Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/aa9187-5e0c-4d6a-b704-894205f2691b/1/m5Zv7jtVJNTtnAbbu9Hc_zDuIzc.roa
File: m5Zv7jtVJNTtnAbbu9Hc_zDuIzc.roa (raw, json)
Hash identifier: hy/PwL8PBG2UwOmWAjkYAMAFCM6NegDV5OP3cjRtfy8=
Subject key identifier: 9B:96:6F:EE:3B:55:24:D4:ED:9C:06:DB:BB:D1:DC:FF:30:EE:23:37
Certificate issuer: /CN=de8171491d89092da36c15fc814e538b9bfa3904
Certificate serial: 0773CE82
Authority key identifier: DE:81:71:49:1D:89:09:2D:A3:6C:15:FC:81:4E:53:8B:9B:FA:39:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oFxSR2JCS2jbBX8gU5Ti5v6OQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/aa9187-5e0c-4d6a-b704-894205f2691b/1/m5Zv7jtVJNTtnAbbu9Hc_zDuIzc.roa
Signing time: Sat 01 Jan 2022 13:03:39 +0000
ROA not before: Sat 01 Jan 2022 13:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15377
IP address blocks: 193.108.248.0/22 maxlen: 22
46.98.0.0/16 maxlen: 16
185.244.140.0/22 maxlen: 22
91.243.192.0/19 maxlen: 19
91.201.68.0/22 maxlen: 22
178.215.160.0/20 maxlen: 20
185.205.144.0/22 maxlen: 22
5.252.180.0/22 maxlen: 22
91.233.96.0/22 maxlen: 22
192.162.108.0/22 maxlen: 22
91.215.52.0/22 maxlen: 22
212.115.224.0/19 maxlen: 19
91.236.96.0/22 maxlen: 22
88.218.180.0/22 maxlen: 22
2a05:8dc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125030018 (0x773ce82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8171491d89092da36c15fc814e538b9bfa3904
Validity
Not Before: Jan 1 13:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b966fee3b5524d4ed9c06dbbbd1dcff30ee2337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:b6:d4:2a:bc:e0:5f:43:1c:88:53:47:5d:
47:53:8b:35:75:22:40:28:0f:01:c7:77:2b:a7:a5:
02:84:0d:73:71:67:12:89:8c:ba:45:7f:c5:5d:33:
70:26:a8:71:7c:fd:b3:25:5f:60:a1:26:aa:e5:3a:
75:a0:3f:55:dd:f5:ac:8e:47:51:fd:63:cc:bf:ba:
05:1e:d9:8d:5a:08:f2:30:17:c0:61:2b:ca:8f:ed:
c5:07:d9:d2:0a:0e:80:a2:0b:ad:1e:05:d7:9a:ef:
b4:c6:bd:d2:62:48:ab:b2:88:e1:16:af:4d:8b:be:
c1:a8:4e:e2:04:0f:1d:fd:cf:ac:a3:69:7f:11:9e:
fe:49:47:48:b0:82:b1:e8:4c:eb:5c:88:76:d8:11:
8e:7f:e7:b7:50:d0:94:8b:4b:bf:c1:16:56:82:11:
95:f6:fc:82:7c:1f:e5:65:6d:21:6e:37:cd:45:97:
0a:1d:1c:c4:1d:e6:18:6e:a6:b1:8f:4c:2b:ca:1f:
70:cd:67:72:a5:c8:1c:84:10:25:a4:c9:32:a0:78:
2b:10:d0:56:10:ac:59:da:47:7c:f2:b1:8b:9c:6a:
e6:25:06:42:f8:04:fa:82:f0:c7:94:d2:e1:00:e0:
ee:19:c0:aa:28:7e:cf:72:a2:e1:de:e6:17:3f:b4:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:96:6F:EE:3B:55:24:D4:ED:9C:06:DB:BB:D1:DC:FF:30:EE:23:37
X509v3 Authority Key Identifier:
keyid:DE:81:71:49:1D:89:09:2D:A3:6C:15:FC:81:4E:53:8B:9B:FA:39:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oFxSR2JCS2jbBX8gU5Ti5v6OQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/aa9187-5e0c-4d6a-b704-894205f2691b/1/m5Zv7jtVJNTtnAbbu9Hc_zDuIzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/aa9187-5e0c-4d6a-b704-894205f2691b/1/3oFxSR2JCS2jbBX8gU5Ti5v6OQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.180.0/22
46.98.0.0/16
88.218.180.0/22
91.201.68.0/22
91.215.52.0/22
91.233.96.0/22
91.236.96.0/22
91.243.192.0/19
178.215.160.0/20
185.205.144.0/22
185.244.140.0/22
192.162.108.0/22
193.108.248.0/22
212.115.224.0/19
IPv6:
2a05:8dc0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:9f:c8:6e:0b:63:4e:61:5f:58:af:7b:37:0d:5b:dd:19:60:
23:b9:73:ff:11:9f:a6:03:9b:94:8f:b5:c1:ad:43:45:9e:21:
42:ec:89:5f:ca:35:9a:cc:4c:5c:74:d3:77:42:9b:fa:aa:1b:
ec:2e:19:85:58:b4:b8:43:c8:85:96:44:bd:6f:70:ef:77:e5:
ca:b7:37:b4:bc:83:c7:dc:8e:f5:fe:bf:ce:f0:1a:db:a0:ca:
fc:ff:17:b4:7e:af:7b:7c:40:a8:fb:ad:36:34:f6:14:d2:e1:
ff:6b:ae:3e:da:6d:59:e8:62:df:d1:79:5f:ac:e5:1a:b5:d4:
9c:16:4c:47:ac:7d:a5:7f:5d:ae:13:3b:d2:69:d8:14:41:69:
6e:02:0f:88:b6:24:4c:3f:ff:2a:fd:d4:3a:a6:b4:af:b6:86:
f6:6e:c4:de:2e:69:9a:3e:4b:b1:a7:d0:8e:58:6e:33:0d:36:
a1:2b:ce:76:df:dd:fd:cd:ae:ac:53:f9:d5:9b:e5:5a:83:71:
7d:ab:01:d9:e1:14:19:ea:e8:2c:6c:b3:6b:98:95:16:92:45:
81:e1:03:68:bf:bb:7a:11:20:19:62:09:72:21:f3:01:2f:7a:
6b:52:10:0c:e4:69:f0:55:81:bc:4f:ba:6b:21:ae:db:48:be:
4a:b6:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:40 2025 by rpki-client