Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/o7iCVg4tdn2NRsJ6Gp0SmdQwbSM.roa
File: o7iCVg4tdn2NRsJ6Gp0SmdQwbSM.roa (raw, json)
Hash identifier: 07znLBa+DON9KcVBRaVn9k/lEXYsuUfLwfj5s6kdBAA=
Subject key identifier: A3:B8:82:56:0E:2D:76:7D:8D:46:C2:7A:1A:9D:12:99:D4:30:6D:23
Certificate issuer: /CN=1a491dc816593498d0ecf443ba5cc3b0aeff7185
Certificate serial: 043D611E
Authority key identifier: 1A:49:1D:C8:16:59:34:98:D0:EC:F4:43:BA:5C:C3:B0:AE:FF:71:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkkdyBZZNJjQ7PRDulzDsK7_cYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/o7iCVg4tdn2NRsJ6Gp0SmdQwbSM.roa
Signing time: Sat 01 Jan 2022 11:00:13 +0000
ROA not before: Sat 01 Jan 2022 11:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212949
IP address blocks: 217.61.88.0/21 maxlen: 21
167.160.8.0/23 maxlen: 23
167.160.6.0/23 maxlen: 23
167.160.22.0/23 maxlen: 23
167.160.24.0/23 maxlen: 23
185.19.24.0/22 maxlen: 22
89.33.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71131422 (0x43d611e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a491dc816593498d0ecf443ba5cc3b0aeff7185
Validity
Not Before: Jan 1 11:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3b882560e2d767d8d46c27a1a9d1299d4306d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:5f:3b:aa:8c:6d:cc:4a:e6:7e:ae:6d:da:
cf:41:30:39:aa:6b:07:09:9b:2b:33:9a:f7:39:df:
9c:48:fe:f6:06:b9:48:2a:3c:34:65:71:98:d7:12:
78:4f:95:de:9f:6f:27:e6:68:d3:e7:fc:91:ca:58:
3a:cf:3e:88:bc:3b:6f:af:29:5d:3b:ec:33:3e:9b:
fa:f2:f8:b9:30:3f:28:4e:ef:1b:00:34:24:84:16:
05:e6:79:ec:f4:b2:46:36:3d:8f:0e:44:cd:ff:8b:
00:32:f7:1f:a1:c7:61:e5:37:a6:ad:2d:fc:41:45:
ca:62:43:d5:ff:a3:f7:16:32:3e:2e:49:9a:e8:28:
95:2a:1c:c6:67:02:a7:0a:47:a3:c2:7f:bb:c9:4f:
88:6d:a7:ad:e4:85:0c:49:6e:af:82:29:f7:36:c3:
2e:6e:e0:07:90:03:27:ad:8a:9a:75:c1:e2:86:6d:
8b:c8:30:3e:92:c0:6d:08:52:3c:9b:21:92:e0:6b:
39:21:78:91:b0:d8:05:08:9e:dd:d6:a3:d7:33:5d:
52:06:3e:0d:05:1f:58:63:dc:e8:e9:02:7a:ca:23:
77:b2:f2:ef:99:ea:00:8d:c5:51:20:74:39:85:35:
8f:18:39:b6:db:bc:28:1d:8a:ad:8e:08:5c:7d:00:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B8:82:56:0E:2D:76:7D:8D:46:C2:7A:1A:9D:12:99:D4:30:6D:23
X509v3 Authority Key Identifier:
keyid:1A:49:1D:C8:16:59:34:98:D0:EC:F4:43:BA:5C:C3:B0:AE:FF:71:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkkdyBZZNJjQ7PRDulzDsK7_cYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/o7iCVg4tdn2NRsJ6Gp0SmdQwbSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/GkkdyBZZNJjQ7PRDulzDsK7_cYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.108.0/22
167.160.6.0-167.160.9.255
167.160.22.0-167.160.25.255
185.19.24.0/22
217.61.88.0/21
Signature Algorithm: sha256WithRSAEncryption
86:df:74:e8:4b:17:9a:3e:17:87:04:68:78:7f:6b:3e:b8:0d:
31:b3:28:8c:36:55:61:f3:e8:6c:b6:d3:36:d6:d3:76:ac:c1:
7e:76:f7:91:48:ba:c9:a8:0e:a0:d5:6c:df:37:8b:08:fc:a5:
15:80:f2:ee:65:ab:7b:4f:2e:9d:a6:25:fd:3d:ef:16:2e:95:
a8:f1:ec:f0:b6:c4:03:45:e7:fa:e8:22:3b:b4:4e:3e:11:3e:
af:8e:07:76:1c:d4:17:b3:e8:be:f1:17:70:5f:74:18:c7:af:
36:e1:56:11:c4:22:81:d8:e5:29:3a:19:62:c7:2b:3b:7f:5c:
00:15:e7:36:ac:b7:ba:d5:43:34:6a:38:64:39:45:64:7a:40:
11:13:ef:3c:1d:96:1f:1b:69:bc:3e:ca:ab:2c:dd:fb:12:7e:
7c:b5:8e:9c:d6:60:76:87:80:b4:e1:c8:dc:92:20:0e:6e:5f:
2f:e3:63:27:a2:b7:a5:4a:3e:e6:3e:4d:e8:e8:65:d2:2d:e3:
23:cb:86:80:89:50:67:ef:d9:9c:6c:f4:5f:8d:98:79:e3:80:
dd:55:78:d8:09:15:12:91:ea:a5:35:65:e1:37:21:9a:2c:0d:
29:20:22:3a:df:be:ee:98:cc:ec:c6:0b:88:5b:ff:f5:8f:04:
d9:34:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:34 2025 by rpki-client