Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/C0RlKRQqWprZmDEpQBJ_vX8w_TI.roa
File: C0RlKRQqWprZmDEpQBJ_vX8w_TI.roa (raw, json)
Hash identifier: jM8ysxz4ahZks9ix+zgMpsAyoCsjidkZABS91hR1xZo=
Subject key identifier: 0B:44:65:29:14:2A:5A:9A:D9:98:31:29:40:12:7F:BD:7F:30:FD:32
Certificate issuer: /CN=0dbcffabf5fabc8bcb04457c1ea6cc665f62740f
Certificate serial: 0BAB5388
Authority key identifier: 0D:BC:FF:AB:F5:FA:BC:8B:CB:04:45:7C:1E:A6:CC:66:5F:62:74:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dbz_q_X6vIvLBEV8HqbMZl9idA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/C0RlKRQqWprZmDEpQBJ_vX8w_TI.roa
Signing time: Sat 01 Jan 2022 15:57:57 +0000
ROA not before: Sat 01 Jan 2022 15:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 178.236.0.0/20 maxlen: 24
176.32.64.0/18 maxlen: 24
176.34.0.0/16 maxlen: 24
79.125.0.0/17 maxlen: 24
87.238.80.0/21 maxlen: 24
185.48.120.0/22 maxlen: 24
46.51.128.0/17 maxlen: 24
46.137.0.0/16 maxlen: 24
2a05:d000::/25 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195777416 (0xbab5388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dbcffabf5fabc8bcb04457c1ea6cc665f62740f
Validity
Not Before: Jan 1 15:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b446529142a5a9ad998312940127fbd7f30fd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:c4:18:f1:ad:4a:f9:dd:b0:07:37:4c:72:
f3:8e:68:05:a0:2b:31:eb:74:1f:0d:c2:b1:49:7a:
1d:47:32:9d:d6:a4:1d:1d:70:49:4b:85:84:a3:cf:
25:cc:b5:ba:4a:92:ba:19:a4:93:94:25:d4:f9:d7:
af:33:b7:8b:35:02:89:ba:1b:1f:f5:fb:4b:6a:8a:
31:41:40:64:86:80:81:f7:26:60:e8:3b:36:fc:7f:
8e:c5:d3:d2:53:ae:8e:73:eb:84:bf:28:44:96:7f:
03:e3:4a:1e:cc:bd:a3:3f:96:e8:c4:c0:a8:fb:e5:
90:dd:4b:0a:6b:c6:e2:0e:13:e9:17:40:dc:e0:d0:
95:05:77:a2:ba:ad:09:6a:8e:5a:50:af:2f:99:9e:
0c:f3:ed:58:b9:09:7c:58:8d:7e:83:8c:15:b7:2a:
46:40:43:4a:d6:4a:8f:9e:5d:c2:5b:52:e7:ac:cb:
47:17:11:de:98:f9:b0:23:c2:8b:83:58:b7:9a:72:
cd:9d:c4:8d:cc:79:9d:e8:54:ab:12:be:11:6a:16:
34:20:57:2f:12:46:83:c8:24:97:f7:4e:f1:a1:ff:
45:54:21:8e:81:22:e9:bb:4a:54:02:1e:22:58:da:
5a:46:70:d5:3d:84:ed:94:74:c5:46:84:5d:72:cf:
22:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:65:29:14:2A:5A:9A:D9:98:31:29:40:12:7F:BD:7F:30:FD:32
X509v3 Authority Key Identifier:
keyid:0D:BC:FF:AB:F5:FA:BC:8B:CB:04:45:7C:1E:A6:CC:66:5F:62:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dbz_q_X6vIvLBEV8HqbMZl9idA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/C0RlKRQqWprZmDEpQBJ_vX8w_TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/Dbz_q_X6vIvLBEV8HqbMZl9idA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
46.137.0.0/16
79.125.0.0/17
87.238.80.0/21
176.32.64.0/18
176.34.0.0/16
178.236.0.0/20
185.48.120.0/22
IPv6:
2a05:d000::/25
Signature Algorithm: sha256WithRSAEncryption
02:fe:28:84:1d:09:dd:d5:fe:cd:0d:80:b2:da:54:b2:27:36:
10:88:7a:2f:73:a6:93:a4:d3:f2:6a:7d:1f:75:c8:7a:d2:dd:
e9:66:86:af:67:d5:00:2f:ea:58:76:be:6e:e4:17:88:84:16:
a2:0f:17:e1:7f:0c:08:a4:d4:67:75:36:f1:b3:f4:f5:61:cf:
f5:92:0c:95:7a:46:88:c6:f8:05:35:9b:c1:82:df:15:b4:58:
1d:f1:87:01:bc:81:f4:65:87:0d:c4:e7:35:28:16:3d:fd:cc:
14:ec:8e:12:a0:e5:7f:22:ba:62:86:10:0b:17:bc:ae:0d:24:
a5:12:20:82:b7:f4:3a:49:7a:ad:cf:b4:dd:5f:3c:a7:de:ae:
7b:22:ee:2c:5f:cb:31:82:0c:12:1d:9f:61:4e:fa:34:10:89:
76:a2:ec:47:e5:c7:40:4c:07:29:97:a5:7b:28:28:9c:4d:1a:
a7:5a:f2:36:b7:46:71:9a:18:f0:80:9b:78:73:51:3d:e9:5b:
2a:b5:f4:a7:a6:5c:ce:e4:5e:3a:81:e4:a1:9c:62:01:66:34:
b4:48:2b:22:8b:cd:12:89:0c:7a:80:ac:88:49:a5:2a:5b:c6:
99:d4:a7:bc:bb:9f:c5:7d:8e:be:de:64:b3:72:0d:8b:f8:3a:
15:69:73:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:43 2025 by rpki-client