Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/AlEkCZ8eTSbYpHeyiY6ctYdHx1w.roa
File: AlEkCZ8eTSbYpHeyiY6ctYdHx1w.roa (raw, json)
Hash identifier: 2BJ40I3qooQ40Z8Oaca0jItrZbl+1P8w+3HKW+ajD8w=
Subject key identifier: 02:51:24:09:9F:1E:4D:26:D8:A4:77:B2:89:8E:9C:B5:87:47:C7:5C
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019372DE4841C9B9385C919EADD5B8225451
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/AlEkCZ8eTSbYpHeyiY6ctYdHx1w.roa
Signing time: Thu 28 Nov 2024 13:03:10 +0000
ROA not before: Thu 28 Nov 2024 13:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 137.174.0.0/17 maxlen: 22
137.174.128.0/18 maxlen: 22
137.174.192.0/19 maxlen: 22
147.123.32.0/19 maxlen: 22
147.123.36.0/22 maxlen: 24
147.123.128.0/17 maxlen: 22
155.204.0.0/17 maxlen: 22
155.204.119.0/24 maxlen: 24
155.204.128.0/18 maxlen: 22
155.204.200.0/21 maxlen: 21
155.204.208.0/21 maxlen: 21
155.204.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:de:48:41:c9:b9:38:5c:91:9e:ad:d5:b8:22:54:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Nov 28 13:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=025124099f1e4d26d8a477b2898e9cb58747c75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:26:23:e8:43:08:50:c0:9b:a3:29:38:42:
8c:15:9b:64:2f:cf:4a:47:bd:62:04:e0:10:90:88:
3c:5a:e8:da:9f:38:d8:9b:36:9e:44:23:ed:00:c4:
d5:18:9c:1c:b6:e4:d4:a5:82:dd:50:c7:fb:fe:97:
e3:cb:6a:e9:db:79:5d:04:d2:43:ad:b5:35:35:a8:
f8:bb:20:ab:d9:9e:ea:99:ab:33:97:9c:31:ed:56:
56:3a:1e:96:8d:c5:40:18:39:b0:d5:2f:78:62:32:
02:24:e3:e4:25:e7:c8:04:fc:1f:d3:b4:bc:a4:03:
ec:77:03:64:60:9b:bc:56:0a:62:9c:9e:1a:1e:fd:
3d:af:88:44:46:22:52:d4:28:d9:61:5c:4b:25:76:
55:8e:e6:76:5b:fb:2c:98:03:02:27:58:6d:fc:16:
98:dd:cd:b6:e5:c5:75:11:4f:93:03:73:f5:e1:0a:
21:81:d4:0c:86:8a:e4:52:d8:b0:8d:ac:37:0e:08:
9e:91:78:cd:0f:09:2a:8f:26:ff:67:18:d7:51:02:
37:54:38:17:a7:70:c2:a3:12:1c:51:61:6a:f5:cc:
f0:74:88:da:44:54:7d:2c:43:70:6f:41:80:e3:c2:
04:c8:39:84:16:4d:35:b2:ec:a3:86:3e:29:29:2e:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:51:24:09:9F:1E:4D:26:D8:A4:77:B2:89:8E:9C:B5:87:47:C7:5C
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/AlEkCZ8eTSbYpHeyiY6ctYdHx1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0-137.174.223.255
147.123.32.0/19
147.123.128.0/17
155.204.0.0-155.204.191.255
155.204.200.0-155.204.223.255
Signature Algorithm: sha256WithRSAEncryption
3e:d8:1f:98:4c:c4:e1:2f:35:08:53:8f:ba:75:26:ed:cc:17:
ec:fe:05:13:0e:74:52:46:ff:bf:f4:aa:aa:f5:0e:7c:19:d3:
10:99:26:16:79:2a:b5:31:aa:c8:57:ef:f7:81:11:8c:2b:13:
7a:a6:69:6b:6c:b3:67:19:57:11:cd:24:e1:ab:d2:5e:de:37:
ba:42:ad:51:e1:fb:ca:97:28:30:83:e4:c4:a4:9d:f6:f3:46:
37:1c:46:19:cf:2b:06:f2:3a:3e:25:7f:2f:49:38:52:f5:13:
52:bb:1a:d5:a3:de:d7:cf:1d:db:e2:34:01:36:b3:40:2d:9e:
9d:50:e9:d0:17:ff:73:7a:47:6c:53:4d:36:4b:66:b0:c4:dd:
28:6b:cd:60:b0:8a:88:eb:3b:21:1d:07:fe:e8:a0:7e:db:d3:
8c:ef:26:70:e3:99:20:50:7a:bb:a5:07:14:74:81:e4:25:db:
c6:c8:fd:9b:17:3c:e1:9f:6f:bf:08:82:64:3d:f1:79:dc:b8:
a5:f8:6f:93:03:41:4e:73:71:d1:49:bb:60:16:e3:da:60:62:
92:02:ab:e1:52:b8:76:6c:e6:15:dc:e6:21:9f:04:28:c7:4b:
5a:ad:86:d9:7a:dc:54:0f:7a:99:47:a5:cb:19:85:a4:51:6b:
ec:ba:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:39 2025 by rpki-client