Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/3FgiopgPL0f2Cx7MFSVaIcmYSPE.roa
File: 3FgiopgPL0f2Cx7MFSVaIcmYSPE.roa (raw, json)
Hash identifier: k4Cwu46+nwDZIwIOnhUxDsxGGc0pG6Rujrjd2Vt1Cx4=
Subject key identifier: DC:58:22:A2:98:0F:2F:47:F6:0B:1E:CC:15:25:5A:21:C9:98:48:F1
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 018ACDBD6A3AB0BE2597F87FD5A7CD817B22
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/3FgiopgPL0f2Cx7MFSVaIcmYSPE.roa
Signing time: Mon 25 Sep 2023 19:07:37 +0000
ROA not before: Mon 25 Sep 2023 19:07:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47285
IP address blocks: 194.147.150.0/24 maxlen: 24
185.105.236.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
45.139.8.0/24 maxlen: 24
194.180.209.0/24 maxlen: 24
2a12:2600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:bd:6a:3a:b0:be:25:97:f8:7f:d5:a7:cd:81:7b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Sep 25 19:07:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc5822a2980f2f47f60b1ecc15255a21c99848f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:d8:35:d0:05:97:1b:1c:f6:fb:0b:aa:16:
ee:b8:02:fd:8d:cb:52:46:a7:f5:ba:18:67:72:c1:
1e:c8:73:9e:77:bb:a9:c8:53:1d:47:87:3f:b6:ca:
18:69:7f:2d:cc:6d:a7:64:30:88:81:bc:fa:af:46:
23:6f:a6:9e:e3:0f:02:9b:40:67:19:c1:66:f3:c6:
03:f6:b5:c8:43:1f:2a:4e:53:87:e0:9c:77:ae:7b:
81:6e:a0:48:41:8c:48:09:44:0c:33:aa:4c:3e:fb:
58:ee:9a:8a:ed:e6:52:f6:f7:bb:03:c3:8d:19:c6:
08:49:d2:7a:fe:af:d7:07:1c:c0:04:f4:e4:c8:30:
0b:09:be:58:80:3f:51:48:4a:4f:22:73:c9:21:79:
23:db:8b:7c:02:5a:93:54:44:d5:2f:5a:f5:d9:19:
79:99:93:d7:91:42:56:3c:70:27:69:78:ee:3e:e4:
4c:fa:4e:33:70:7b:d1:77:4c:43:8b:c6:89:d4:6c:
2b:75:5f:af:a8:0a:f7:46:b4:a6:56:28:03:be:59:
f7:ed:42:cc:bc:a9:83:52:9f:47:e7:f7:14:44:fc:
02:67:4d:f9:6a:d0:d1:3d:dc:f2:fe:c4:33:c1:9e:
7a:27:c0:8e:40:ab:f8:85:82:ee:7e:a8:49:93:c5:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:58:22:A2:98:0F:2F:47:F6:0B:1E:CC:15:25:5A:21:C9:98:48:F1
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/3FgiopgPL0f2Cx7MFSVaIcmYSPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/24
185.105.236.0/24
185.105.238.0/24
194.147.150.0/24
194.180.209.0/24
IPv6:
2a12:2600::/29
Signature Algorithm: sha256WithRSAEncryption
90:86:e5:5a:90:fe:15:2d:fb:e2:35:27:23:db:db:f1:14:71:
be:22:5c:93:f8:12:fa:07:d6:61:b6:04:0d:7d:b8:3d:e3:29:
6c:6f:83:ca:94:c2:ce:ed:ff:09:14:7d:be:c3:42:df:9b:88:
82:d5:f5:b8:67:98:74:73:a5:85:48:fa:da:3c:26:34:ed:86:
41:71:ac:65:70:51:70:b3:77:bc:1a:e6:33:08:14:ce:94:17:
c3:92:87:80:53:38:20:93:c2:59:21:94:0c:32:44:91:11:9a:
da:12:db:bf:9b:43:af:c4:6f:58:f6:ad:46:4d:e5:90:80:b8:
03:61:da:18:f0:4e:16:a2:34:25:40:28:f7:32:63:a4:43:10:
b0:ab:4c:6d:d2:b9:10:d4:11:70:f9:de:09:73:35:25:b9:bf:
0d:2a:dd:b9:88:65:b3:d1:02:43:80:30:bf:3f:99:86:91:8a:
a0:38:2c:6a:cd:ff:ff:ba:7a:4d:36:44:40:bd:a2:d9:0f:f2:
98:11:a7:36:af:86:35:05:75:ea:eb:dc:7e:3c:88:51:a6:81:
fb:f1:b2:c6:a7:bd:c1:f0:9d:47:71:bc:bf:78:71:fd:e7:62:
74:b2:a2:16:a2:90:6b:12:5b:0a:cb:a8:89:5d:61:1b:ec:5f:
b4:31:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:28 2025 by rpki-client