Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/XXeWARaixCDiCF9uFr7Wx8bKJFs.roa
File: XXeWARaixCDiCF9uFr7Wx8bKJFs.roa (raw, json)
Hash identifier: 2tDSW2P/CvawIv5bHPmv2/pw4fgVs2dx0lBLEiCMblQ=
Subject key identifier: 5D:77:96:01:16:A2:C4:20:E2:08:5F:6E:16:BE:D6:C7:C6:CA:24:5B
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 08C1385E
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/XXeWARaixCDiCF9uFr7Wx8bKJFs.roa
Signing time: Sat 01 Jan 2022 14:55:49 +0000
ROA not before: Sat 01 Jan 2022 14:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 82.192.97.0/24 maxlen: 24
82.192.96.0/24 maxlen: 24
82.192.100.0/24 maxlen: 24
82.192.103.0/24 maxlen: 24
82.192.101.0/24 maxlen: 24
82.192.102.0/24 maxlen: 24
82.192.110.0/24 maxlen: 24
82.192.108.0/24 maxlen: 24
82.192.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146880606 (0x8c1385e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Jan 1 14:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d77960116a2c420e2085f6e16bed6c7c6ca245b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:17:6f:88:f8:01:ab:1b:cd:36:ab:70:22:
cf:0a:15:d3:a9:ae:5f:c8:a3:3d:78:36:36:a6:90:
99:f0:3e:01:11:7d:2b:8f:08:bc:ec:ea:59:86:15:
ae:87:94:85:a6:ea:cd:6d:90:72:9a:52:0b:d1:14:
0a:5d:8a:ae:70:29:da:50:fa:6e:9b:12:26:b6:14:
47:10:82:30:07:35:23:51:92:5d:58:36:76:51:82:
55:f7:5b:1b:af:00:be:bb:5b:65:18:fd:dd:d4:6a:
43:72:bd:a2:92:f0:1c:1e:b0:ee:95:33:a1:65:66:
a2:b3:1a:28:ad:9c:3c:e1:95:91:e4:2c:6f:4e:20:
1d:61:2d:e4:d4:bb:f6:30:69:83:e6:a6:01:53:aa:
77:c4:99:8f:9c:75:df:2f:a6:f2:f5:4d:28:9a:d3:
92:0d:7d:4b:9c:3b:39:48:8f:d0:d9:b3:5a:64:ac:
8e:11:0a:d8:a8:2c:9d:ac:c6:06:74:46:4a:ad:16:
72:f1:72:f0:a7:30:d0:9f:36:ab:4d:32:68:ed:1f:
4d:b6:96:d5:8e:78:60:a2:fb:f8:06:ce:87:97:aa:
91:a5:71:7f:e4:2a:af:11:7e:7b:a0:6e:47:9e:3e:
05:80:19:f1:0e:fd:e2:17:23:13:88:3a:f9:c4:16:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:77:96:01:16:A2:C4:20:E2:08:5F:6E:16:BE:D6:C7:C6:CA:24:5B
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/XXeWARaixCDiCF9uFr7Wx8bKJFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.96.0/23
82.192.100.0/22
82.192.108.0-82.192.110.255
Signature Algorithm: sha256WithRSAEncryption
00:9d:17:83:47:9c:1e:ac:fb:6b:d7:fd:90:63:6c:8e:89:c6:
53:b0:5e:b3:cf:94:71:1e:45:e5:de:21:df:00:88:d9:e2:82:
1f:a7:64:4b:d9:83:bc:69:a1:1e:b0:9c:a3:8c:00:b5:dd:ed:
6a:8c:31:8f:2a:da:3e:d8:f8:9b:eb:57:b6:9c:95:7e:d8:15:
d3:84:48:3c:fb:0e:f7:24:d8:fd:69:7b:d3:52:e9:2a:50:20:
35:bb:72:63:4a:8b:04:86:e9:81:00:c2:f3:66:c5:6c:9f:a9:
bd:b4:3b:29:8d:a5:ea:6f:73:9b:47:a8:cb:bf:c9:4d:7a:77:
a1:a8:a4:87:7b:39:0e:a3:21:92:db:9c:e7:be:88:ed:00:31:
e1:19:4b:d8:77:77:ce:31:3d:44:ee:39:c7:50:85:0c:74:83:
06:69:dc:21:89:f5:e9:0a:9e:11:20:8a:93:29:9b:4c:8a:86:
09:b7:a0:ce:84:dd:38:85:aa:b8:57:c4:ab:8c:03:ca:5b:7d:
ac:e2:da:32:6a:10:d3:80:0d:57:68:68:73:9f:d8:8a:5d:98:
82:52:9b:d4:23:0d:f1:bf:82:02:d1:f8:09:43:a0:87:9a:4c:
11:c4:2f:d9:74:bd:1b:b1:a8:b9:60:05:37:c0:98:f9:b8:c2:
f5:ab:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:42 2025 by rpki-client