Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/M288gbp1HP-YAsumQ5Z1ZTR5iXQ.roa
File: M288gbp1HP-YAsumQ5Z1ZTR5iXQ.roa (raw, json)
Hash identifier: CgNWM8b8ltG8oH7WFy+DMMfzJoCQ6CV4g4Zkm+7IN5M=
Subject key identifier: 33:6F:3C:81:BA:75:1C:FF:98:02:CB:A6:43:96:75:65:34:79:89:74
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0189117E4F2FF41D42D73316B262D18287E0
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/M288gbp1HP-YAsumQ5Z1ZTR5iXQ.roa
Signing time: Sat 01 Jul 2023 12:47:17 +0000
ROA not before: Sat 01 Jul 2023 12:47:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208486
IP address blocks: 78.159.131.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:11:7e:4f:2f:f4:1d:42:d7:33:16:b2:62:d1:82:87:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 1 12:47:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=336f3c81ba751cff9802cba64396756534798974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:b4:46:39:49:b2:bd:5f:a5:60:92:b2:de:
93:fb:7a:cf:38:33:11:66:ea:3f:5c:69:76:6b:3f:
cd:3e:bb:e3:ab:c9:5f:09:ca:2a:f9:69:ee:dc:98:
31:88:67:43:26:af:a3:aa:b3:0e:80:fc:17:0d:cc:
50:5d:f2:2f:92:8b:96:19:35:91:f0:62:1a:1a:38:
e3:77:7e:e9:44:09:cf:a8:5c:ba:93:db:64:b9:1b:
da:8d:51:8e:0e:4b:b8:07:dc:ed:c9:45:62:50:7c:
07:da:d7:c9:18:c0:38:73:7c:fc:03:de:d9:d2:4a:
fd:62:cf:36:0c:a8:00:7a:c4:b8:ea:f0:3e:ca:08:
a3:3e:bb:aa:af:05:0b:c4:5a:5a:bd:1d:4f:e5:4e:
da:d5:8a:d5:11:9e:55:66:e1:a9:5f:dc:f1:f2:fc:
f9:b6:65:a6:2d:2a:b1:cc:2c:fb:0e:00:86:d4:71:
8c:82:d0:78:41:ea:7f:b6:f8:f8:a9:79:85:13:07:
fc:18:7f:96:15:89:2e:9c:9f:4c:7c:6d:af:ad:3e:
ec:f8:74:1f:0c:af:34:bf:65:5d:25:3a:1c:72:44:
3c:a1:80:39:2f:d7:5a:54:73:96:23:dd:a8:71:fc:
74:79:87:96:d9:eb:fb:95:88:fb:12:6e:73:d3:b9:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6F:3C:81:BA:75:1C:FF:98:02:CB:A6:43:96:75:65:34:79:89:74
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/M288gbp1HP-YAsumQ5Z1ZTR5iXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.131.0/24
93.152.209.0/24
93.152.215.0/24
93.152.217.0/24
93.152.221.0/24
93.152.224.0/24
Signature Algorithm: sha256WithRSAEncryption
67:03:01:f9:6b:c9:66:89:96:fa:42:06:5e:8e:bc:53:a1:b6:
22:97:b3:56:52:35:28:6e:b3:f7:fd:8b:92:73:e7:24:9a:cf:
c9:0f:a7:3b:9a:48:04:fe:15:ce:05:1c:34:36:41:79:60:65:
cb:e8:4a:b2:59:4e:47:ca:54:45:f1:36:6a:03:9a:9e:99:7d:
f5:0b:ec:70:92:ea:f4:8a:54:c9:82:31:53:57:0d:55:a3:ef:
52:b1:95:3d:83:c6:0b:1d:1b:07:7a:24:02:74:b5:69:05:f6:
29:f2:ad:c1:6c:b3:10:18:29:5d:7a:c5:21:0b:29:e5:b4:43:
cb:5e:28:fd:9d:ef:6f:8a:96:8e:fd:b2:ff:e8:76:78:b1:a3:
6d:ad:87:ba:e9:f4:81:f6:6a:ff:df:30:ce:2f:c5:81:e6:87:
b1:75:8d:8d:22:33:2c:70:da:71:2e:77:8b:84:b0:98:bb:16:
58:27:41:f2:e7:50:17:31:bb:6a:a4:ec:ca:f7:fd:67:3d:60:
cd:fa:15:7c:a4:3a:fb:9d:6d:6a:41:49:13:48:4f:31:a1:b9:
49:1f:6b:b4:7d:00:15:5c:3f:21:8c:92:c3:bb:77:f1:aa:fe:
56:5b:1c:20:12:d2:88:90:68:55:38:42:12:d5:aa:02:6c:61:
2f:f2:bf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:38:40 2025 by rpki-client