Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ff5826-0ce7-4986-adca-68d34bfd2a29/1/g5J7s7abdL8bERjlZCCkFEy06m4.roa
File: g5J7s7abdL8bERjlZCCkFEy06m4.roa (raw, json)
Hash identifier: /ju+bVKExQXju4Me0uDZtgra5TtodltBqkyerFZCVSA=
Subject key identifier: 83:92:7B:B3:B6:9B:74:BF:1B:11:18:E5:64:20:A4:14:4C:B4:EA:6E
Certificate issuer: /CN=9bd384806e036f78e5703d9fcec52675c4740d3a
Certificate serial: 07D6FAB0
Authority key identifier: 9B:D3:84:80:6E:03:6F:78:E5:70:3D:9F:CE:C5:26:75:C4:74:0D:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9OEgG4Db3jlcD2fzsUmdcR0DTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ff5826-0ce7-4986-adca-68d34bfd2a29/1/g5J7s7abdL8bERjlZCCkFEy06m4.roa
Signing time: Sat 01 Jan 2022 01:53:17 +0000
ROA not before: Sat 01 Jan 2022 01:53:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198682
IP address blocks: 193.176.64.0/22 maxlen: 24
109.205.0.0/21 maxlen: 24
109.71.136.0/21 maxlen: 24
185.71.148.0/22 maxlen: 24
185.230.96.0/22 maxlen: 24
185.220.72.0/22 maxlen: 24
45.88.140.0/22 maxlen: 24
2a00:1f10::/32 maxlen: 32
2a0b:f1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131529392 (0x7d6fab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd384806e036f78e5703d9fcec52675c4740d3a
Validity
Not Before: Jan 1 01:53:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83927bb3b69b74bf1b1118e56420a4144cb4ea6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:5a:a2:30:24:6b:8d:05:13:a5:f7:f2:84:
ff:96:6f:d6:3b:fc:92:00:7a:f9:eb:43:f6:46:aa:
05:21:fc:b8:d1:30:77:7b:64:df:90:a0:10:67:6e:
53:b0:5f:9e:b5:b8:7b:01:a8:84:7e:d5:4b:dc:be:
1c:67:91:9f:5c:ad:97:e7:48:3e:ce:fc:9e:cd:de:
d4:86:15:f8:10:16:c6:d4:44:c1:ca:f2:2d:ea:4f:
7d:cf:05:f1:f4:dd:d1:f9:89:a8:29:fb:cc:e4:5a:
68:12:82:6a:d2:ff:9e:ae:18:aa:d4:02:71:41:8d:
22:b3:30:ee:0d:c1:64:34:41:d6:a6:6d:81:a7:5a:
b5:36:0a:b6:31:25:bf:60:1e:21:0a:35:b5:bb:aa:
d5:02:47:17:13:52:16:65:84:b6:b4:8b:65:56:86:
ee:f0:2f:68:e6:be:8e:88:94:61:54:cb:68:38:c7:
c9:cf:85:d7:3d:c2:a7:7e:bf:13:42:45:d7:7f:85:
6b:6b:ee:4f:f6:57:1e:9e:73:e9:8b:8c:35:02:de:
09:e9:ed:2b:73:e6:93:8e:34:b9:7e:c1:2c:2c:c8:
ff:b5:6f:0d:ea:72:08:75:04:6f:08:cf:15:71:22:
58:dd:3a:02:5c:8e:9f:4a:b5:4a:f3:5f:e7:db:f7:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:92:7B:B3:B6:9B:74:BF:1B:11:18:E5:64:20:A4:14:4C:B4:EA:6E
X509v3 Authority Key Identifier:
keyid:9B:D3:84:80:6E:03:6F:78:E5:70:3D:9F:CE:C5:26:75:C4:74:0D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9OEgG4Db3jlcD2fzsUmdcR0DTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ff5826-0ce7-4986-adca-68d34bfd2a29/1/g5J7s7abdL8bERjlZCCkFEy06m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ff5826-0ce7-4986-adca-68d34bfd2a29/1/m9OEgG4Db3jlcD2fzsUmdcR0DTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.140.0/22
109.71.136.0/21
109.205.0.0/21
185.71.148.0/22
185.220.72.0/22
185.230.96.0/22
193.176.64.0/22
IPv6:
2a00:1f10::/32
2a0b:f1c0::/32
Signature Algorithm: sha256WithRSAEncryption
16:35:14:c5:75:4a:28:55:92:58:6c:da:c9:21:44:3b:56:c3:
0e:a4:98:29:ea:a9:f7:f6:7c:f3:fb:68:22:b7:ea:39:12:2d:
6c:2d:96:34:07:c6:65:fc:73:4c:a2:00:1a:1e:7c:60:1b:a9:
4b:5b:49:21:75:b4:a0:56:68:70:3d:f6:3f:a4:59:7d:f5:ff:
d3:bf:6d:fd:94:3a:4a:66:f4:c3:25:01:14:94:3f:f4:6f:44:
fe:99:9f:90:42:82:2a:d9:46:9e:1a:90:63:9e:c7:09:a5:07:
49:ba:be:a3:fd:de:6f:ef:52:ca:7d:6a:b3:db:80:04:d9:2a:
c7:ee:e2:0b:b1:24:00:09:31:2f:25:47:a1:6b:bb:55:3e:eb:
f0:a8:b1:dd:8f:ec:e0:fb:82:57:ec:b2:da:5f:70:99:1f:d3:
83:dc:c5:89:3f:cc:74:c6:36:63:5b:5b:19:7b:74:77:67:3e:
6d:30:1b:72:be:28:8c:bd:ce:c4:1e:d1:41:97:1a:f1:12:3a:
6f:63:a9:a3:7b:5d:f0:ba:d3:e6:2d:f8:2c:3a:53:ab:75:17:
f4:10:50:38:23:62:40:3b:c1:d0:0e:f4:a9:61:82:f8:d8:21:
d9:02:f5:a7:d3:1f:6a:b7:3e:45:b4:a9:03:67:02:71:e6:7c:
68:62:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:31 2025 by rpki-client