Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/av-HYYp7QZhwmD8BMgVmIVkqsvQ.roa
File: av-HYYp7QZhwmD8BMgVmIVkqsvQ.roa (raw, json)
Hash identifier: 1E420OhPgrO6qZ7RwagDkmCHgzO0H2oYuOWLwwujnW0=
Subject key identifier: 6A:FF:87:61:8A:7B:41:98:70:98:3F:01:32:05:66:21:59:2A:B2:F4
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018FB9B782764C545CFA146DFBE540661B02
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/av-HYYp7QZhwmD8BMgVmIVkqsvQ.roa
Signing time: Mon 27 May 2024 11:02:42 +0000
ROA not before: Mon 27 May 2024 11:02:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 92.114.110.0/24 maxlen: 24
93.115.36.0/24 maxlen: 24
93.119.193.0/24 maxlen: 24
94.176.150.0/24 maxlen: 24
176.126.204.0/24 maxlen: 24
188.208.108.0/24 maxlen: 24
188.208.116.0/24 maxlen: 24
188.211.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:b7:82:76:4c:54:5c:fa:14:6d:fb:e5:40:66:1b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: May 27 11:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aff87618a7b419870983f0132056621592ab2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:96:59:1a:aa:bc:f9:45:94:35:4b:f1:58:
43:2a:b5:46:c5:bc:7b:83:3f:4b:fa:41:a9:09:93:
f6:a5:14:5d:09:ff:e0:5d:32:19:bc:00:e6:d4:8c:
d9:8f:72:01:8b:90:00:9d:a9:38:fa:04:01:aa:2a:
fd:83:0f:1c:fd:e0:e9:56:fb:df:4e:26:e3:03:f8:
3c:94:10:03:a4:42:fa:40:5c:6e:f3:55:76:47:32:
50:da:f2:a0:00:05:d3:71:b2:99:8b:63:d7:af:ba:
cf:30:ba:7e:60:b9:2a:a1:37:1a:9a:28:5f:2f:f2:
3e:27:1a:31:6c:ed:3d:84:0b:21:4a:ca:b2:09:c8:
43:a5:96:73:0d:be:84:b8:8c:61:ca:40:f3:22:1d:
39:39:21:2d:4e:b8:77:a3:0e:6c:5d:f9:99:1c:06:
d7:fb:a2:9a:1e:58:69:df:73:5d:a1:19:92:ab:7b:
f1:51:e9:35:5b:db:b6:d6:da:2b:55:36:00:31:49:
63:d8:29:c5:d3:2c:44:3a:41:fb:c0:8e:4c:1f:6a:
7d:56:0a:d3:c9:e9:aa:3f:23:72:80:c1:ab:ce:ea:
0e:5a:d8:1b:c8:5e:59:82:4e:a9:d0:71:49:5f:21:
05:50:a4:a2:78:37:94:c4:a7:6f:94:0b:0e:3f:08:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FF:87:61:8A:7B:41:98:70:98:3F:01:32:05:66:21:59:2A:B2:F4
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/av-HYYp7QZhwmD8BMgVmIVkqsvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.110.0/24
93.115.36.0/24
93.119.193.0/24
94.176.150.0/24
176.126.204.0/24
188.208.108.0/24
188.208.116.0/24
188.211.234.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c5:49:1e:50:85:59:e2:da:48:aa:24:79:f2:86:39:bb:b5:
74:66:2b:65:1f:28:23:b6:d1:25:c9:cf:1c:04:69:60:b5:be:
ab:67:c2:8d:c8:27:9e:42:38:4b:97:aa:57:f2:0e:04:75:17:
c8:90:38:d0:f8:40:13:29:ae:5b:6c:29:bb:43:98:0d:93:45:
c2:18:28:4f:24:3c:a4:b8:dc:3c:8a:43:70:c5:8a:57:5f:2d:
12:d8:14:63:4c:37:4f:59:6e:b9:6b:5a:0f:8c:70:04:77:9d:
c9:cc:18:64:74:e8:ad:41:43:59:fd:e6:9e:09:bc:ed:f6:c9:
5b:8c:38:ab:bc:8e:a3:ec:99:b3:d6:35:2e:5b:12:fd:c8:07:
2b:99:8f:ac:59:5f:e3:e5:80:7f:1b:d0:63:ce:18:21:41:e0:
de:99:e7:b1:3b:c4:02:8b:1d:b1:a8:dd:19:a4:cf:72:70:db:
ba:3b:7c:14:37:30:fb:8a:2e:b2:9b:24:2f:9c:84:e8:b1:ae:
c6:b9:3a:3c:a8:86:f3:8a:67:6e:21:4a:44:9d:07:c1:88:8b:
ea:7c:84:ce:88:11:21:9f:a4:91:a5:e9:c4:31:75:e4:13:c7:
b6:a5:a5:1e:0c:bc:a0:18:f6:f9:95:12:70:f6:ff:9e:c7:5a:
17:ea:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:01 2025 by rpki-client