Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/229o8lh-OhDbhniuapre4oTypk8.roa
File: 229o8lh-OhDbhniuapre4oTypk8.roa (raw, json)
Hash identifier: E3pEr7Jcv3jXt0zMcx3EDBeaC1mEQiUNqTZ2xLS9YM0=
Subject key identifier: DB:6F:68:F2:58:7E:3A:10:DB:86:78:AE:6A:9A:DE:E2:84:F2:A6:4F
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01289625
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/229o8lh-OhDbhniuapre4oTypk8.roa
Signing time: Sat 14 May 2022 18:26:40 +0000
ROA not before: Sat 14 May 2022 18:26:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210000
IP address blocks: 176.119.223.0/24 maxlen: 24
194.156.188.0/24 maxlen: 24
2a12:3fc1::/32 maxlen: 48
2a12:3fc0:7d12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19437093 (0x1289625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: May 14 18:26:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db6f68f2587e3a10db8678ae6a9adee284f2a64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:e5:c7:b6:07:83:39:28:2f:55:d0:9d:57:
e3:a8:89:34:6d:a0:43:6d:d4:45:98:bc:e1:4f:d3:
8c:fb:6b:99:9a:bb:01:15:ed:e2:bd:fa:fb:ec:70:
13:f9:5e:70:62:4a:c0:2f:2f:3b:f4:c4:56:aa:7d:
a5:56:d4:c6:4d:a4:5f:89:59:4b:44:22:f9:1f:d6:
16:43:c9:0f:43:6f:11:6a:fc:93:be:63:0f:68:b0:
a6:85:b5:68:36:ce:47:80:db:6a:31:0c:6a:ca:1d:
f5:f1:90:22:d4:03:51:4d:f4:80:fc:b4:92:d5:24:
af:ef:16:a9:07:0d:b8:fc:d0:01:25:8c:d9:9e:93:
d0:07:f6:57:fb:a4:5a:5e:41:d4:69:49:37:06:14:
20:85:f5:cf:82:b1:03:aa:7c:44:92:8e:fe:d4:51:
e0:1b:06:87:bb:96:98:b2:41:78:88:5b:69:2c:47:
d4:d0:41:49:3b:41:1b:23:19:df:2c:03:6a:cd:69:
7b:a7:84:52:8d:c5:85:ee:32:a7:63:d8:1f:d7:18:
b4:ec:45:df:8a:93:44:2b:e0:a3:88:30:a7:64:a6:
56:6f:b2:b2:60:f8:4a:38:1a:ae:4f:95:7c:35:fa:
52:b6:f6:16:d8:5d:36:28:d9:f2:b1:7a:d1:36:11:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6F:68:F2:58:7E:3A:10:DB:86:78:AE:6A:9A:DE:E2:84:F2:A6:4F
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/229o8lh-OhDbhniuapre4oTypk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.223.0/24
194.156.188.0/24
IPv6:
2a12:3fc0:7d12::/48
2a12:3fc1::/32
Signature Algorithm: sha256WithRSAEncryption
7a:e5:4c:ab:ae:c1:d4:2d:76:40:4f:af:6f:a5:f8:7c:f4:80:
e1:11:2c:c6:5a:55:c4:18:37:9a:d8:d5:57:8f:8e:2b:91:51:
b7:cc:55:72:27:47:23:6f:aa:14:93:0e:84:66:db:ed:87:ec:
3d:23:12:43:d2:f8:b2:01:76:e7:ee:80:5b:81:e5:d4:95:1b:
91:5c:13:f0:3a:86:c4:ae:19:5c:d4:27:b4:3a:69:c2:4f:61:
42:ce:53:12:87:e8:fb:5b:75:32:34:9d:f6:09:96:d7:41:5a:
25:9f:ce:da:e6:84:3f:f7:be:7a:88:a0:74:ac:78:4a:71:d9:
54:f9:a1:81:60:f7:75:36:ca:9f:ba:42:db:3d:39:2d:8c:61:
6b:ff:10:e4:5d:77:cb:20:a5:c8:9d:d5:e6:c9:5b:c5:d5:27:
45:28:ad:37:a4:ed:10:e7:b0:1c:b1:21:56:23:1c:ff:41:7b:
03:c8:37:ba:c4:51:2a:41:13:04:cb:15:6a:2a:2c:16:2f:db:
c3:90:a5:a9:a3:95:33:45:48:1f:4c:96:33:b7:a9:af:27:85:
aa:54:7e:60:20:6e:33:4e:ea:44:4c:6a:65:ee:a7:b9:1b:53:
8a:0d:ed:95:ef:a0:b4:13:eb:13:f0:72:56:cc:3b:e6:b3:5d:
be:b3:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:03 2025 by rpki-client