWXZnfwOEQ_jnRhczYbJrGw4zCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.250.0/24
45.152.249.0-45.152.250.255
194.5.132.0/24
194.5.145.0/24
IPv6:
2a12:5040:1::/48
Signature Algorithm: sha256WithRSAEncryption
1c:c5:81:50:f3:32:d0:9d:51:ca:c0:e7:70:58:b9:96:46:41:
10:21:ae:1d:40:0d:df:16:b4:bb:36:0e:80:c8:3d:ac:93:6f:
6b:bb:2d:21:03:65:ee:a2:10:44:af:a3:3c:ed:dc:05:36:3f:
95:36:c0:92:6c:ec:e4:46:72:15:d9:1f:cc:c1:d1:10:fe:80:
c4:c9:17:7a:d0:27:2b:5c:50:83:71:4c:b6:d0:5d:bf:92:47:
f1:9e:96:71:4a:a2:9f:a0:67:11:15:1f:69:28:8a:07:df:81:
e9:a2:a4:37:54:d0:18:33:3d:55:94:93:b0:6f:4d:cd:5f:9c:
2d:98:09:21:39:3a:48:9b:68:2b:2c:97:c7:2e:e3:c2:7e:89:
80:f8:fb:5a:97:25:b3:d7:dd:77:14:da:8e:56:a0:b6:54:04:
70:4e:9b:4e:d4:90:aa:62:c6:db:d3:be:27:b4:29:9d:77:30:
80:17:a9:f1:8c:8f:cc:c8:2f:5c:90:4c:ae:f8:91:cf:fc:a1:
ef:7f:54:ff:23:6c:fa:b7:ca:6e:96:ca:b0:e0:a5:ed:95:d9:
b1:d5:96:24:94:e7:1c:b2:f2:22:36:a9:2f:23:89:9a:5f:86:
5c:57:fd:94:e6:a9:1b:c0:3c:f4:3b:70:00:c4:96:cd:ee:e1:
a7:56:38:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:34 2025 by rpki-client