Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/u8ahowcf7WcZ3LBTNXN2al0FMZY.roa
File: u8ahowcf7WcZ3LBTNXN2al0FMZY.roa (raw, json)
Hash identifier: E8p5loS3iUuhRKpb71sFBE92JKpSzo0ezr1S/+vwAuM=
Subject key identifier: BB:C6:A1:A3:07:1F:ED:67:19:DC:B0:53:35:73:76:6A:5D:05:31:96
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 018570FBCB04CFC9FE4A3160D0DD77A5D8F9
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/u8ahowcf7WcZ3LBTNXN2al0FMZY.roa
Signing time: Mon 02 Jan 2023 05:37:07 +0000
ROA not before: Mon 02 Jan 2023 05:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 37.156.226.0/24 maxlen: 24
87.121.136.0/21 maxlen: 24
94.176.96.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
46.102.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:cb:04:cf:c9:fe:4a:31:60:d0:dd:77:a5:d8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Jan 2 05:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbc6a1a3071fed6719dcb0533573766a5d053196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:a8:23:18:7b:4f:49:18:6e:03:12:49:91:
ac:67:c7:5f:29:60:d6:5c:ab:cb:ef:bc:97:24:79:
0a:8d:9b:2b:27:ec:58:91:7f:5c:3c:f9:5a:ae:45:
ee:70:92:1e:5f:2c:09:21:48:38:54:d0:12:19:45:
d2:83:93:7c:f1:9c:80:17:a3:0f:63:9b:62:93:97:
6d:9d:ed:61:9e:10:00:2a:96:66:1c:4e:dd:98:1f:
2b:06:22:79:1b:5e:fa:2b:c9:9e:33:69:6a:c0:10:
5d:ba:f3:24:7b:1c:6e:2d:92:ea:5f:31:25:b9:32:
8e:06:29:f9:89:a9:b9:1d:a9:58:c6:22:06:ed:bd:
d1:7a:6d:d4:b6:45:39:ed:32:c1:ed:60:7a:b1:7c:
fa:2c:db:46:cc:e6:8e:02:5f:5d:24:0d:7b:d7:ec:
d4:53:c4:3d:54:d9:c2:d3:cb:9c:cc:17:90:94:68:
8e:69:77:23:6d:78:f1:3b:45:47:f2:ab:09:d3:58:
46:ef:76:cd:51:7b:b9:d3:ab:5e:27:a4:76:b9:fa:
b9:88:e9:45:b1:2e:f3:b7:48:75:c9:be:08:dc:d6:
4b:4f:eb:ea:8d:15:11:0a:18:74:bc:89:9f:ba:a4:
6f:cd:28:c0:83:43:0a:69:5d:d6:f7:be:2e:8f:d4:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C6:A1:A3:07:1F:ED:67:19:DC:B0:53:35:73:76:6A:5D:05:31:96
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/u8ahowcf7WcZ3LBTNXN2al0FMZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.226.0/24
46.102.116.0/24
87.121.136.0/21
89.44.77.0/24
94.176.96.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:71:9b:00:d5:82:e2:7d:b1:3d:22:52:fd:3c:cd:9e:96:f2:
cf:0a:d5:d1:7d:c3:8c:40:a4:24:95:19:33:ff:cc:53:5c:95:
bb:97:ae:95:a7:ab:9a:13:17:fa:66:b5:3d:e3:bd:73:0a:9a:
61:5c:72:69:1e:b9:17:61:0f:4c:6d:a1:11:b8:7a:8c:9b:7f:
38:bf:d3:47:65:1e:83:44:9f:88:00:f2:26:2c:a5:5d:dc:83:
d5:db:ba:b1:6d:3b:5a:9e:c2:e7:85:fb:a2:4d:15:e6:82:ab:
3f:2e:63:ad:7e:f4:7c:c4:5f:b9:4b:37:2f:e2:68:58:94:c7:
2c:2b:65:f1:31:3c:49:b1:cc:0d:a2:b0:3d:41:69:f8:22:79:
64:e8:cd:78:31:d2:55:4b:f4:15:6d:3d:71:68:36:5e:fd:d8:
e9:ad:eb:f8:da:48:4c:1d:b1:dd:d2:92:f5:c3:4e:bc:b5:c7:
82:08:5e:ee:a3:35:53:5d:97:2a:3f:ad:80:ba:2a:a1:03:7a:
47:70:ac:83:d8:6e:37:13:65:2f:07:98:75:ab:26:8a:31:fc:
8b:32:04:02:2c:d1:f3:b6:ff:64:72:f5:2c:de:d4:ec:e0:b6:
e1:e7:9d:26:8e:1e:a7:c8:c5:b6:90:60:4d:a9:ab:e1:3a:c7:
fa:df:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:42 2025 by rpki-client