Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/8fK_l5_HJUUQBqrQ4mj1ghPVTl8.roa
File: 8fK_l5_HJUUQBqrQ4mj1ghPVTl8.roa (raw, json)
Hash identifier: 8Yy8J28dpEFcAyP6sRQeiQXsBr0ulFA9IJVi3kYU6UI=
Subject key identifier: F1:F2:BF:97:9F:C7:25:45:10:06:AA:D0:E2:68:F5:82:13:D5:4E:5F
Certificate issuer: /CN=712d0af87b0662f31e483e01efefc02a74326355
Certificate serial: 01B5ABDC
Authority key identifier: 71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/8fK_l5_HJUUQBqrQ4mj1ghPVTl8.roa
Signing time: Sat 01 Jan 2022 08:57:48 +0000
ROA not before: Sat 01 Jan 2022 08:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43451
IP address blocks: 176.106.188.0/22 maxlen: 22
193.93.74.0/23 maxlen: 23
193.93.72.0/22 maxlen: 22
193.93.72.0/23 maxlen: 23
176.106.184.0/22 maxlen: 22
176.106.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28683228 (0x1b5abdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712d0af87b0662f31e483e01efefc02a74326355
Validity
Not Before: Jan 1 08:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1f2bf979fc725451006aad0e268f58213d54e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:de:a6:9a:df:43:51:ea:c5:bc:57:81:ba:
43:c7:99:65:23:b8:9b:e7:41:29:24:47:b3:d0:2f:
08:a4:01:bf:59:4e:4f:4a:de:e3:cc:89:99:48:66:
5a:06:9a:9b:65:cf:91:7f:32:3d:33:48:d1:9d:c0:
b1:12:da:9d:3a:fb:38:dd:65:bc:1c:8d:4d:9a:df:
aa:e6:13:72:63:6d:f7:c7:c0:fa:ce:1b:93:2b:d9:
a1:4b:7c:10:c5:5d:4e:55:6a:af:1f:79:9c:9a:a1:
ba:d8:0f:32:fe:3a:8b:c8:fd:0c:54:01:5a:7f:56:
09:3b:6b:32:c1:73:3a:af:81:39:0e:80:1d:85:58:
c5:7e:e2:9e:aa:80:0a:38:04:73:5c:56:74:dd:06:
42:26:81:4c:46:d3:5d:35:21:d7:f9:92:4b:44:15:
b4:2b:3f:ff:ce:1b:fa:18:7f:60:63:50:e2:12:d5:
5b:42:00:e6:72:5b:cd:e8:2e:d3:18:1c:86:cb:91:
61:8a:6d:96:e9:bd:31:5a:ab:fd:c2:ca:44:21:86:
92:8e:8f:ae:a0:0c:2d:1c:ab:a3:1f:cf:29:22:bb:
4f:ee:36:79:23:c0:28:87:49:11:5f:9f:bb:e6:db:
e6:63:6b:2c:97:e0:20:1f:50:56:40:3c:02:4a:46:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F2:BF:97:9F:C7:25:45:10:06:AA:D0:E2:68:F5:82:13:D5:4E:5F
X509v3 Authority Key Identifier:
keyid:71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/8fK_l5_HJUUQBqrQ4mj1ghPVTl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.184.0/21
193.93.72.0/22
Signature Algorithm: sha256WithRSAEncryption
31:81:7a:09:17:58:dd:fd:bb:9f:9b:c9:30:eb:e3:fd:7e:f7:
2c:ca:f7:11:a8:6e:70:88:08:1e:d2:ad:0b:e2:13:45:8a:c6:
bf:03:5c:ac:3a:3d:46:23:29:49:7b:c3:15:f0:4a:3e:a7:ab:
84:2c:78:60:30:46:6b:a8:a9:9b:f0:5a:c9:06:6f:64:59:84:
7b:6b:50:a5:c9:02:19:81:e9:cf:40:d1:5e:1d:a4:c6:14:f3:
46:bc:ac:cb:f6:81:5b:a2:77:e4:48:9f:a1:8e:a6:ef:f8:99:
64:1f:b5:51:1e:a1:2f:29:b6:b4:40:fa:a5:04:87:1f:0c:3d:
36:e8:9e:82:fb:32:95:2b:74:75:7f:f4:39:3a:58:3d:e0:25:
d4:32:cf:fa:96:ff:d3:15:e4:11:5c:fd:27:00:10:1a:ac:e8:
c0:ca:1f:c6:b5:0d:3f:c8:29:29:ef:40:bc:7d:90:eb:e3:20:
10:a4:f1:7a:d0:eb:1e:ed:6b:5e:d9:6b:75:01:62:68:d1:c3:
fd:7b:74:e8:ac:60:a0:fa:0d:a5:59:82:cd:8e:dd:6d:0f:2d:
99:7e:f7:e2:05:cd:d3:3b:28:41:1a:5d:a3:93:ec:a7:0b:f6:
4d:83:b3:d2:34:09:e6:39:6a:7b:4f:82:7f:d0:d6:2f:0f:c3:
58:ba:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:59 2025 by rpki-client