Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pjI8NR3Eqj5ehCEMxmQhIANF8O0.roa
File: pjI8NR3Eqj5ehCEMxmQhIANF8O0.roa (raw, json)
Hash identifier: dyLSzWEZN2hY2r6sOsM9hvjhEYV4ze+kRFYJ3Mz96cQ=
Subject key identifier: A6:32:3C:35:1D:C4:AA:3E:5E:84:21:0C:C6:64:21:20:03:45:F0:ED
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D941B89023A4EBAB6950E4E8129E4DF
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pjI8NR3Eqj5ehCEMxmQhIANF8O0.roa
Signing time: Sun 01 Jan 2023 13:45:00 +0000
ROA not before: Sun 01 Jan 2023 13:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 164.215.103.0/24 maxlen: 24
5.10.240.0/22 maxlen: 22
5.10.252.0/22 maxlen: 22
185.81.219.0/24 maxlen: 24
185.81.218.0/24 maxlen: 24
88.151.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:1b:89:02:3a:4e:ba:b6:95:0e:4e:81:29:e4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6323c351dc4aa3e5e84210cc66421200345f0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a1:e0:b9:50:c6:fb:db:8e:ba:8e:20:d2:c6:
7c:85:1c:83:bf:4f:6b:cc:42:0a:93:aa:ff:3e:cb:
0d:47:79:53:a6:5f:f9:02:f4:cb:3d:8c:30:82:d2:
93:82:db:7e:ff:47:39:27:8e:e7:02:af:71:1d:a1:
c0:d6:13:a1:59:a4:c0:88:ed:a4:5e:6f:b6:55:21:
86:30:29:c2:30:d8:80:7b:10:ad:88:1a:40:72:11:
be:2f:07:ca:91:e4:3c:1e:e1:07:56:bc:d3:b0:26:
95:cb:27:5f:ba:77:45:72:81:30:1f:59:df:b1:29:
f2:76:05:93:b9:57:19:a1:13:69:62:b1:f7:a1:ce:
6b:e8:3d:b7:1f:68:40:22:ba:11:16:c9:17:a0:53:
f4:78:15:55:88:78:ce:1e:eb:f5:a1:d9:69:48:ed:
79:72:c7:58:88:21:0d:e3:71:42:7f:02:c6:ae:44:
64:a6:3d:d0:ad:fa:bc:37:ae:63:59:fd:3a:13:d2:
2a:c9:33:04:20:32:86:79:94:26:fe:50:99:a2:9c:
33:32:62:fb:f2:fc:23:77:78:33:2c:aa:5d:eb:53:
30:4b:b5:19:c0:88:af:63:a2:c7:de:b5:6c:92:be:
a2:1b:36:d7:05:77:0c:9e:3d:dc:70:52:04:bb:de:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:32:3C:35:1D:C4:AA:3E:5E:84:21:0C:C6:64:21:20:03:45:F0:ED
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pjI8NR3Eqj5ehCEMxmQhIANF8O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/22
5.10.252.0/22
88.151.192.0/24
164.215.103.0/24
185.81.218.0/23
Signature Algorithm: sha256WithRSAEncryption
63:7b:90:b3:f1:c5:d6:d6:6c:01:b3:e6:cb:2d:81:ed:9b:db:
d2:b8:42:d1:8b:5f:32:f8:74:07:45:58:74:75:52:60:b8:14:
a9:30:1e:c8:01:86:0c:e6:c0:c5:cf:f9:92:ae:8f:79:6b:4a:
24:d6:77:5d:3c:a9:c7:c3:c9:3d:85:f2:89:8a:8a:b3:15:f8:
c4:43:8b:e4:68:76:bc:d4:b5:29:1a:aa:85:e4:65:7f:35:7a:
5d:70:dc:d7:66:5a:bd:2c:20:8c:5a:4a:84:ad:09:24:d5:35:
7f:86:ae:a3:f0:30:db:22:ee:a3:43:12:35:16:7b:3f:36:e4:
b4:ae:73:8e:08:89:a8:0b:bb:e2:da:f6:d8:04:27:2a:f8:92:
d9:ad:2e:52:64:9d:44:57:6b:7a:e3:67:17:e1:31:c9:94:3e:
5f:ac:76:d7:71:a0:87:66:92:d8:76:94:f3:87:99:72:4f:1f:
18:ba:78:90:8c:a2:27:bc:ea:90:5c:6f:ef:a2:3a:26:79:c0:
3a:ed:66:9e:8b:17:77:80:33:1f:69:5d:2f:c7:67:80:fb:67:
a5:89:21:7c:06:85:d3:1c:c0:88:21:6b:c1:e7:a8:f6:41:9a:
3d:bd:e0:bf:d1:01:0b:47:2c:e5:76:70:e8:4d:d6:05:48:7e:
80:2f:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:53 2025 by rpki-client