Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/3F5L2zVtWZrbfnuj6uqgjDKHhqg.roa
File: 3F5L2zVtWZrbfnuj6uqgjDKHhqg.roa (raw, json)
Hash identifier: /TniMPLTumKJH2DCbOrB8x3tOeqULpWeHn0FdWOTUxw=
Subject key identifier: DC:5E:4B:DB:35:6D:59:9A:DB:7E:7B:A3:EA:EA:A0:8C:32:87:86:A8
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018CC64B5E8262D0BC3D8390DFBFA90DA3DB
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/3F5L2zVtWZrbfnuj6uqgjDKHhqg.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 45.147.152.0/22 maxlen: 22
85.8.168.0/22 maxlen: 22
2.56.184.0/22 maxlen: 22
194.124.144.0/24 maxlen: 24
185.60.144.0/22 maxlen: 22
194.121.59.0/24 maxlen: 24
45.90.248.0/22 maxlen: 22
31.40.232.0/22 maxlen: 24
194.31.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5e:82:62:d0:bc:3d:83:90:df:bf:a9:0d:a3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc5e4bdb356d599adb7e7ba3eaeaa08c328786a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9e:8d:60:d7:0c:ff:93:da:33:5a:4e:08:49:
2f:e5:74:c2:c7:5b:e9:be:cd:bb:cb:14:ae:2b:c8:
e3:0f:43:ab:fc:3e:f3:8a:94:67:f5:4c:93:b4:5a:
47:2a:4c:74:11:6f:68:16:94:be:75:7b:7f:b2:2a:
81:76:29:17:56:4a:b2:3c:fa:8c:5d:99:38:28:c8:
c4:89:fb:bf:91:e9:a3:a4:13:3e:ea:4d:47:88:36:
8c:7d:90:65:db:22:9c:fb:7c:35:09:90:96:78:cd:
3b:35:2c:c3:9c:4d:e4:24:b0:59:96:dd:ce:56:d6:
12:59:e0:47:e7:10:9f:85:3f:34:c1:fe:79:04:7a:
09:1a:e7:ce:7a:87:ab:30:82:0b:bd:96:53:c4:5c:
8d:49:3c:a0:02:68:5c:e1:5e:c2:95:de:15:c2:7e:
cd:7a:04:9d:18:e5:bb:50:ad:89:d3:14:d0:83:6f:
ff:ae:83:98:ad:13:be:2b:31:31:11:69:a6:11:00:
e5:c1:c6:3b:ec:c0:8b:7d:da:db:22:50:a3:85:17:
3a:03:f6:30:8f:5e:4b:d6:cc:18:54:c0:f3:3f:6b:
9a:c3:70:c5:91:20:da:ab:f4:79:45:e9:02:41:b0:
1c:f4:8d:63:4e:8f:cf:d4:42:6c:95:2a:ad:8d:c3:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5E:4B:DB:35:6D:59:9A:DB:7E:7B:A3:EA:EA:A0:8C:32:87:86:A8
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/3F5L2zVtWZrbfnuj6uqgjDKHhqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.184.0/22
31.40.232.0/22
45.90.248.0/22
45.147.152.0/22
85.8.168.0/22
185.60.144.0/22
194.31.180.0/22
194.121.59.0/24
194.124.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:57:09:61:db:d0:ec:ce:ff:26:cc:0b:7c:ab:95:31:20:7a:
a4:bc:d5:7e:10:4e:43:4f:a6:74:17:fb:bd:d0:d6:c1:35:80:
f7:11:0c:a0:89:6c:a5:98:ce:bf:9a:fd:df:4c:cf:d0:4d:eb:
f9:93:fa:f2:c5:07:f8:8c:24:57:e7:e1:33:8b:6e:38:e0:96:
6b:6e:94:6e:ee:f2:b0:a6:2d:5e:dd:c5:ca:6f:3b:fe:05:4b:
48:ee:0a:77:03:03:89:b9:60:eb:4f:b1:9f:7b:77:9d:58:82:
64:d0:d3:46:d1:1f:01:4e:49:8c:32:37:1b:ba:9e:64:e1:f1:
62:ad:46:84:5b:da:22:36:38:eb:f8:50:2a:b8:6c:2d:51:16:
9c:e6:a4:f5:00:a6:8c:16:0f:f0:67:0a:d2:29:64:30:3b:c1:
32:a5:4e:06:b7:ed:d0:27:cf:5f:0c:ef:42:a9:fc:c9:66:4a:
38:eb:0a:7c:30:69:7f:af:95:29:5a:77:f0:49:dd:1b:bc:4f:
61:b1:7e:04:8c:15:31:12:e8:8c:61:5b:38:c6:f7:05:ef:6f:
cb:11:41:ed:87:3c:13:66:33:48:f3:fb:70:11:96:5f:ea:5d:
cd:d2:12:c9:a0:81:36:46:a2:d4:f8:75:0d:9f:95:46:b6:3b:
92:45:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:34 2025 by rpki-client