Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/9TRwRLOpY6sMiSbW6BTo6GGm1pg.roa
File: 9TRwRLOpY6sMiSbW6BTo6GGm1pg.roa (raw, json)
Hash identifier: to67w/5GvI4mSCWg0BcXbKCujYr7nO/GzxvxFwrqBPc=
Subject key identifier: F5:34:70:44:B3:A9:63:AB:0C:89:26:D6:E8:14:E8:E8:61:A6:D6:98
Certificate issuer: /CN=5711ad332b506f82251d3bfe3a121a979ccca94d
Certificate serial: 0183D7DCD05F3A5D2EC9EF78BB28343B5223
Authority key identifier: 57:11:AD:33:2B:50:6F:82:25:1D:3B:FE:3A:12:1A:97:9C:CC:A9:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxGtMytQb4IlHTv-OhIal5zMqU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/9TRwRLOpY6sMiSbW6BTo6GGm1pg.roa
Signing time: Fri 14 Oct 2022 18:58:36 +0000
ROA not before: Fri 14 Oct 2022 18:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198252
IP address blocks: 134.90.128.0/21 maxlen: 24
79.142.182.0/24 maxlen: 24
79.142.180.0/22 maxlen: 22
185.36.84.0/22 maxlen: 24
62.68.96.0/19 maxlen: 24
213.91.72.0/21 maxlen: 24
93.180.144.0/21 maxlen: 24
213.91.80.0/20 maxlen: 24
185.187.4.0/22 maxlen: 22
188.124.192.0/19 maxlen: 24
194.41.42.0/23 maxlen: 23
194.41.42.0/24 maxlen: 24
194.41.43.0/24 maxlen: 24
194.41.40.0/22 maxlen: 22
194.41.40.0/23 maxlen: 23
194.41.40.0/24 maxlen: 24
194.41.41.0/24 maxlen: 24
217.71.49.0/24 maxlen: 24
217.71.50.0/24 maxlen: 24
217.71.51.0/24 maxlen: 24
217.71.55.0/24 maxlen: 24
217.71.53.0/24 maxlen: 24
217.71.54.0/24 maxlen: 24
217.71.52.0/24 maxlen: 24
79.143.160.0/20 maxlen: 24
2a02:2030::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d7:dc:d0:5f:3a:5d:2e:c9:ef:78:bb:28:34:3b:52:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5711ad332b506f82251d3bfe3a121a979ccca94d
Validity
Not Before: Oct 14 18:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5347044b3a963ab0c8926d6e814e8e861a6d698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:6b:cc:4a:b6:86:08:e9:06:24:ab:b1:27:
af:fd:e6:2e:b1:7d:09:f4:61:47:2e:ab:8f:5b:ff:
85:0a:6e:21:e2:61:9e:e9:8a:fe:ed:75:18:97:04:
d3:75:b5:d1:40:74:a4:bc:96:74:95:1a:3b:72:b2:
c1:b5:33:84:d5:ae:25:00:4d:6c:dd:b2:d4:75:e3:
5b:1c:d8:e1:88:88:ff:62:db:40:58:6b:f4:77:34:
dc:c4:79:fc:91:4c:5c:20:9b:fe:bb:a0:71:ac:9c:
93:aa:b3:2b:e5:e2:2c:5c:5c:49:2c:55:d8:6a:80:
88:00:58:32:aa:ca:2d:52:c5:e5:2a:be:38:df:e1:
c2:63:1f:d3:a7:ff:80:1b:62:bd:23:b1:80:b2:48:
1e:b0:50:4a:6e:97:0f:9d:31:f0:db:a2:b0:25:fc:
c9:39:c4:0a:44:cb:f6:e8:58:6b:5f:b7:b2:da:c7:
fc:5b:df:2f:e7:89:bd:67:06:1b:47:74:4d:6c:35:
19:06:c7:80:74:fb:e1:1d:e1:c8:3d:f2:c7:86:f2:
4e:91:7b:09:c9:23:61:ae:32:4e:b3:96:14:81:70:
35:b1:75:ed:85:5d:55:82:9b:2e:c1:1c:cd:73:72:
5b:4e:98:bc:5f:d3:7c:19:d0:7b:3d:cf:82:1c:02:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:34:70:44:B3:A9:63:AB:0C:89:26:D6:E8:14:E8:E8:61:A6:D6:98
X509v3 Authority Key Identifier:
keyid:57:11:AD:33:2B:50:6F:82:25:1D:3B:FE:3A:12:1A:97:9C:CC:A9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxGtMytQb4IlHTv-OhIal5zMqU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/9TRwRLOpY6sMiSbW6BTo6GGm1pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/VxGtMytQb4IlHTv-OhIal5zMqU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.96.0/19
79.142.180.0/22
79.143.160.0/20
93.180.144.0/21
134.90.128.0/21
185.36.84.0/22
185.187.4.0/22
188.124.192.0/19
194.41.40.0/22
213.91.72.0-213.91.95.255
217.71.49.0-217.71.55.255
IPv6:
2a02:2030::/32
Signature Algorithm: sha256WithRSAEncryption
9b:ad:da:c1:5c:cd:79:78:8f:4a:18:73:bf:d4:d1:70:54:59:
fc:1e:32:d7:7b:79:f9:17:76:d5:d5:64:ba:7d:4b:e2:24:00:
15:04:5a:7a:51:76:e9:6d:19:3a:8a:67:ff:fc:25:98:65:86:
5f:51:71:db:6c:ae:13:b6:ea:f0:51:55:ef:67:68:69:9c:91:
57:02:48:e5:8e:cc:f2:5c:ae:0f:97:fb:c2:1f:af:4d:b1:34:
d6:12:3b:f7:0c:08:85:72:2b:93:e1:b2:e2:c5:2a:eb:3d:5a:
d7:a0:f6:ce:b7:93:45:1c:b8:b1:23:52:c7:b1:31:d1:72:56:
46:93:b6:d6:67:c5:da:85:bf:50:53:ad:de:5f:80:47:8d:ef:
9c:26:86:c2:fc:07:98:49:a2:9a:9d:fd:23:8e:f8:5e:43:9d:
77:4c:78:4a:77:3b:5e:60:1a:c7:2e:b5:be:3d:31:1b:6d:4a:
56:d7:fc:fd:b1:15:87:fa:22:ce:30:84:4c:8e:ef:f2:81:65:
cf:42:63:9a:66:cb:ec:06:c6:f5:dc:01:bf:a3:90:28:d2:01:
24:fa:00:3d:e8:ff:fe:50:f2:f7:07:29:a9:f0:36:3e:33:7f:
10:2d:dd:c6:69:77:34:a1:d4:19:e6:4b:e1:b8:c4:c0:da:1a:
bf:78:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:05 2025 by rpki-client