Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/iXjI9CNEaAA_Lub9fyjwVq5hCdg.roa
File: iXjI9CNEaAA_Lub9fyjwVq5hCdg.roa (raw, json)
Hash identifier: v85zat/w7gBTOosb1homJNPssVGBSLgs7NIm2lJEuco=
Subject key identifier: 89:78:C8:F4:23:44:68:00:3F:2E:E6:FD:7F:28:F0:56:AE:61:09:D8
Certificate issuer: /CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Certificate serial: 01838F0F9CE19DB3885004477BA186FCD274
Authority key identifier: B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/iXjI9CNEaAA_Lub9fyjwVq5hCdg.roa
Signing time: Fri 30 Sep 2022 15:41:48 +0000
ROA not before: Fri 30 Sep 2022 15:41:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42237
IP address blocks: 193.105.134.0/24 maxlen: 24
91.236.116.0/24 maxlen: 24
185.217.2.0/24 maxlen: 24
185.217.1.0/24 maxlen: 24
185.217.0.0/24 maxlen: 24
185.246.130.0/23 maxlen: 23
2a0d:8986::/32 maxlen: 32
2a0d:8985::/32 maxlen: 32
2a0d:8982::/32 maxlen: 32
2a0d:8981::/32 maxlen: 32
2a0b:c040::/32 maxlen: 32
2a0d:8987::/32 maxlen: 32
2a0d:8984::/32 maxlen: 32
2a0d:8980::/32 maxlen: 32
2a0b:c041::/32 maxlen: 32
2a0d:8983::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8f:0f:9c:e1:9d:b3:88:50:04:47:7b:a1:86:fc:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Validity
Not Before: Sep 30 15:41:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8978c8f4234468003f2ee6fd7f28f056ae6109d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:31:2e:91:4f:99:b9:9d:65:62:4e:85:30:d8:
42:2a:4e:58:c8:48:21:2e:09:56:7f:c3:01:06:d9:
42:74:bc:83:0a:c0:30:0f:52:19:48:d6:10:ad:6c:
f2:91:d1:ad:cf:1a:7e:8e:1a:6d:64:1c:c6:e4:a2:
da:b9:6b:c4:4c:d0:b3:6c:75:9c:a1:74:de:3c:b8:
9f:16:1c:71:c9:40:fe:2d:58:58:92:29:7d:f8:eb:
b4:6b:db:1c:80:92:ba:36:4f:1e:d9:4d:0d:68:37:
13:b5:89:d2:7d:0d:70:82:82:44:65:6e:76:e3:19:
76:bc:51:58:ad:28:78:fd:38:ba:ef:e4:a5:d1:8e:
a5:cf:92:42:87:e7:6f:a9:3d:39:31:27:86:89:61:
fa:aa:8a:c7:a1:fb:5a:75:b6:bd:e3:13:0b:43:32:
0b:14:c7:5d:41:24:23:35:35:fc:3b:75:62:35:09:
4a:62:60:e1:83:1c:69:55:15:2e:69:6f:e7:77:39:
51:f0:b1:4c:cc:a4:0f:69:54:24:b1:d9:64:38:80:
b9:b1:6d:97:79:63:41:e3:98:96:33:55:67:9b:32:
15:0a:28:2a:7c:d7:45:67:6e:2c:a5:b7:50:d7:cf:
2a:8e:53:77:d6:b0:62:60:44:e8:23:b9:31:e2:60:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:C8:F4:23:44:68:00:3F:2E:E6:FD:7F:28:F0:56:AE:61:09:D8
X509v3 Authority Key Identifier:
keyid:B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/iXjI9CNEaAA_Lub9fyjwVq5hCdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/swv12Qhf5a_l4gHXwjbO-b6SNa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.116.0/24
185.217.0.0-185.217.2.255
185.246.130.0/23
193.105.134.0/24
IPv6:
2a0b:c040::/31
2a0d:8980::/29
Signature Algorithm: sha256WithRSAEncryption
bf:11:03:e2:9b:fd:b9:ea:bb:ce:03:fc:31:90:7a:54:99:05:
84:de:13:4e:f2:cd:d9:6f:6e:d1:e0:8f:98:ea:e9:bc:f7:bc:
4a:00:4a:20:56:aa:0d:bf:0f:80:25:3f:e1:cb:22:db:8e:ae:
0a:18:85:e8:af:0f:b0:8b:38:e6:42:cf:a8:51:da:d2:43:80:
86:cd:b7:f2:93:9d:c5:a3:18:6e:a6:0e:8f:61:70:b9:a5:4b:
12:02:18:53:e0:a1:c1:ee:f6:ad:0d:69:3d:16:79:c5:21:a4:
e2:8d:27:bd:68:51:f5:45:6a:a1:7c:0d:01:6d:89:5b:02:e5:
ff:22:33:02:c2:29:cf:26:fd:87:19:08:0d:14:68:b9:4b:38:
cc:30:c7:69:60:c0:9b:57:c5:5b:f7:93:64:a0:af:83:3d:df:
7e:46:6f:00:98:ea:4c:a9:7f:2c:96:09:e7:53:4d:0e:0d:48:
f9:dd:d7:27:d9:4a:a4:59:32:55:11:cf:8a:7d:03:77:a5:98:
a0:f6:26:8b:a7:c4:1b:0a:a4:24:79:e6:6f:b8:09:84:f0:73:
93:b1:f9:f9:5d:23:87:b7:15:7a:3d:8f:77:51:d5:b5:84:2e:
0f:3b:71:8a:14:19:6e:7e:28:60:58:7c:48:70:e8:fb:8c:f7:
f2:43:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:49 2025 by rpki-client