Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/PozbSbm_lGBEHgnV2jJq-5ABGJk.roa
File: PozbSbm_lGBEHgnV2jJq-5ABGJk.roa (raw, json)
Hash identifier: zhwKDIMMM0UGevYZXFEvIbgSH9WZ4rYKgMpU20f0Mck=
Subject key identifier: 3E:8C:DB:49:B9:BF:94:60:44:1E:09:D5:DA:32:6A:FB:90:01:18:99
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 0185A5C75DB64F86818DAFDD16E307481A86
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/PozbSbm_lGBEHgnV2jJq-5ABGJk.roa
Signing time: Thu 12 Jan 2023 11:39:44 +0000
ROA not before: Thu 12 Jan 2023 11:39:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42473
IP address blocks: 185.94.28.0/24 maxlen: 24
202.61.208.0/24 maxlen: 24
202.61.212.0/23 maxlen: 24
202.61.209.0/24 maxlen: 24
202.61.210.0/24 maxlen: 24
202.61.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:c7:5d:b6:4f:86:81:8d:af:dd:16:e3:07:48:1a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Jan 12 11:39:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e8cdb49b9bf9460441e09d5da326afb90011899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:11:99:11:0d:4d:fb:d7:ab:b2:69:27:77:
87:ec:5c:62:bd:24:34:6a:1e:f9:72:17:1e:64:4a:
32:8d:4f:68:b8:57:31:fa:1a:ea:cb:df:15:1f:73:
0b:94:db:aa:a7:ee:43:62:59:00:92:cb:e3:c9:02:
a3:ae:b8:e2:4c:97:1d:96:2c:55:f1:33:4d:9e:76:
08:3b:c7:79:1e:f7:be:8b:94:e8:ff:48:da:d9:de:
b2:82:f8:00:90:1b:f5:a8:93:1c:36:50:9c:e6:9b:
7f:d2:c4:fd:7e:3a:9d:e9:30:eb:30:71:ff:3d:3d:
57:5b:ad:b0:ac:ac:93:32:90:1e:6c:49:bd:18:59:
b0:06:32:8c:19:a0:f9:69:86:48:28:6f:52:b7:5d:
53:23:48:7a:52:6f:5c:51:f8:bb:af:16:0c:17:37:
72:c4:35:71:51:f0:c6:f9:35:7d:b8:f1:16:18:1e:
bf:92:00:75:94:52:bd:fb:d4:76:36:b0:ee:45:3e:
c5:55:12:55:dc:8d:b6:cb:d8:a5:b7:4f:53:53:04:
ba:cd:43:4f:8b:52:e9:19:e5:7d:11:eb:dd:3a:95:
26:72:06:fb:2d:48:08:3a:91:30:38:17:3f:b5:2d:
6a:ba:54:2e:01:32:08:36:9c:b9:13:8a:d0:32:0a:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8C:DB:49:B9:BF:94:60:44:1E:09:D5:DA:32:6A:FB:90:01:18:99
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/PozbSbm_lGBEHgnV2jJq-5ABGJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.28.0/24
202.61.208.0-202.61.213.255
Signature Algorithm: sha256WithRSAEncryption
9f:cb:c2:e5:fb:fa:bd:a4:fa:bb:64:d8:e0:4b:78:22:ea:16:
24:44:e8:dd:4a:1a:02:24:94:28:f5:76:e0:18:71:6b:e2:b4:
02:8c:17:60:db:83:e5:79:5d:d9:a5:e7:49:53:29:ab:cd:0b:
88:cd:30:52:59:10:92:fe:4c:c5:8c:5b:c5:9f:3d:8c:33:c1:
f1:86:25:89:e7:bb:d6:db:dd:17:f6:30:58:a5:9f:b8:fd:fa:
a2:fe:3e:d2:29:a1:30:86:97:cf:27:c6:50:4f:a7:cc:94:41:
4f:6d:63:ef:4a:99:e4:d9:9d:a2:db:75:3b:f3:72:07:aa:ba:
71:71:4a:23:86:ae:e3:36:46:a5:0d:0d:ff:87:fb:61:a0:83:
e1:94:d4:35:05:12:06:e5:6c:14:e4:86:ae:d8:6d:98:7a:55:
14:75:e0:c9:ab:e7:97:dc:94:28:c8:e0:96:08:7f:82:90:10:
2e:71:a5:30:8d:6b:27:e2:b6:69:d1:3e:2b:95:b4:07:f3:82:
20:d0:2b:49:b5:13:66:d2:ba:f0:23:a9:84:ba:8e:33:6f:cb:
dc:d9:da:42:4e:96:1b:fa:d4:62:b3:9e:f9:70:ee:5f:5e:d7:
76:bb:24:65:04:ee:13:f6:61:5b:0e:a1:a1:49:7d:5f:b0:d1:
18:4f:d1:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:58 2025 by rpki-client