Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/DQMwE22LUNW3rd99bQPnlMYwbB4.roa
File: DQMwE22LUNW3rd99bQPnlMYwbB4.roa (raw, json)
Hash identifier: cfDeCCPtmxi8CP0M7CqvDRymhc6jJSCjx3X6WhypQS0=
Subject key identifier: 0D:03:30:13:6D:8B:50:D5:B7:AD:DF:7D:6D:03:E7:94:C6:30:6C:1E
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 018CC6B930A6534DA50C76FD74691DD0FE7D
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/DQMwE22LUNW3rd99bQPnlMYwbB4.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33868
IP address blocks: 193.23.54.0/24 maxlen: 24
185.6.2.0/24 maxlen: 24
91.207.186.0/23 maxlen: 23
2a02:848::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:30:a6:53:4d:a5:0c:76:fd:74:69:1d:d0:fe:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d0330136d8b50d5b7addf7d6d03e794c6306c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:87:6d:a8:e0:ac:22:e3:05:77:9f:e1:d9:
c0:0f:da:3f:6d:e0:ef:1d:53:7f:7b:02:9e:28:62:
b9:30:d3:c2:4c:68:8b:a2:5b:8a:f9:f9:11:6b:b2:
b0:d2:6f:a9:e5:c9:1b:da:d8:cc:0f:6a:fd:f9:c7:
9d:a2:1a:bb:31:79:b6:63:95:a3:e9:c7:a5:0a:67:
b5:0b:11:d1:95:7d:3c:74:1b:2d:36:dc:d2:14:68:
0e:be:e9:64:d9:81:55:43:45:da:0c:29:b8:44:90:
a0:ec:10:e8:94:4a:b7:d7:ce:38:3a:8f:41:fd:4a:
b4:90:9e:b5:b8:7a:9c:9f:8b:dc:65:8a:f5:54:d4:
0b:31:33:56:f0:80:23:0a:a5:a0:0f:10:fc:33:49:
95:bb:3f:29:38:5c:80:9f:8a:3e:4f:66:71:3e:f9:
51:11:84:5f:dc:81:7d:73:3a:ef:0b:2c:3b:ba:6d:
5f:e3:51:fc:9e:6c:1a:6e:b5:a4:0a:22:39:59:8e:
d3:c7:79:1a:2d:57:b9:d1:ea:96:49:be:d4:fa:67:
ab:95:b3:a4:c0:17:69:f7:ea:2c:d5:98:e1:0e:8a:
5a:62:17:ab:84:9d:24:13:d2:f3:d9:cc:52:a0:57:
6a:d1:b7:92:45:fb:2b:1d:f3:a3:09:c8:c5:22:61:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:03:30:13:6D:8B:50:D5:B7:AD:DF:7D:6D:03:E7:94:C6:30:6C:1E
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/DQMwE22LUNW3rd99bQPnlMYwbB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.186.0/23
185.6.2.0/24
193.23.54.0/24
IPv6:
2a02:848::/32
Signature Algorithm: sha256WithRSAEncryption
a2:e8:82:1d:7b:e6:4f:2d:85:92:c7:5e:b2:77:4b:1f:a4:51:
86:c1:7a:76:ff:6f:60:b7:f8:69:8a:65:ee:34:d2:2e:fc:36:
b4:5d:c7:d0:95:5c:c0:17:2a:67:14:f0:a9:51:ec:a5:42:3a:
19:94:29:f1:e7:ad:33:36:6a:bd:32:92:f9:e9:b7:5c:ef:47:
df:18:14:b0:71:07:c0:d3:2c:d2:74:e5:20:d5:c1:be:51:cc:
82:9d:06:eb:6c:fe:28:f6:c2:49:09:83:47:77:6e:8f:2f:a8:
ac:f7:c7:03:5e:a5:f0:77:a8:78:99:7f:2d:06:34:f4:35:b1:
af:42:75:d5:f3:3d:63:de:e5:50:89:48:a4:1e:5d:cf:e8:e8:
3d:e4:41:91:73:3c:a4:46:4f:3d:49:25:db:b1:34:32:dc:5d:
5a:9a:80:75:d8:d0:28:00:2a:a7:19:3c:35:1a:01:7f:8a:d5:
07:fc:10:e2:00:57:94:ec:b2:34:8e:7f:75:83:9a:ee:85:ca:
8e:f5:7c:05:59:bb:9e:68:83:89:9d:2c:19:85:46:49:f2:3a:
f1:43:59:39:1d:a4:1e:a4:96:47:e7:36:a4:59:f6:c2:70:6b:
63:00:4e:92:c6:68:9a:c4:3b:a7:26:1f:59:66:c1:f8:75:a3:
fc:21:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:41 2025 by rpki-client