Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/I41JxT5kq6bHFWWAbmwBwbgCKcs.roa
File: I41JxT5kq6bHFWWAbmwBwbgCKcs.roa (raw, json)
Hash identifier: QlYuhr1LGNpTy9xDpqdgRmx8ZF9HXwBk7l1vS5dt7yA=
Subject key identifier: 23:8D:49:C5:3E:64:AB:A6:C7:15:65:80:6E:6C:01:C1:B8:02:29:CB
Certificate issuer: /CN=5711ad332b506f82251d3bfe3a121a979ccca94d
Certificate serial: 41BC0D88
Authority key identifier: 57:11:AD:33:2B:50:6F:82:25:1D:3B:FE:3A:12:1A:97:9C:CC:A9:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxGtMytQb4IlHTv-OhIal5zMqU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/I41JxT5kq6bHFWWAbmwBwbgCKcs.roa
Signing time: Sat 01 Jan 2022 06:02:01 +0000
ROA not before: Sat 01 Jan 2022 06:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198252
IP address blocks: 134.90.128.0/21 maxlen: 24
79.142.180.0/22 maxlen: 22
185.36.84.0/22 maxlen: 24
62.68.96.0/19 maxlen: 24
213.91.72.0/21 maxlen: 24
93.180.144.0/21 maxlen: 24
213.91.80.0/20 maxlen: 24
185.187.4.0/22 maxlen: 22
188.124.192.0/19 maxlen: 24
194.41.42.0/23 maxlen: 23
194.41.42.0/24 maxlen: 24
194.41.43.0/24 maxlen: 24
194.41.40.0/22 maxlen: 22
194.41.40.0/23 maxlen: 23
194.41.40.0/24 maxlen: 24
194.41.41.0/24 maxlen: 24
217.71.49.0/24 maxlen: 24
217.71.50.0/24 maxlen: 24
217.71.51.0/24 maxlen: 24
217.71.55.0/24 maxlen: 24
217.71.53.0/24 maxlen: 24
217.71.54.0/24 maxlen: 24
217.71.52.0/24 maxlen: 24
79.143.160.0/20 maxlen: 24
2a02:2030::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102843272 (0x41bc0d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5711ad332b506f82251d3bfe3a121a979ccca94d
Validity
Not Before: Jan 1 06:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=238d49c53e64aba6c71565806e6c01c1b80229cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:34:ac:7c:95:87:80:67:fc:2d:4b:bf:20:
2c:a4:69:16:41:e1:73:d3:71:20:87:c4:61:e0:b5:
05:64:a1:cb:ca:58:14:c8:0c:55:33:60:96:9e:c7:
53:fd:8c:7f:85:c5:b1:68:f9:10:b8:39:12:84:f7:
4e:97:c6:9f:5e:43:60:53:d0:d2:c5:68:1b:b1:4c:
f8:a5:85:c8:d5:4a:5d:08:fc:51:62:f7:5a:23:a9:
89:6c:e5:34:59:87:e8:0b:be:ea:20:51:99:d7:26:
8c:e1:72:39:aa:aa:17:a3:59:b6:8b:f6:e1:fc:e2:
f7:59:b4:62:f9:e0:52:fe:f3:6c:3a:87:76:1c:af:
1e:ca:9e:15:72:68:09:5c:11:65:be:35:7f:ed:5b:
e0:1c:ed:e5:8f:99:26:86:d7:96:36:0e:35:33:e7:
e2:16:4d:4a:dd:6e:5b:66:12:01:b5:b9:67:8c:b3:
b1:77:95:0e:ce:8d:a6:e3:b3:59:01:cc:bc:7c:ff:
4b:bc:1a:b0:f2:bf:a7:ec:f6:a0:1d:31:7b:02:08:
13:9a:af:e9:d1:f8:b4:32:61:5a:3c:36:c6:a7:f8:
ed:09:b1:a4:73:b1:9d:c3:3d:27:67:2c:da:ab:91:
24:25:8b:e7:22:0b:2a:80:31:71:39:ee:9a:b0:02:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8D:49:C5:3E:64:AB:A6:C7:15:65:80:6E:6C:01:C1:B8:02:29:CB
X509v3 Authority Key Identifier:
keyid:57:11:AD:33:2B:50:6F:82:25:1D:3B:FE:3A:12:1A:97:9C:CC:A9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxGtMytQb4IlHTv-OhIal5zMqU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/I41JxT5kq6bHFWWAbmwBwbgCKcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/VxGtMytQb4IlHTv-OhIal5zMqU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.96.0/19
79.142.180.0/22
79.143.160.0/20
93.180.144.0/21
134.90.128.0/21
185.36.84.0/22
185.187.4.0/22
188.124.192.0/19
194.41.40.0/22
213.91.72.0-213.91.95.255
217.71.49.0-217.71.55.255
IPv6:
2a02:2030::/32
Signature Algorithm: sha256WithRSAEncryption
69:f9:93:cc:49:34:60:95:0e:7b:12:15:53:f5:5d:be:0f:4e:
1e:2a:99:93:d5:68:f8:d0:92:4a:2e:8a:df:5c:64:df:07:07:
3d:b8:e3:6d:a8:20:c4:a1:c6:2e:85:f6:82:08:b4:6e:88:fc:
d0:9d:25:7c:63:ed:30:17:1b:b8:60:d3:ab:d3:8b:0c:93:04:
fd:7a:14:9a:dd:36:89:3a:57:6b:62:78:af:15:d2:67:74:e8:
a3:55:22:37:3a:b0:39:c3:3c:aa:79:73:48:2c:06:b3:85:f6:
14:15:64:e3:ba:55:17:e2:27:0f:4f:fe:c6:b7:9b:6e:2c:3f:
43:49:0c:d4:33:9a:ef:76:8d:c8:18:d0:0f:0b:33:a3:0f:a0:
fb:8e:5a:17:35:5c:17:34:10:69:51:40:21:ae:5d:7c:bb:7c:
ac:49:56:7f:03:89:79:a5:ad:c7:c3:3f:ec:57:34:4f:da:c3:
a7:b7:06:12:fa:13:ab:49:e0:13:a6:f5:85:3a:cb:4b:96:a4:
7c:b5:8d:70:76:53:be:d4:31:e8:bf:47:7f:41:b2:45:1f:f6:
7b:f0:e1:a0:49:29:de:92:9d:7a:e6:5d:c3:97:75:1b:8f:8b:
5c:b1:ca:64:e4:87:5e:23:90:16:82:40:8e:84:95:97:b8:36:
86:b7:c1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:30 2025 by rpki-client