Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lDLCgXfvh2GUbm_cdJQnqmENOyM.roa
File: lDLCgXfvh2GUbm_cdJQnqmENOyM.roa (raw, json)
Hash identifier: svlecH32higyLMW1QNrVnEsFEXX+RBBtxIeXkdf5APA=
Subject key identifier: 94:32:C2:81:77:EF:87:61:94:6E:6F:DC:74:94:27:AA:61:0D:3B:23
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 426F8D51
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lDLCgXfvh2GUbm_cdJQnqmENOyM.roa
Signing time: Sat 01 Jan 2022 14:03:14 +0000
ROA not before: Sat 01 Jan 2022 14:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48803
IP address blocks: 194.68.117.0/24 maxlen: 24
194.132.224.0/22 maxlen: 22
193.183.212.0/22 maxlen: 22
194.132.228.0/22 maxlen: 22
193.234.108.0/22 maxlen: 22
193.183.250.0/23 maxlen: 23
193.183.148.0/22 maxlen: 22
193.183.192.0/22 maxlen: 22
193.234.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114606929 (0x426f8d51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9432c28177ef8761946e6fdc749427aa610d3b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:2a:67:a5:17:e0:6e:fe:94:ba:2d:d8:44:
79:84:a3:64:52:29:1f:16:11:38:40:13:fa:07:bb:
a7:82:3e:6a:7a:a5:05:36:04:06:b6:cd:80:9c:37:
a1:ac:dc:ad:c2:5e:25:38:b6:86:fb:2f:1a:64:e5:
c4:ed:12:95:e3:83:6d:cf:21:fe:48:cb:ad:d7:df:
05:cd:c8:ca:44:cd:3d:ab:35:7d:37:d2:93:b5:58:
62:35:98:02:90:2b:e9:54:ef:a6:5b:b4:de:fd:46:
ab:1c:86:ef:fc:8e:9e:7a:2f:7f:f6:8a:44:23:2a:
58:39:4c:ec:73:16:8f:9f:df:3d:eb:1a:fd:b3:92:
45:bc:2f:83:ed:04:bc:21:6a:34:4b:15:8d:b0:0a:
8b:1d:b4:2e:4c:ce:82:65:48:f6:df:6d:6d:6a:f6:
99:19:c4:28:2e:9e:bd:cd:03:7a:22:5f:1e:bb:ba:
63:c4:71:fa:59:d9:f2:15:c9:48:1a:91:15:31:8c:
bd:1b:71:59:21:dc:2e:14:e3:97:af:c7:48:97:a6:
6f:25:e3:0b:cf:6e:23:9b:d9:b1:b9:c9:5b:28:81:
e0:29:77:a6:20:aa:76:32:a7:fd:2c:ca:37:f3:34:
5e:a7:00:8e:0a:b9:2d:76:3d:59:e4:4e:a0:96:66:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:32:C2:81:77:EF:87:61:94:6E:6F:DC:74:94:27:AA:61:0D:3B:23
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lDLCgXfvh2GUbm_cdJQnqmENOyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.148.0/22
193.183.192.0/22
193.183.212.0/22
193.183.250.0/23
193.234.72.0/22
193.234.108.0/22
194.68.117.0/24
194.132.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:eb:7b:0c:bd:99:90:de:da:ee:de:d8:09:1b:b1:05:1a:ed:
76:3b:cb:dc:85:91:49:58:a5:04:6e:1c:93:31:1f:bf:17:3c:
95:83:fa:39:06:7c:e0:df:11:ba:d6:67:81:97:51:b6:b2:3f:
4a:bf:a4:09:26:79:14:e1:92:6e:5b:3a:2a:53:9a:40:02:69:
05:1f:09:a3:24:0a:05:41:00:9d:c9:65:94:25:41:33:a6:fd:
77:dd:ee:08:8e:58:76:cc:c7:33:7e:78:67:02:25:87:d0:00:
5b:9e:6c:c1:ce:20:8b:2d:40:66:a4:01:79:e1:63:1f:cd:e3:
07:60:69:c1:be:f8:bb:88:c9:40:04:d3:67:7d:17:c3:7d:bd:
92:9a:d7:d6:a2:ac:28:2c:16:5d:02:16:a7:b7:d7:ca:ed:f4:
ec:90:c9:ee:45:6e:e2:eb:f2:d9:15:15:2c:e4:47:c1:dc:fc:
d2:45:5f:09:33:94:f2:66:2c:f6:41:50:06:1a:85:69:a0:1a:
28:84:ae:b5:53:7d:0a:b9:a5:4e:92:3e:86:00:f2:96:f4:75:
72:ec:04:76:fd:b6:56:8c:f7:70:cf:17:56:10:e3:23:02:87:
e7:15:1a:32:33:17:e3:01:40:1b:58:58:f9:5d:d7:63:97:76:
a1:d1:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:42 2025 by rpki-client