Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/rj92cc1O5NPS2ZdGGU9czibUJf0.roa
File: rj92cc1O5NPS2ZdGGU9czibUJf0.roa (raw, json)
Hash identifier: OMUZTscYhkUcOX8yzI+7SwC/18Wn++4ofuLnADGXKhk=
Subject key identifier: AE:3F:76:71:CD:4E:E4:D3:D2:D9:97:46:19:4F:5C:CE:26:D4:25:FD
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01891C116C668931C7E77C7F73EAAE37C223
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/rj92cc1O5NPS2ZdGGU9czibUJf0.roa
Signing time: Mon 03 Jul 2023 14:04:11 +0000
ROA not before: Mon 03 Jul 2023 14:04:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61046
IP address blocks: 91.193.16.0/23 maxlen: 23
188.119.148.0/23 maxlen: 23
193.42.37.0/24 maxlen: 24
5.149.250.0/23 maxlen: 23
185.81.112.0/23 maxlen: 23
79.141.170.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
2a01:8640:7::/48 maxlen: 48
2a01:8640:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:11:6c:66:89:31:c7:e7:7c:7f:73:ea:ae:37:c2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jul 3 14:04:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae3f7671cd4ee4d3d2d99746194f5cce26d425fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:eb:c9:07:d3:41:fa:dd:58:56:12:bd:82:6c:
46:03:d8:15:1d:b9:02:43:f1:4a:80:ac:9e:9d:d9:
b9:bf:5f:ab:f2:82:01:a1:4c:e9:d6:06:05:12:db:
35:df:9d:54:10:82:da:3f:7a:73:f3:e7:7f:12:b6:
64:b3:4d:70:e3:1d:67:02:47:ba:c4:3f:fd:e7:a6:
b6:b9:28:40:f8:38:8c:55:c5:ad:e5:a8:fe:f5:12:
d9:58:c3:0b:1c:65:7c:3f:47:f7:67:89:50:cd:6b:
79:6c:2d:ea:35:28:3f:4b:89:50:41:a8:1e:0e:7e:
60:7a:ac:d2:44:f2:e7:05:97:0b:0c:23:80:ef:fe:
bc:28:5b:be:49:52:ff:78:21:c0:a3:95:9e:f4:b4:
e2:2a:92:87:88:11:7c:8b:de:7a:b5:91:32:f3:d5:
64:40:48:91:96:cb:44:5c:9f:af:b8:15:d3:9a:02:
ab:f2:b6:ff:e7:28:86:67:61:0b:85:76:da:31:e6:
cd:c8:9c:74:f8:d1:22:7b:07:75:86:cb:53:0e:fc:
ce:8f:01:66:62:9d:ae:6e:c1:21:da:f3:02:80:93:
ef:5c:86:5f:83:7e:37:de:1d:ae:1f:a5:1b:00:55:
25:14:46:4b:6b:ce:f4:79:8a:4a:1c:8d:d4:f7:b1:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:76:71:CD:4E:E4:D3:D2:D9:97:46:19:4F:5C:CE:26:D4:25:FD
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/rj92cc1O5NPS2ZdGGU9czibUJf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.250.0/23
79.141.170.0-79.141.172.255
91.193.16.0/23
185.81.112.0/23
188.119.148.0/23
193.42.37.0/24
IPv6:
2a01:8640:1::/48
2a01:8640:7::/48
Signature Algorithm: sha256WithRSAEncryption
2f:aa:52:df:db:e3:5b:fb:bd:fd:6e:95:ce:fb:0e:9e:8e:07:
0a:b1:56:06:b9:3b:e9:09:e0:30:21:53:f2:a3:c3:b8:1a:3b:
93:80:72:af:45:af:95:b7:38:db:59:c6:59:aa:6d:ea:3f:a6:
0f:63:ee:67:41:9d:90:de:eb:80:19:e7:ef:cb:16:c3:04:6b:
2b:16:98:ea:4b:1f:81:23:9c:b6:01:10:fa:b4:0e:ad:73:4d:
5a:b8:83:17:bf:d4:06:79:ab:4c:f3:c0:57:c4:24:91:aa:f5:
01:da:7f:64:96:5c:dd:04:75:11:fc:4d:2f:59:96:c4:7a:88:
c1:4c:80:2e:24:e9:6b:68:db:4b:4b:db:71:c7:81:38:d2:54:
25:68:f1:46:80:f7:ac:c0:c1:08:df:7c:3f:5a:8b:c9:84:15:
31:49:ce:5a:cd:84:1e:c7:4d:1c:69:e9:d0:f5:76:13:93:08:
48:58:d0:7a:fd:a0:ef:de:d0:30:9b:74:9f:f5:d7:de:2c:bb:
31:1f:cb:95:99:58:b4:41:7e:e6:1d:b0:0b:66:57:d5:79:0d:
86:de:ef:94:a1:27:96:a2:55:1b:18:fd:26:8b:a2:4e:e2:32:
e6:31:50:51:78:d8:29:6d:be:f4:8d:72:04:7f:76:4d:7a:06:
53:59:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:07 2025 by rpki-client