Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/8187awHmnLaq2Hx0gBdgfAzL-UI.roa
File: 8187awHmnLaq2Hx0gBdgfAzL-UI.roa (raw, json)
Hash identifier: EvBmaW5Fp3fVZ/1i18IIju/5N2XLJrzEU8mo3jrLMqw=
Subject key identifier: F3:5F:3B:6B:01:E6:9C:B6:AA:D8:7C:74:80:17:60:7C:0C:CB:F9:42
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F16A28CE0D56396E6A0355720CEA6
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/8187awHmnLaq2Hx0gBdgfAzL-UI.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8678
IP address blocks: 193.255.221.0/24 maxlen: 24
193.255.222.0/23 maxlen: 23
193.255.224.0/21 maxlen: 21
193.255.232.0/22 maxlen: 22
193.255.236.0/23 maxlen: 23
194.27.24.0/22 maxlen: 22
194.27.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:16:a2:8c:e0:d5:63:96:e6:a0:35:57:20:ce:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f35f3b6b01e69cb6aad87c748017607c0ccbf942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:71:d8:f6:f3:d0:c0:58:5a:80:fb:6f:fb:
6f:6c:4e:59:7f:31:3e:35:84:0d:91:8d:db:fe:7d:
fb:0f:65:b9:af:cb:52:47:bf:23:66:0a:01:b2:1c:
2b:3a:22:78:e8:cf:8b:b9:40:62:12:d8:48:cf:41:
12:39:c0:52:fb:20:d2:b8:54:38:5a:a3:e1:a1:40:
98:c1:f2:87:0a:56:fc:1e:ac:a9:4f:6f:ec:23:24:
54:f6:82:b6:84:3c:aa:6c:d2:ad:df:a7:c7:75:c8:
01:ef:ce:4f:08:a8:e7:0c:42:9c:6a:ea:20:73:34:
68:be:27:5e:ea:ce:ae:e4:d5:62:68:22:f8:96:e9:
1e:1f:8f:9e:aa:e9:ad:78:1a:ee:71:08:6b:58:eb:
c9:ce:85:cc:e4:2f:b3:7c:7b:05:b2:69:58:e5:e1:
4e:ce:2b:2d:60:ba:db:c8:49:68:73:cf:76:b7:c0:
7c:7e:d7:46:aa:04:32:4f:b7:68:38:4b:7c:23:3f:
65:26:a9:97:dd:61:d5:09:51:70:ff:25:61:35:23:
1c:e9:1c:d4:71:8d:3c:44:59:f4:4b:b3:34:c9:8f:
1e:41:ee:6b:3b:05:45:e6:06:eb:21:dc:df:4a:0b:
69:3c:87:0f:f5:91:5e:40:c4:dd:5f:0a:76:7d:19:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:3B:6B:01:E6:9C:B6:AA:D8:7C:74:80:17:60:7C:0C:CB:F9:42
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/8187awHmnLaq2Hx0gBdgfAzL-UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.221.0-193.255.237.255
194.27.24.0-194.27.29.255
Signature Algorithm: sha256WithRSAEncryption
91:64:ea:8a:7c:f9:36:b8:c8:fd:d5:a5:71:46:23:c6:29:ef:
e2:af:5b:5d:e4:3b:4c:59:0b:10:6a:27:6f:4f:0f:27:e2:61:
d3:93:79:f1:2f:1e:6c:3a:72:3f:48:f1:ef:9a:9d:66:ef:2d:
13:ac:ac:39:fe:cf:f8:63:a2:87:b2:eb:a8:c9:a1:63:5e:db:
a5:73:02:7d:ef:b8:73:89:2b:9f:38:de:c1:07:67:a7:85:59:
c3:26:6b:8c:d0:9e:54:b9:f5:c2:46:dd:2e:e4:cf:a2:8e:c0:
18:ae:df:1b:a8:58:9b:0b:9a:d2:73:31:19:a6:a9:ff:1a:73:
05:2f:f6:9c:48:68:de:6f:fb:c8:1a:9b:a4:89:97:74:42:6c:
56:26:e2:1e:32:62:47:17:e2:d5:9b:eb:75:32:24:b8:e3:be:
56:b2:c3:e9:35:67:d8:7a:13:77:86:c6:80:15:2e:cf:e7:02:
5e:10:01:39:9a:ce:15:f1:af:86:d9:e8:20:44:0a:0f:48:23:
9d:78:0e:83:87:e0:95:f3:68:02:7e:da:75:f4:52:32:1b:6f:
2d:40:43:6d:32:e0:b7:f3:00:9b:55:b1:08:35:fe:aa:8e:d4:
97:4b:0a:af:7f:f4:6f:3e:f6:c0:1c:61:af:14:c3:80:ed:8c:
77:28:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:06:22 2025 by rpki-client