Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/I-2vw486uXPo_ier0HJhl5vo0cM.roa
File: I-2vw486uXPo_ier0HJhl5vo0cM.roa (raw, json)
Hash identifier: ADgvRJhI7/COswhnmiJqXAiuPXWjd5Z02XHogZa+5Pw=
Subject key identifier: 23:ED:AF:C3:8F:3A:B9:73:E8:FE:27:AB:D0:72:61:97:9B:E8:D1:C3
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 018CC2DAEB857EB0C2914F03C93A82646733
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/I-2vw486uXPo_ier0HJhl5vo0cM.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31246
IP address blocks: 95.82.128.0/18 maxlen: 18
83.240.0.0/17 maxlen: 17
46.39.160.0/19 maxlen: 19
213.155.224.0/19 maxlen: 19
185.51.240.0/22 maxlen: 22
2a01:4240::/32 maxlen: 32
2a0a:cac0::/29 maxlen: 29
2001:4cc8::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:eb:85:7e:b0:c2:91:4f:03:c9:3a:82:64:67:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23edafc38f3ab973e8fe27abd07261979be8d1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3c:05:e2:f0:a2:5d:f9:86:70:9f:02:cd:8c:
7d:13:c8:6e:d9:19:17:ce:2d:bf:76:10:a9:f6:85:
be:05:16:c7:c1:91:90:e8:f8:cf:9c:25:de:47:f3:
5d:b0:c6:d6:e2:b0:d4:42:ad:a1:3a:d7:02:3a:e6:
64:e0:fa:cc:30:46:b1:fa:47:c6:2c:18:2f:c1:43:
36:f1:b3:ce:f8:2a:06:0b:0d:e2:37:53:12:94:1b:
67:d3:24:ee:3f:33:19:ec:36:54:48:50:c8:ed:b8:
3c:7d:aa:72:bd:d9:30:09:f8:6e:35:0d:37:a5:11:
e3:2e:93:cf:ab:b7:ce:96:1d:9f:7a:2b:82:3f:a8:
d8:b0:2e:a2:ef:bc:70:6e:ba:b1:d1:d9:c6:22:99:
f0:d2:2c:9e:00:00:7c:c9:11:7d:c0:cf:30:53:65:
6d:16:92:61:de:27:be:26:8e:a0:af:ee:8d:f3:5b:
b2:99:ac:52:5a:e2:00:81:ec:cc:ce:a8:31:ad:03:
a6:9d:6d:d8:c5:66:1b:bc:88:09:d4:a8:a4:2c:25:
b8:b5:86:32:1d:4a:b8:a1:c3:72:b2:82:5e:73:8d:
f7:70:b6:d0:79:27:a5:c2:bc:83:71:c2:c3:92:4e:
27:5f:8f:5c:ab:b7:56:ad:64:24:35:0e:a7:65:2d:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:ED:AF:C3:8F:3A:B9:73:E8:FE:27:AB:D0:72:61:97:9B:E8:D1:C3
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/I-2vw486uXPo_ier0HJhl5vo0cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.39.160.0/19
83.240.0.0/17
95.82.128.0/18
185.51.240.0/22
213.155.224.0/19
IPv6:
2001:4cc8::/31
2a01:4240::/32
2a0a:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
23:a3:09:b3:0c:3e:24:0d:22:7a:e0:bd:a5:9f:5e:37:7c:6f:
7b:c4:94:57:be:3e:a6:f3:77:0b:20:2a:9f:ee:10:09:a3:69:
3a:72:ed:70:bf:20:61:1b:0f:0c:f9:cd:cf:ef:5e:64:b3:11:
bb:d3:bc:ea:c4:4a:26:6c:a6:ec:0a:64:99:7a:07:83:3c:f5:
6c:ab:d4:e2:41:47:1b:70:95:87:93:29:eb:95:53:ce:32:fb:
4f:a8:85:e3:5a:6b:e7:7d:e4:f6:43:c0:5e:63:14:c2:26:6c:
36:d0:db:88:95:b1:9c:5f:a9:14:72:6e:81:56:92:32:f8:6d:
7c:e3:5a:9c:6c:9e:38:54:c0:84:cb:be:79:38:7a:5d:f5:ab:
44:86:0a:41:df:a8:20:2e:0d:7d:61:cd:dd:b9:7c:b3:01:3e:
18:a1:07:2e:0e:e3:32:40:82:33:01:ed:7e:eb:14:c9:fd:82:
7f:7e:a0:e5:a4:d7:c3:23:69:1f:bf:01:5c:1f:fc:9a:18:c1:
7a:b5:2c:66:38:d7:61:50:87:9c:df:5c:06:0d:3a:fd:1b:a1:
e8:f0:fe:ef:7b:1f:83:01:9b:4e:6b:9c:be:d6:8b:17:a5:fe:
29:cd:c4:cc:f3:39:dd:02:ce:7f:ea:1f:21:52:bb:55:23:b2:
e1:a1:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:34 2025 by rpki-client