Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/n6DGJwtGNdOMl3dfZfY9jwam1yA.roa
File: n6DGJwtGNdOMl3dfZfY9jwam1yA.roa (raw, json)
Hash identifier: GDp+dO/UfKIjif46r3RAE9T1+n/ErDZh9nrMWdHaUDM=
Subject key identifier: 9F:A0:C6:27:0B:46:35:D3:8C:97:77:5F:65:F6:3D:8F:06:A6:D7:20
Certificate issuer: /CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Certificate serial: 0192DDB63F55ED0C5359BFCCB213E07C5482
Authority key identifier: B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/n6DGJwtGNdOMl3dfZfY9jwam1yA.roa
Signing time: Wed 30 Oct 2024 13:56:01 +0000
ROA not before: Wed 30 Oct 2024 13:56:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47527
IP address blocks: 45.95.208.0/24 maxlen: 24
185.31.76.0/22 maxlen: 22
188.116.39.0/24 maxlen: 24
213.142.140.0/23 maxlen: 23
2a00:b920::/29 maxlen: 32
2a00:b920:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:b6:3f:55:ed:0c:53:59:bf:cc:b2:13:e0:7c:54:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Validity
Not Before: Oct 30 13:56:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fa0c6270b4635d38c97775f65f63d8f06a6d720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:b9:b3:95:89:34:2e:a4:ad:0c:18:7d:2c:
33:f1:5f:93:76:df:5a:10:09:54:11:56:78:8d:78:
7d:a9:67:2c:21:dd:37:9b:a6:63:0c:a7:23:69:7b:
12:81:e9:69:a6:a6:d1:66:69:e8:e3:2f:0b:6e:84:
59:69:dd:20:fc:90:d0:ce:a0:94:ea:76:e2:e0:c1:
80:f4:18:4c:4e:77:c6:26:8e:33:4d:eb:6f:e4:30:
04:07:7a:65:85:6f:ac:80:3e:52:05:ae:9c:5d:18:
0d:6a:1a:f8:d1:d3:c7:e2:b8:77:86:0d:8b:c8:56:
9a:33:62:a4:48:b8:f6:35:c3:83:81:82:b1:f0:78:
d6:8d:27:ae:a2:fd:60:14:d3:b4:f1:55:7d:3f:b4:
82:60:ff:4f:17:61:07:aa:76:b7:a2:56:c2:e0:5d:
4c:d0:28:74:dd:91:f4:3c:54:b4:90:0e:69:da:9f:
eb:0b:36:06:4f:c5:63:5f:61:fe:ad:d1:21:60:dd:
99:3c:72:6e:26:90:2d:5b:ed:81:f3:62:ad:b3:98:
55:a9:35:8e:53:f1:35:67:ef:fc:d2:d2:55:0b:ea:
ea:48:7a:45:3f:c3:47:f5:6d:f7:84:5e:42:29:50:
a2:3a:7d:c8:51:b7:05:4f:81:bf:b9:37:ad:e4:3d:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:C6:27:0B:46:35:D3:8C:97:77:5F:65:F6:3D:8F:06:A6:D7:20
X509v3 Authority Key Identifier:
keyid:B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/n6DGJwtGNdOMl3dfZfY9jwam1yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.208.0/24
185.31.76.0/22
188.116.39.0/24
213.142.140.0/23
IPv6:
2a00:b920::/29
Signature Algorithm: sha256WithRSAEncryption
65:b4:d7:7b:63:90:42:fa:40:8a:a8:e7:06:db:00:61:16:8b:
da:54:cd:34:95:1f:8e:d4:2d:de:37:4a:ed:e3:64:28:13:12:
7b:7f:98:0c:6d:30:22:66:29:d6:64:a4:5d:72:85:d9:b5:ca:
29:88:66:75:e1:a8:00:b6:24:e2:39:24:f4:9e:ac:89:b9:17:
e2:b0:9f:0e:75:b7:46:0d:fe:f0:13:0a:c6:4e:71:8a:06:77:
45:2d:0f:73:a5:a4:83:40:48:fe:8a:2e:13:e1:f3:a7:27:ee:
2a:98:9f:27:67:b2:cb:f7:c6:a3:31:af:00:ee:97:29:a6:a9:
a2:56:8e:35:9b:26:8a:c0:11:2d:68:19:ab:33:ef:77:a3:cd:
c1:41:1a:bf:6e:ab:a7:7c:e3:9f:8a:63:0a:47:62:9a:d9:3e:
f9:e1:69:79:bf:46:f5:2a:4f:5a:0f:1a:91:eb:0e:90:7e:02:
5e:df:fb:fa:37:0d:1c:81:74:d5:08:2a:1e:64:0d:e3:fb:cc:
dd:3d:3f:6a:00:99:1d:c2:ee:68:82:6c:94:43:41:3e:02:6a:
67:09:e7:4c:82:42:38:ab:04:bf:d6:a8:34:7c:c4:c8:b2:12:
01:16:83:bf:b5:22:b7:cc:d9:96:29:84:f3:6e:0d:d5:8a:ab:
d4:66:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:14 2025 by rpki-client