Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/Z5U3s0ijb4zOkLVJ6h-8jc_vB70.roa
File: Z5U3s0ijb4zOkLVJ6h-8jc_vB70.roa (raw, json)
Hash identifier: Y+fVVSJgspj9Woqv2+/7WykmBUR2U1zxuWi6atWf7k8=
Subject key identifier: 67:95:37:B3:48:A3:6F:8C:CE:90:B5:49:EA:1F:BC:8D:CF:EF:07:BD
Certificate issuer: /CN=ffd8609ce7a8c3c128908fc45f3e6d9b67260e4e
Certificate serial: 01856D8B05E90FBE708F2940FA002EE4076F
Authority key identifier: FF:D8:60:9C:E7:A8:C3:C1:28:90:8F:C4:5F:3E:6D:9B:67:26:0E:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9hgnOeow8EokI_EXz5tm2cmDk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/Z5U3s0ijb4zOkLVJ6h-8jc_vB70.roa
Signing time: Sun 01 Jan 2023 13:35:05 +0000
ROA not before: Sun 01 Jan 2023 13:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34177
IP address blocks: 195.200.160.0/19 maxlen: 19
185.132.116.0/22 maxlen: 22
185.18.208.0/22 maxlen: 22
185.213.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:05:e9:0f:be:70:8f:29:40:fa:00:2e:e4:07:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd8609ce7a8c3c128908fc45f3e6d9b67260e4e
Validity
Not Before: Jan 1 13:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=679537b348a36f8cce90b549ea1fbc8dcfef07bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:fa:50:b6:25:98:83:4d:c3:72:af:81:91:
89:ca:32:0e:c7:e0:9d:eb:fa:da:75:ab:c6:35:e2:
8d:07:d7:5c:3e:f3:36:20:ab:36:ec:b7:49:3f:1e:
ed:7e:4a:71:9b:8c:0a:2f:eb:f1:bd:0b:5d:02:0f:
04:d4:76:de:2a:e2:29:50:ae:5f:3c:7d:d8:06:f6:
d0:b4:78:56:06:2c:40:13:35:ad:d0:1c:b8:ba:5c:
ea:fd:14:4c:3c:aa:3a:29:b0:e7:fd:aa:bb:4d:53:
d7:75:0b:13:c6:6a:5b:1b:ef:d4:89:c1:63:54:a4:
59:b4:ad:5c:8e:7f:df:16:89:48:b5:28:24:92:0c:
c2:83:3e:5d:a7:f5:9b:10:eb:a6:c6:d7:dd:16:74:
fb:a5:e7:0c:3b:55:3c:1c:32:aa:2b:e0:1a:76:90:
f6:c2:2a:c8:f1:a9:87:41:89:b4:92:5a:ad:5e:70:
32:b9:b1:66:75:d8:35:d9:87:96:c3:00:38:d4:9d:
3d:35:7d:c3:ca:a2:fc:0c:90:26:d2:53:7f:26:b6:
23:c7:85:ab:54:d5:6a:aa:e4:97:ed:79:22:b6:20:
b1:28:a7:cd:0d:8d:5e:55:3d:90:2c:91:c6:60:15:
e7:66:51:7e:85:4b:32:d9:55:2e:24:b5:1e:87:96:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:95:37:B3:48:A3:6F:8C:CE:90:B5:49:EA:1F:BC:8D:CF:EF:07:BD
X509v3 Authority Key Identifier:
keyid:FF:D8:60:9C:E7:A8:C3:C1:28:90:8F:C4:5F:3E:6D:9B:67:26:0E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9hgnOeow8EokI_EXz5tm2cmDk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/Z5U3s0ijb4zOkLVJ6h-8jc_vB70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/_9hgnOeow8EokI_EXz5tm2cmDk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.208.0/22
185.132.116.0/22
185.213.160.0/22
195.200.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:54:5f:e6:15:27:5a:fb:6d:05:39:90:dd:ee:fd:21:7b:a2:
66:04:a6:b4:86:e8:be:76:60:c1:f5:89:9b:db:a3:cc:b3:57:
55:a7:c4:71:ab:e7:c7:19:26:3e:85:60:a2:4b:be:e6:49:1f:
85:c6:99:7d:2a:4d:6b:95:3e:18:87:e5:76:69:9c:2e:e4:74:
58:1e:77:9e:ba:e4:29:bb:57:da:45:65:68:7b:46:94:79:9f:
21:a6:5b:98:f1:ae:75:b5:ca:a8:d0:e1:00:a2:5a:db:33:c2:
f1:6c:0b:35:c5:c0:1e:82:87:7d:44:1b:a3:28:83:e8:b9:47:
0e:10:33:42:6c:bc:9e:09:45:3c:50:9c:c6:ba:c3:a1:0b:7d:
b3:66:c2:36:22:bc:b9:43:29:c7:ea:f4:67:b0:5d:17:fc:43:
d9:77:96:74:1c:79:0b:a5:70:f4:58:76:97:5d:31:36:22:19:
6f:40:78:13:92:a5:18:b6:03:61:54:76:42:65:6a:87:47:02:
76:45:cc:08:f6:40:ba:27:6f:76:05:7b:60:b9:30:3c:f5:71:
b6:c3:2e:d6:66:fc:77:98:e2:06:99:bf:e7:a2:94:4f:90:f0:
20:4f:49:fb:56:78:9b:28:30:33:09:30:6a:44:cd:cf:54:3f:
4b:4c:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:07 2025 by rpki-client