Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/8C93CFxS7X11mlpfGFw23hILBV4.roa
File: 8C93CFxS7X11mlpfGFw23hILBV4.roa (raw, json)
Hash identifier: OaJf+YaRZZfYdm91NUXkvorv/sIlkaYV1TVTC2tWg+w=
Subject key identifier: F0:2F:77:08:5C:52:ED:7D:75:9A:5A:5F:18:5C:36:DE:12:0B:05:5E
Certificate issuer: /CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Certificate serial: 01856CCAEBF52CC51EAC8113C176DD248F6E
Authority key identifier: 5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/8C93CFxS7X11mlpfGFw23hILBV4.roa
Signing time: Sun 01 Jan 2023 10:05:16 +0000
ROA not before: Sun 01 Jan 2023 10:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49455
IP address blocks: 82.194.192.0/19 maxlen: 19
188.113.64.0/18 maxlen: 18
109.108.192.0/19 maxlen: 19
46.249.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:eb:f5:2c:c5:1e:ac:81:13:c1:76:dd:24:8f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Validity
Not Before: Jan 1 10:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f02f77085c52ed7d759a5a5f185c36de120b055e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:ba:cb:43:4e:1e:fb:88:74:d2:2e:0c:82:
96:26:2e:27:f5:68:18:01:d6:e1:7d:89:7b:bc:96:
3a:42:86:18:60:aa:3c:35:9d:d8:59:bc:67:70:5f:
49:06:87:cb:1c:0d:73:56:ef:bc:e1:40:b3:55:62:
ea:64:ad:b1:90:a4:93:1d:e0:7b:eb:24:05:57:a1:
2b:05:12:5e:45:73:e3:b5:38:11:c7:54:e7:b9:3b:
cf:d0:a5:d9:f6:3d:4c:b6:1d:75:8d:4b:dc:a4:2c:
c5:60:b1:ab:d9:7c:ff:7f:05:c3:3b:b5:1c:07:b3:
42:1e:b1:5c:eb:96:5e:b9:10:dc:c6:87:4e:7c:98:
f3:32:a3:75:e2:56:6f:64:e1:59:34:f8:16:1d:d1:
e4:f2:a5:13:40:35:43:d9:e5:7b:97:5d:ca:ce:39:
29:cb:b6:5a:e3:3a:32:03:5f:e7:fd:21:77:82:76:
23:2b:ba:bd:da:4d:9e:97:c6:fb:bf:ea:e1:ce:98:
60:a0:d1:ea:1f:05:7e:ec:00:b5:45:5b:34:69:c9:
c1:69:4d:22:08:31:cd:3f:23:13:45:f7:4f:78:ac:
1b:80:de:22:96:16:f7:f2:2b:15:64:3e:cf:ea:ec:
e4:0d:29:68:a1:fd:ec:81:52:ed:43:74:01:be:e3:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2F:77:08:5C:52:ED:7D:75:9A:5A:5F:18:5C:36:DE:12:0B:05:5E
X509v3 Authority Key Identifier:
keyid:5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/8C93CFxS7X11mlpfGFw23hILBV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.224.0/19
82.194.192.0/19
109.108.192.0/19
188.113.64.0/18
Signature Algorithm: sha256WithRSAEncryption
90:37:66:b1:70:ba:ad:d7:94:6e:1b:68:d8:cf:32:1d:c6:70:
d6:5b:e6:c5:07:4a:28:62:c7:aa:dd:54:74:bf:f5:25:53:ee:
03:48:27:13:19:14:57:35:b1:2d:64:87:ab:2c:44:e5:02:e1:
d1:3b:0b:3c:dd:56:23:31:85:0a:01:b2:dc:66:11:2f:a1:a7:
91:16:9f:e7:7d:39:62:c4:14:e9:ea:29:d9:62:f1:e6:f1:47:
e7:9f:31:7e:cf:ae:a6:ff:3b:a0:8a:b8:c0:34:ef:7a:bd:fc:
26:e4:45:31:e5:99:02:ce:da:ce:82:78:d5:d3:f5:79:2f:d6:
c4:8b:41:60:93:0d:fb:9d:50:bf:7d:31:88:ef:60:3d:c9:c5:
b5:97:44:15:53:5d:15:14:7b:62:fd:c5:dd:e0:72:eb:8d:1e:
1f:18:e4:8c:af:a5:3d:57:0e:1a:12:92:41:38:92:ef:df:8f:
00:e2:05:9f:b1:60:57:4f:f3:5f:b3:99:c9:d6:17:79:17:5b:
38:3e:98:6b:6f:8d:aa:dc:e8:df:a9:27:3a:3e:34:3f:bf:b6:
80:24:60:84:35:cc:6f:b8:17:5d:ac:50:83:eb:19:6a:25:6b:
cf:b3:91:db:e4:1f:94:fa:4b:82:15:6f:72:b4:ae:ee:45:e4:
11:9d:1e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:14 2025 by rpki-client