Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/xF4zFi_I_tZtRWRPe4lvxxKtBKM.roa
File: xF4zFi_I_tZtRWRPe4lvxxKtBKM.roa (raw, json)
Hash identifier: +6z4VEVDR8s3o20Q3/um9/lS8ZaXm1bktimjxZcHWmw=
Subject key identifier: C4:5E:33:16:2F:C8:FE:D6:6D:45:64:4F:7B:89:6F:C7:12:AD:04:A3
Certificate issuer: /CN=712d0af87b0662f31e483e01efefc02a74326355
Certificate serial: 018570B97FCD614B4D36FDB5E1C2CFCDAD7B
Authority key identifier: 71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/xF4zFi_I_tZtRWRPe4lvxxKtBKM.roa
Signing time: Mon 02 Jan 2023 04:24:43 +0000
ROA not before: Mon 02 Jan 2023 04:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43451
IP address blocks: 176.106.188.0/22 maxlen: 22
193.93.74.0/23 maxlen: 23
193.93.72.0/22 maxlen: 22
193.93.72.0/23 maxlen: 23
176.106.184.0/22 maxlen: 22
176.106.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:7f:cd:61:4b:4d:36:fd:b5:e1:c2:cf:cd:ad:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712d0af87b0662f31e483e01efefc02a74326355
Validity
Not Before: Jan 2 04:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c45e33162fc8fed66d45644f7b896fc712ad04a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:5e:91:9a:10:60:6b:b6:68:e4:95:f1:cc:
6a:23:b4:51:3f:16:51:86:a8:d1:8e:14:58:40:3f:
3d:ef:46:d1:87:31:3b:0f:55:d7:ef:f8:91:c6:b0:
07:12:aa:63:e7:51:58:21:66:4c:3d:0c:b2:18:88:
fc:6a:fa:a7:8f:a3:b6:24:b2:52:0d:d6:eb:7f:42:
44:da:f2:6e:c8:82:ba:35:2e:a1:5a:40:b8:7e:82:
e6:01:50:f9:55:99:12:36:e7:a0:94:e5:ec:b0:49:
d1:b6:4f:5b:61:9c:c6:e0:68:ec:77:a7:2f:1e:26:
a3:09:61:1b:5a:3d:e9:0e:26:10:08:43:3f:32:0b:
9d:e8:8f:46:43:cc:ec:79:10:8a:4b:b0:54:b0:1e:
fe:2e:96:89:16:d3:12:1f:90:e4:15:26:ec:22:b4:
3d:b7:d7:93:20:8c:31:6a:e2:b2:42:96:f4:78:80:
a4:e5:1c:16:9c:aa:33:6b:d3:c7:56:b5:0c:40:f1:
b7:9c:42:32:28:8f:e4:cf:33:ba:6a:bb:c8:c3:f9:
16:8c:b5:3a:42:64:80:6e:0e:3b:c3:88:87:6c:04:
d8:50:09:cb:16:ef:92:9d:01:48:70:3b:9d:e6:3a:
b5:f2:08:c9:47:6b:04:02:57:6c:0a:87:6b:ca:85:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5E:33:16:2F:C8:FE:D6:6D:45:64:4F:7B:89:6F:C7:12:AD:04:A3
X509v3 Authority Key Identifier:
keyid:71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/xF4zFi_I_tZtRWRPe4lvxxKtBKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.184.0/21
193.93.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:c1:2b:2f:c9:2e:22:d6:7e:3c:46:01:45:48:9d:66:b7:da:
08:2b:6b:66:c7:26:f7:f4:5e:a0:e5:d5:4d:8e:2e:8f:45:8b:
bb:ac:5f:0c:bc:c3:d5:62:40:37:75:88:64:1c:cc:d1:b5:68:
5d:91:d9:b1:4d:47:5b:03:f3:19:66:ef:b7:4c:e1:5f:35:6f:
fe:cd:de:57:24:15:ea:6b:fa:3b:ad:f6:df:9a:96:f5:65:b7:
d6:51:00:a2:7f:e1:a4:60:15:77:d8:e2:a3:19:80:06:c4:8e:
03:a6:33:27:1e:4f:98:05:05:2e:1e:55:16:b2:c2:99:0c:c3:
8e:03:d0:c0:98:e9:85:a7:40:cf:d7:85:b9:37:8b:a9:1c:06:
f0:55:35:cc:90:4f:c4:ff:97:c3:aa:5f:34:4f:2d:92:c8:68:
b6:3d:3e:53:82:10:68:d1:93:eb:dd:28:08:bb:5a:6a:7a:ba:
3c:31:37:4b:8d:0f:96:4f:b5:4f:28:30:0d:a9:96:f2:09:4a:
f5:f7:59:28:53:8d:66:98:c7:00:d6:69:01:63:7b:73:0c:79:
b3:2f:4e:2a:6f:16:a1:0d:cc:0b:8a:ce:3c:4c:1f:46:37:45:
76:47:55:d2:f4:5e:2d:ea:df:5d:be:47:f0:84:3d:67:8e:29:
b1:d7:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:02 2025 by rpki-client