Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/J-Kau0Dv4Ey5Cay7gpNCyJsv3_g.roa
File: J-Kau0Dv4Ey5Cay7gpNCyJsv3_g.roa (raw, json)
Hash identifier: l5nChjqyMOYHFDnX+pNNwj10I5abtscUeKnVcv94f9I=
Subject key identifier: 27:E2:9A:BB:40:EF:E0:4C:B9:09:AC:BB:82:93:42:C8:9B:2F:DF:F8
Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial: 01856DDD50C4DF794CC60B3949585D730445
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/J-Kau0Dv4Ey5Cay7gpNCyJsv3_g.roa
Signing time: Sun 01 Jan 2023 15:04:58 +0000
ROA not before: Sun 01 Jan 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8360
IP address blocks: 193.194.11.0/24 maxlen: 24
193.194.10.0/24 maxlen: 24
193.194.8.0/23 maxlen: 23
194.127.71.0/24 maxlen: 24
194.127.68.0/24 maxlen: 24
194.127.70.0/24 maxlen: 24
194.127.69.0/24 maxlen: 24
194.127.72.0/24 maxlen: 24
194.127.73.0/24 maxlen: 24
194.127.78.0/24 maxlen: 24
194.127.75.0/24 maxlen: 24
194.127.74.0/24 maxlen: 24
194.127.77.0/24 maxlen: 24
193.58.218.0/23 maxlen: 23
193.58.220.0/23 maxlen: 23
193.58.220.0/24 maxlen: 24
194.127.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:50:c4:df:79:4c:c6:0b:39:49:58:5d:73:04:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Validity
Not Before: Jan 1 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e29abb40efe04cb909acbb829342c89b2fdff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:e3:fb:db:f3:65:40:65:a1:ab:b5:50:88:
06:1c:ad:f2:03:4d:d5:1c:6f:06:20:c9:a7:ab:8f:
31:ca:88:1b:f4:75:a4:c7:9f:ef:55:77:5f:59:91:
7b:62:f5:cd:37:00:29:4d:87:9b:fa:16:10:01:f3:
41:f7:6f:e2:95:ce:d5:70:69:53:48:d9:7a:f0:fe:
d2:58:4d:31:36:70:70:2f:6d:e8:f9:84:ed:39:6c:
14:3a:fa:8f:fd:31:7e:0d:54:8b:1d:07:90:b9:d2:
1f:c9:9a:e5:4f:76:12:b4:6a:eb:40:46:65:8b:5a:
f4:b4:43:77:15:16:89:bc:b0:42:da:e0:07:a2:5a:
93:b5:fe:5c:7c:2a:bc:59:61:7c:d1:95:90:df:ea:
6b:1f:fb:1a:73:d1:e9:ad:b7:7b:64:7e:a2:86:a1:
63:ed:d9:66:0e:4d:1e:2a:5e:21:46:9b:c3:c5:ab:
0c:14:da:ef:f6:3d:36:42:a8:0f:80:38:ce:1b:25:
86:9d:59:70:af:17:a6:d2:5e:2b:6c:2c:9a:79:59:
e7:8f:b4:6e:6d:44:32:ac:1d:1f:69:e7:30:d7:11:
9f:4f:2f:c9:64:0f:03:1b:8f:ef:bf:03:8f:48:20:
0b:3e:56:93:d8:ef:c5:59:a1:ef:8d:27:b1:15:d3:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E2:9A:BB:40:EF:E0:4C:B9:09:AC:BB:82:93:42:C8:9B:2F:DF:F8
X509v3 Authority Key Identifier:
keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/J-Kau0Dv4Ey5Cay7gpNCyJsv3_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.218.0-193.58.221.255
193.194.8.0/22
194.127.30.0/24
194.127.68.0-194.127.75.255
194.127.77.0-194.127.78.255
Signature Algorithm: sha256WithRSAEncryption
5c:dd:83:b6:3d:09:0f:7c:2a:dd:0d:85:23:41:ee:7f:cd:74:
be:bd:d3:a1:8a:67:22:de:8d:38:4b:68:f1:e0:00:e0:a3:22:
34:e0:d2:af:7f:70:a9:0c:a5:da:04:01:95:4a:dd:5f:22:dc:
68:dc:41:3f:8d:ff:6f:02:8b:3b:37:d4:0d:df:8b:b0:0d:4f:
ab:1e:d2:92:66:da:23:e8:05:fc:45:65:98:e3:23:50:c0:71:
f3:74:a3:75:b3:24:2b:fc:1e:e7:ad:d6:9b:49:e6:c2:e8:0b:
09:69:40:2b:a6:52:74:d7:da:8f:ab:63:8d:0f:a2:cb:91:40:
bf:e3:b7:f7:fb:89:f7:96:a4:cf:9b:ad:aa:11:a4:35:08:05:
ba:43:9b:50:2b:80:21:15:c2:1b:d0:d5:9c:6e:b7:07:19:cc:
41:ab:b7:f5:46:a2:ec:2b:8d:9c:d2:b1:7c:27:bf:ad:59:20:
ef:94:80:d2:d8:e0:07:1e:04:d6:db:a7:a4:01:df:63:cf:65:
72:d8:53:d5:d7:0d:9c:09:d4:13:58:51:18:30:7e:2f:ec:4d:
b4:f7:10:6e:41:5a:d9:45:8a:df:63:cf:65:42:2a:af:77:21:
be:58:60:74:a0:51:4a:dd:de:04:0e:59:42:fe:e6:4e:db:d8:
89:ac:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:36:53 2025 by rpki-client