Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/i1DCz7OcH69E8eCq0dKpvS1XBMw.roa
File: i1DCz7OcH69E8eCq0dKpvS1XBMw.roa (raw, json)
Hash identifier: x7PjDrAJ8LqDRn3z0Y42Ff7llR8otLN7ZT5hJeKBndI=
Subject key identifier: 8B:50:C2:CF:B3:9C:1F:AF:44:F1:E0:AA:D1:D2:A9:BD:2D:57:04:CC
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 0186921ACBDBC8E523341504550DFD4DE495
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/i1DCz7OcH69E8eCq0dKpvS1XBMw.roa
Signing time: Mon 27 Feb 2023 09:01:15 +0000
ROA not before: Mon 27 Feb 2023 09:01:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202553
IP address blocks: 147.181.12.0/22 maxlen: 24
147.181.16.0/23 maxlen: 24
147.181.32.0/22 maxlen: 24
147.181.36.0/22 maxlen: 24
147.181.44.0/22 maxlen: 24
147.181.4.0/22 maxlen: 24
147.181.8.0/22 maxlen: 24
2a04:9a00:100e::/48 maxlen: 48
2a04:9a00:1002::/48 maxlen: 48
2a04:9a00:1003::/48 maxlen: 48
2a04:9a00:1006::/48 maxlen: 48
2a04:9a00:1001::/48 maxlen: 48
2a04:9a00:1005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:1a:cb:db:c8:e5:23:34:15:04:55:0d:fd:4d:e4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Feb 27 09:01:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b50c2cfb39c1faf44f1e0aad1d2a9bd2d5704cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:b5:71:83:ff:e1:73:e0:bd:c2:6d:df:8a:
26:a0:4e:b1:05:0c:18:01:47:b3:24:87:0a:be:66:
b3:98:43:b0:f1:a3:bc:e5:42:2a:bd:5f:ce:99:3c:
5b:fb:8a:fa:b5:8e:34:ff:94:57:46:86:2b:1f:36:
87:52:59:1a:85:ee:59:63:45:c8:d1:82:0d:7f:16:
64:90:91:54:6e:8b:61:22:c2:71:94:37:7b:99:7c:
92:83:73:e5:68:e1:2f:a7:a7:4e:b5:fe:c9:d7:26:
8b:5e:e1:f7:62:5b:cc:2d:b8:c6:67:75:b3:94:26:
87:bb:40:a7:25:06:1f:66:19:c1:c8:3f:0b:d5:1b:
ac:59:5f:90:ca:40:e8:2b:65:07:4e:68:e2:05:9b:
0b:09:24:14:fc:95:93:59:34:11:85:43:d8:88:1a:
e6:06:2c:25:ea:55:eb:4d:75:e0:ad:b8:1a:0c:65:
a2:26:87:df:a1:6a:7f:a4:ad:07:19:9f:e9:f4:16:
66:9b:fa:94:4a:83:34:b6:e0:65:f6:14:4d:9f:88:
0a:79:3a:27:9f:27:31:5b:97:cf:af:07:b0:5f:e9:
fd:63:92:77:7e:c8:dc:2c:29:03:9d:17:5f:e3:e0:
d1:6e:d4:b7:74:40:a2:dc:82:7a:08:f9:a1:1a:0b:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:C2:CF:B3:9C:1F:AF:44:F1:E0:AA:D1:D2:A9:BD:2D:57:04:CC
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/i1DCz7OcH69E8eCq0dKpvS1XBMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.4.0-147.181.17.255
147.181.32.0/21
147.181.44.0/22
IPv6:
2a04:9a00:1001::-2a04:9a00:1003:ffff:ffff:ffff:ffff:ffff
2a04:9a00:1005::-2a04:9a00:1006:ffff:ffff:ffff:ffff:ffff
2a04:9a00:100e::/48
Signature Algorithm: sha256WithRSAEncryption
b4:5f:03:21:56:51:d5:1a:6e:c0:98:08:88:39:0c:44:4a:83:
ad:87:86:63:2b:98:92:a3:6e:08:d1:36:19:82:f4:ca:a3:0e:
7d:7b:9f:b8:0e:08:6d:90:ff:eb:0c:02:9f:9d:a2:90:81:4c:
79:b3:e3:0c:c6:51:77:96:d2:04:b3:75:e3:e8:ff:07:35:23:
c2:5d:bf:9a:29:24:8d:8e:73:00:c9:3f:68:be:db:e6:59:fe:
f4:5e:3f:88:d8:e9:01:bb:38:c0:9b:bf:49:59:2c:0e:e8:fd:
13:fc:c7:bb:15:fa:90:0d:68:15:22:c2:8b:b5:28:62:8f:a7:
05:ab:42:5e:27:2e:dc:4b:47:51:8e:8a:bc:ab:4b:60:b6:e1:
d7:f6:f6:0d:cb:f3:7a:77:9d:c3:36:51:a0:f6:a4:af:19:1b:
69:07:30:07:12:b6:fd:cc:9e:96:88:87:d7:ed:41:37:94:5e:
89:8d:10:26:c0:10:4e:58:87:80:eb:c9:2c:e3:44:d1:7f:f0:
9d:4d:1a:2a:25:8b:f6:d5:cd:91:bd:e0:3b:4b:02:cb:7d:a1:
48:cd:d7:1b:2e:49:bc:3d:a0:9f:7b:0b:30:c2:93:e7:4e:04:
f2:09:7e:a0:62:3c:43:ba:a7:c2:2a:77:46:39:42:ec:06:d7:
3f:4f:f0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:15 2025 by rpki-client