Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/eb8031-e694-4231-bf12-72707ab82e4d/1/H-fgsLaFYEajOLUVPf_qrZaoNZY.roa
File: H-fgsLaFYEajOLUVPf_qrZaoNZY.roa (raw, json)
Hash identifier: C96pRX7zWE++HUoYbctq1bMy/VV9yJb1AvhYPURsCUQ=
Subject key identifier: 1F:E7:E0:B0:B6:85:60:46:A3:38:B5:15:3D:FF:EA:AD:96:A8:35:96
Certificate issuer: /CN=9727a708d5144437e4760512e8455c5fa5c37a54
Certificate serial: 0923FC4D
Authority key identifier: 97:27:A7:08:D5:14:44:37:E4:76:05:12:E8:45:5C:5F:A5:C3:7A:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyenCNUURDfkdgUS6EVcX6XDelQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/eb8031-e694-4231-bf12-72707ab82e4d/1/H-fgsLaFYEajOLUVPf_qrZaoNZY.roa
Signing time: Sat 01 Jan 2022 01:59:33 +0000
ROA not before: Sat 01 Jan 2022 01:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3348
IP address blocks: 93.92.224.0/22 maxlen: 24
185.119.236.0/22 maxlen: 24
85.117.244.0/22 maxlen: 24
188.208.20.0/22 maxlen: 24
2a06:8840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153353293 (0x923fc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9727a708d5144437e4760512e8455c5fa5c37a54
Validity
Not Before: Jan 1 01:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fe7e0b0b6856046a338b5153dffeaad96a83596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:79:e3:54:0f:9f:1f:09:0f:30:c0:5f:63:5a:
ee:36:10:d8:f5:9b:b1:3a:5f:b3:43:6b:89:eb:ce:
39:d2:94:3d:36:47:3e:51:0d:86:ab:05:42:3b:09:
8e:92:13:63:0f:85:4a:0e:e3:5b:c9:5e:2d:2b:39:
bc:09:01:69:28:22:82:36:10:05:79:af:a5:3d:5f:
87:76:f8:e6:00:56:53:07:20:d3:13:51:15:49:91:
d6:8c:59:87:2a:a0:f6:68:0d:d9:1b:7a:f6:7b:90:
d7:aa:cd:27:1f:dc:58:ed:1c:e8:34:24:3b:a7:9e:
47:80:1b:10:e6:0e:76:2a:ab:3c:e5:1e:6d:5f:85:
9d:00:67:fa:fc:38:93:4f:da:bd:89:f8:21:74:8c:
4a:79:4c:ac:cc:98:04:ef:98:4e:38:7b:4a:64:1b:
0c:50:73:09:a3:17:a5:61:f6:ee:82:98:97:61:f9:
29:e2:c0:a7:59:62:c9:c7:da:b0:8f:e7:c9:b3:e1:
b3:46:fe:09:88:19:f6:d0:ed:e1:eb:08:d0:e7:2c:
ec:92:7f:20:50:79:f0:e9:2a:a4:5f:70:ab:e6:0c:
43:c9:e4:fb:b6:62:da:6d:24:69:f5:4a:66:bd:82:
04:24:80:10:87:3c:e2:7c:e9:5c:1a:59:ee:36:32:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E7:E0:B0:B6:85:60:46:A3:38:B5:15:3D:FF:EA:AD:96:A8:35:96
X509v3 Authority Key Identifier:
keyid:97:27:A7:08:D5:14:44:37:E4:76:05:12:E8:45:5C:5F:A5:C3:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyenCNUURDfkdgUS6EVcX6XDelQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/eb8031-e694-4231-bf12-72707ab82e4d/1/H-fgsLaFYEajOLUVPf_qrZaoNZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/eb8031-e694-4231-bf12-72707ab82e4d/1/lyenCNUURDfkdgUS6EVcX6XDelQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.244.0/22
93.92.224.0/22
185.119.236.0/22
188.208.20.0/22
IPv6:
2a06:8840::/29
Signature Algorithm: sha256WithRSAEncryption
0f:db:f9:e6:b0:e9:21:c9:63:2a:9a:7c:53:be:16:07:5d:7c:
65:ee:26:d4:86:8c:3c:0d:31:3a:f8:e0:fa:0d:11:ba:67:5b:
56:12:ac:cc:9d:41:52:3c:e8:dd:f0:81:4c:ab:12:b2:e9:36:
35:25:35:dc:e2:ad:7c:05:80:71:e7:11:12:fa:4d:3a:af:e4:
8b:dc:66:f2:2d:64:3b:ec:06:d4:86:1a:3f:2b:a8:b2:e5:dc:
a6:2c:2e:f7:ec:df:16:1f:87:5f:17:56:13:38:e4:cf:a5:5c:
35:e5:31:54:3c:46:8c:a4:63:e1:b3:9f:21:26:f4:c0:e5:32:
16:81:7d:42:1c:4e:2d:9e:93:3f:fd:65:db:bb:75:13:cf:a8:
0b:96:20:a7:54:c3:71:08:11:93:22:d1:b9:b7:4c:29:1f:eb:
c5:ef:cf:85:56:a4:4e:d0:41:1d:b4:64:bb:03:67:6c:75:6e:
10:56:be:13:be:2e:cf:7f:78:b2:be:52:a1:7a:e3:eb:f6:2f:
25:ee:1f:7c:8c:2b:28:b4:d6:33:43:fe:ba:f1:1f:4c:b8:3f:
fa:92:a4:7c:c3:bd:5c:06:3b:e3:fb:86:65:4b:14:4c:a2:dc:
f6:20:59:99:13:56:23:18:e5:c1:f0:89:18:32:99:9b:72:3a:
6c:45:2b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:26 2025 by rpki-client