Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/dBQ5z_wFOZsmPmRpTh15n7fxDv4.roa
File: dBQ5z_wFOZsmPmRpTh15n7fxDv4.roa (raw, json)
Hash identifier: XO7eMW9J6r/0T5gJRuI+6Hs2/VBtoT3ZCsOz4vNk/dM=
Subject key identifier: 74:14:39:CF:FC:05:39:9B:26:3E:64:69:4E:1D:79:9F:B7:F1:0E:FE
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 01833B31D6523DCDCEE9BD510A1E41860EBE
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/dBQ5z_wFOZsmPmRpTh15n7fxDv4.roa
Signing time: Wed 14 Sep 2022 08:51:05 +0000
ROA not before: Wed 14 Sep 2022 08:51:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51248
IP address blocks: 185.8.56.0/22 maxlen: 24
176.74.216.0/21 maxlen: 24
91.241.168.0/21 maxlen: 24
158.255.32.0/21 maxlen: 24
188.124.56.0/21 maxlen: 24
158.255.39.0/24 maxlen: 24
193.161.84.0/22 maxlen: 24
5.43.224.0/21 maxlen: 24
2a03:1840:1::/48 maxlen: 64
2a03:1840:2::/48 maxlen: 64
2a03:1840::/48 maxlen: 64
2a03:1840:3::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:31:d6:52:3d:cd:ce:e9:bd:51:0a:1e:41:86:0e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Sep 14 08:51:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=741439cffc05399b263e64694e1d799fb7f10efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:93:95:8a:d0:83:78:d3:47:63:52:ef:8e:
d8:f5:0b:33:4f:94:d3:16:51:ce:40:a0:3c:e2:12:
69:53:a8:11:48:e2:e0:0f:e4:d5:80:e5:9d:f7:36:
ac:4e:76:da:a3:90:05:a5:99:da:22:99:8e:5c:1b:
83:c0:5f:6e:fb:33:f8:97:90:6f:f6:43:75:f3:af:
0b:24:95:2b:1f:a6:9d:4f:c3:d7:22:0f:90:08:49:
99:50:0b:b3:39:15:15:39:9c:04:08:d4:94:a7:2b:
6d:18:35:67:4f:2d:d7:d9:86:c1:5b:4b:e2:91:be:
43:4b:ea:8a:bc:2e:5c:a0:75:e1:02:c7:10:7f:68:
8a:73:3c:a2:5a:09:aa:43:cf:d1:11:1d:ec:33:70:
28:bd:14:cc:8d:ae:a8:11:36:14:12:8a:80:e8:6c:
20:c3:2c:0a:87:88:d1:1c:fb:5f:84:36:42:4a:8c:
f6:74:50:b6:8a:a4:b0:9c:18:81:35:f2:60:37:88:
4c:60:ac:b9:2b:81:a7:b2:b6:a0:fc:76:36:61:7a:
0a:86:64:f9:f6:8d:df:e3:09:1f:9c:b8:23:74:4a:
0d:a2:06:63:69:c8:39:84:f0:7e:9b:99:41:4b:51:
93:61:ce:0f:3f:88:aa:c3:59:bf:8c:5c:cb:f9:1f:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:39:CF:FC:05:39:9B:26:3E:64:69:4E:1D:79:9F:B7:F1:0E:FE
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/dBQ5z_wFOZsmPmRpTh15n7fxDv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.224.0/21
91.241.168.0/21
158.255.32.0/21
176.74.216.0/21
185.8.56.0/22
188.124.56.0/21
193.161.84.0/22
IPv6:
2a03:1840::/46
Signature Algorithm: sha256WithRSAEncryption
96:27:4a:9b:db:06:86:a8:32:44:58:bd:65:76:a0:e9:e6:75:
56:01:eb:ca:c7:c6:89:3c:ae:f2:60:b9:f1:20:70:a4:ed:38:
f7:57:3f:8c:3f:ee:4e:7c:1a:2d:58:9c:3f:14:7a:10:fe:68:
d1:7d:52:38:64:81:c7:75:f7:39:22:c6:82:56:c9:ba:37:42:
ce:b8:e3:85:58:76:66:e0:fa:84:d3:9e:0c:31:7d:b2:8a:ed:
d6:aa:24:ae:7c:69:5c:56:4f:05:7b:ee:6b:f0:12:eb:cf:02:
d3:c6:d5:c5:22:29:42:a2:2b:76:0f:7b:d7:79:ed:4f:eb:de:
f6:0a:fd:b7:f4:91:95:69:b7:db:ac:29:87:da:3d:c9:75:c9:
5d:48:00:ec:a6:14:18:d5:a2:a8:55:c5:39:7b:33:56:12:da:
f9:82:bb:21:2f:68:c4:5b:5f:ba:2f:77:9d:26:70:e7:41:f4:
e7:ea:7b:6f:6a:03:96:93:f2:d4:76:54:18:e4:29:ee:1c:23:
3f:22:ae:0c:aa:02:3a:7d:5e:8b:18:e5:03:b5:f5:de:4a:a2:
54:18:6b:d1:c5:79:e7:b1:56:98:d6:ab:b8:ab:34:21:b8:6c:
1c:a9:83:e7:d3:2c:7f:1c:52:af:05:23:1f:72:36:4b:28:4e:
e6:09:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:42 2025 by rpki-client