Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bf6937-5b57-441f-b241-14d61d07763e/1/PuRlC4y1iO96y05qGKKyO1WCOJg.roa
File: PuRlC4y1iO96y05qGKKyO1WCOJg.roa (raw, json)
Hash identifier: E60X5ah/+VnZT0iE3vJ87rfGhS1LbvqovUh0GOzobgc=
Subject key identifier: 3E:E4:65:0B:8C:B5:88:EF:7A:CB:4E:6A:18:A2:B2:3B:55:82:38:98
Certificate issuer: /CN=341cb46fbd84d90a8401beb2419ebbcefac5bc22
Certificate serial: 02F5F279
Authority key identifier: 34:1C:B4:6F:BD:84:D9:0A:84:01:BE:B2:41:9E:BB:CE:FA:C5:BC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBy0b72E2QqEAb6yQZ67zvrFvCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bf6937-5b57-441f-b241-14d61d07763e/1/PuRlC4y1iO96y05qGKKyO1WCOJg.roa
Signing time: Sat 01 Jan 2022 10:00:51 +0000
ROA not before: Sat 01 Jan 2022 10:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200738
IP address blocks: 188.215.8.0/22 maxlen: 22
93.114.240.0/22 maxlen: 22
176.100.224.0/24 maxlen: 24
176.100.225.0/24 maxlen: 24
176.100.224.0/20 maxlen: 20
185.97.168.0/22 maxlen: 22
176.100.212.0/22 maxlen: 22
176.100.208.0/22 maxlen: 22
2a06:6c0:3::/48 maxlen: 48
2a06:6c0:254::/48 maxlen: 48
2a06:6c0:2::/48 maxlen: 48
2a06:6c0:1::/48 maxlen: 48
2a06:6c0:255::/48 maxlen: 48
2a06:6c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49672825 (0x2f5f279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341cb46fbd84d90a8401beb2419ebbcefac5bc22
Validity
Not Before: Jan 1 10:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ee4650b8cb588ef7acb4e6a18a2b23b55823898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:28:3a:fa:a5:89:e0:4a:0a:30:d1:ec:06:
5f:f3:59:81:52:81:01:c4:d0:6c:eb:08:4a:89:f6:
6e:aa:02:24:fd:73:6f:6a:10:80:5c:cc:5a:95:19:
51:1e:71:ad:aa:3e:55:62:37:69:7d:0d:4a:1e:8f:
e8:0c:66:ea:c1:ef:97:d3:7c:93:6c:50:78:f8:29:
29:18:92:c9:a2:0c:c6:7c:ec:6b:f0:fd:c2:f6:88:
5a:8f:62:75:9e:a8:7f:89:7b:71:65:53:0f:b7:86:
e4:f0:e6:93:32:0c:53:cd:b1:39:22:ea:6c:42:17:
3f:b5:6e:23:5c:6e:42:07:3a:e8:92:5e:4d:e6:fd:
ac:74:98:7b:0e:6d:76:fa:a7:12:14:f2:c7:45:11:
d9:b6:cc:00:75:71:8f:7d:9c:31:65:88:43:cc:b0:
0d:be:17:4d:28:ff:28:86:77:19:c8:bb:fe:25:dc:
f1:74:dc:d5:83:78:bb:9e:fd:0a:fd:78:bc:99:46:
65:b6:f8:d6:ca:a2:74:fb:36:e7:6d:33:98:39:9e:
c5:72:7e:5c:ef:55:f4:2a:f3:8b:4e:9e:72:ec:58:
94:2f:75:23:6f:dc:a4:42:19:ef:cf:e2:44:35:b6:
d2:99:b0:43:19:29:3e:89:e8:86:cf:ad:2a:04:0c:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E4:65:0B:8C:B5:88:EF:7A:CB:4E:6A:18:A2:B2:3B:55:82:38:98
X509v3 Authority Key Identifier:
keyid:34:1C:B4:6F:BD:84:D9:0A:84:01:BE:B2:41:9E:BB:CE:FA:C5:BC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBy0b72E2QqEAb6yQZ67zvrFvCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bf6937-5b57-441f-b241-14d61d07763e/1/PuRlC4y1iO96y05qGKKyO1WCOJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bf6937-5b57-441f-b241-14d61d07763e/1/NBy0b72E2QqEAb6yQZ67zvrFvCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.240.0/22
176.100.208.0/21
176.100.224.0/20
185.97.168.0/22
188.215.8.0/22
IPv6:
2a06:6c0::/46
2a06:6c0:254::/47
Signature Algorithm: sha256WithRSAEncryption
3c:ad:32:04:42:32:74:e9:76:6e:8e:83:74:f2:38:86:5a:b9:
1a:f8:6d:d7:40:02:d6:7e:2f:c5:52:ea:16:68:2d:5e:ec:15:
cc:05:1b:bf:a5:75:db:02:eb:7a:bb:e9:0e:d4:dd:71:ec:cd:
c7:0f:ce:7e:5e:79:36:61:0e:f1:30:b1:34:2a:bd:fe:d0:a5:
f3:59:c2:f5:19:36:4a:df:24:41:03:d6:16:bf:0e:e6:86:f1:
83:28:24:8f:41:a7:8c:a4:3d:f4:bc:b1:91:12:48:1c:f9:3e:
3e:a9:fc:06:62:29:07:57:a1:4a:a2:62:a3:c1:38:e4:97:b0:
f7:5f:18:d4:09:d9:fe:78:cb:f8:c6:2c:fa:6d:8e:27:16:63:
de:b7:ef:56:19:ce:76:e6:03:56:2a:cd:eb:b1:1e:da:c5:83:
cf:24:a8:aa:99:21:03:6c:47:2e:15:49:3d:ae:5c:c8:26:79:
e9:4b:3a:e9:98:b7:b3:f5:f5:19:2c:5e:03:4e:cd:59:f1:d8:
44:ad:59:07:33:1f:ad:19:95:f0:9a:56:e0:d1:e6:80:ca:6a:
34:e7:aa:00:cd:07:2b:fc:63:4d:80:8b:66:c7:1a:b7:9b:63:
38:c4:8e:9d:0e:ff:43:d1:de:3c:5b:40:8b:38:f2:ae:84:73:
be:b8:18:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:33 2025 by rpki-client