Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/22ZzpH6kdOYbR_v2p-sYzL2hIrE.roa
File: 22ZzpH6kdOYbR_v2p-sYzL2hIrE.roa (raw, json)
Hash identifier: HQPF7OdRNDZKuJG4n+dR2j/D5Yn2E+d2QYmqugkyHVo=
Subject key identifier: DB:66:73:A4:7E:A4:74:E6:1B:47:FB:F6:A7:EB:18:CC:BD:A1:22:B1
Certificate issuer: /CN=ad12daa384888b5247df712965803f0d3fa8989d
Certificate serial: 0187A4179399EACD47B596FD20E46F975AB8
Authority key identifier: AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/22ZzpH6kdOYbR_v2p-sYzL2hIrE.roa
Signing time: Fri 21 Apr 2023 13:53:41 +0000
ROA not before: Fri 21 Apr 2023 13:53:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42263
IP address blocks: 185.182.32.0/22 maxlen: 22
5.253.192.0/22 maxlen: 22
185.32.80.0/22 maxlen: 22
192.70.192.0/22 maxlen: 22
185.145.196.0/22 maxlen: 22
45.94.108.0/22 maxlen: 22
45.140.116.0/22 maxlen: 22
185.115.48.0/22 maxlen: 22
185.116.244.0/24 maxlen: 24
185.116.244.0/22 maxlen: 22
45.136.96.0/22 maxlen: 22
185.173.240.0/22 maxlen: 22
2a00:c320::/32 maxlen: 32
2a00:c320::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:17:93:99:ea:cd:47:b5:96:fd:20:e4:6f:97:5a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad12daa384888b5247df712965803f0d3fa8989d
Validity
Not Before: Apr 21 13:53:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db6673a47ea474e61b47fbf6a7eb18ccbda122b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:e1:f6:35:d8:f8:49:9d:a4:3a:1c:a7:29:
2f:2d:74:41:e5:06:a9:08:2f:1a:e2:85:04:72:89:
7c:17:37:1c:9d:b6:11:7f:f4:12:48:41:ce:62:c7:
46:59:a6:76:a5:21:27:16:49:4d:55:05:74:f5:2a:
0d:d8:a4:1f:7f:a4:4d:d4:bc:4e:71:cf:4f:58:43:
fb:23:11:06:18:80:8c:5b:08:b0:85:fd:8f:55:08:
0f:87:3b:23:f4:55:a2:8a:4e:d0:b2:9e:0d:a8:a4:
e3:e8:3d:21:a3:54:ab:6e:87:cc:bb:a6:80:ff:2a:
4f:57:73:1e:49:51:62:10:0f:d7:2d:16:59:e7:48:
7a:da:3d:31:c5:d1:57:ab:d0:2e:a4:2f:ba:f4:7b:
61:b8:91:90:52:18:9d:7f:e7:8e:ed:ef:3c:77:ce:
ba:33:54:e4:1d:d4:44:63:78:1f:ae:b8:e1:83:56:
fe:58:1e:2f:59:b3:ef:b9:d3:3f:fa:18:9a:5e:9b:
65:29:79:6e:57:f8:e2:b1:58:d4:fa:dd:c6:ac:15:
19:07:40:99:70:d8:32:10:a9:33:2a:2b:e4:5f:17:
2a:f0:0c:36:49:e5:61:8b:75:a6:7d:59:1b:71:92:
9d:46:68:20:a7:6b:ba:d7:d7:7c:3f:a3:47:57:f2:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:66:73:A4:7E:A4:74:E6:1B:47:FB:F6:A7:EB:18:CC:BD:A1:22:B1
X509v3 Authority Key Identifier:
keyid:AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/22ZzpH6kdOYbR_v2p-sYzL2hIrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.192.0/22
45.94.108.0/22
45.136.96.0/22
45.140.116.0/22
185.32.80.0/22
185.115.48.0/22
185.116.244.0/22
185.145.196.0/22
185.173.240.0/22
185.182.32.0/22
192.70.192.0/22
IPv6:
2a00:c320::/29
Signature Algorithm: sha256WithRSAEncryption
1b:d5:29:2a:82:62:55:9f:56:d3:04:c5:eb:cc:18:2b:9c:8d:
e9:6e:83:a0:65:ef:1b:1c:96:02:56:14:e0:97:04:c6:25:68:
4b:ad:14:8e:af:3f:85:7e:67:e6:1e:f3:69:f6:04:6b:43:97:
71:c4:04:c8:54:43:4a:b6:78:30:87:c4:c2:bb:7a:db:3b:44:
b6:4b:0d:1c:22:a6:ba:ac:9d:04:9f:24:cd:40:4c:08:4d:e2:
9e:c4:95:83:36:a4:0a:a5:b1:e5:9b:c3:f8:17:59:d6:e9:fb:
39:cc:3f:a3:f3:08:ba:76:bf:0e:84:cf:c5:95:d9:05:5e:d4:
5e:c4:84:cb:b9:58:fb:25:a1:21:f5:75:36:d2:16:36:3a:d0:
de:3b:5b:91:4f:bb:81:91:af:f1:69:4a:29:8c:01:45:28:13:
f8:26:43:5f:de:81:a1:41:85:e9:17:30:53:6e:e5:67:78:55:
47:ac:27:4f:f8:31:d7:a7:4b:34:4d:b2:ca:b0:60:74:c4:28:
75:de:bf:8c:2a:74:6e:02:45:3b:e6:c9:bf:50:00:cf:cc:91:
7d:3b:16:44:81:ae:11:42:c3:46:8a:15:3f:a8:f0:c5:01:e6:
3c:bb:78:18:b1:15:df:23:2d:f2:49:af:43:7d:85:33:ac:37:
dc:a3:1e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:01 2025 by rpki-client