Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0e7176-c072-4503-a268-c72fd3a9d657/1/nQWyJT3WNeFJyE2WA2brKAcVnaQ.roa
File: nQWyJT3WNeFJyE2WA2brKAcVnaQ.roa (raw, json)
Hash identifier: TH4j7erYS/wFfDTnWRSuCtMvMtIdh2dN6PEhVM+/ftE=
Subject key identifier: 9D:05:B2:25:3D:D6:35:E1:49:C8:4D:96:03:66:EB:28:07:15:9D:A4
Certificate issuer: /CN=ade362ef5888c9c213757f95114033719637237a
Certificate serial: 17DF92C2
Authority key identifier: AD:E3:62:EF:58:88:C9:C2:13:75:7F:95:11:40:33:71:96:37:23:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/reNi71iIycITdX-VEUAzcZY3I3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0e7176-c072-4503-a268-c72fd3a9d657/1/nQWyJT3WNeFJyE2WA2brKAcVnaQ.roa
Signing time: Sat 01 Jan 2022 03:54:52 +0000
ROA not before: Sat 01 Jan 2022 03:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16242
IP address blocks: 185.41.132.0/22 maxlen: 22
185.64.184.0/22 maxlen: 22
213.188.32.0/19 maxlen: 19
185.70.68.0/22 maxlen: 22
185.31.248.0/22 maxlen: 22
185.40.216.0/22 maxlen: 22
79.142.128.0/20 maxlen: 20
2a01:228::/32 maxlen: 32
2a01:52a0::/32 maxlen: 32
2a04:5640::/29 maxlen: 29
2a01:5660::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400528066 (0x17df92c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ade362ef5888c9c213757f95114033719637237a
Validity
Not Before: Jan 1 03:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d05b2253dd635e149c84d960366eb2807159da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:e9:e8:67:98:3d:ce:01:fa:43:af:e2:23:
8c:59:df:e3:2d:1a:5f:49:12:e9:70:40:bb:a5:01:
d9:88:bb:9a:9d:1d:38:af:aa:a6:f5:7e:c1:ca:00:
ac:00:b0:33:a5:eb:ed:43:cf:58:b5:9b:3e:c4:3e:
c6:e2:c9:ca:75:92:90:32:24:8e:b7:41:12:35:d7:
f9:04:04:15:db:72:de:e3:5c:eb:ac:0b:d1:73:fc:
22:5a:a8:dd:f3:c8:76:e5:0a:12:1d:62:03:a5:e4:
d9:18:43:13:c1:01:52:96:e5:40:63:83:86:73:c0:
3f:4d:fa:0c:90:7b:d4:27:3c:ec:b5:b4:0b:19:06:
bd:a2:36:c5:b5:bd:ff:b7:f0:e3:17:5a:d4:28:9d:
eb:f4:9d:80:a9:83:66:45:1a:e5:8d:2b:6c:a9:5f:
e4:ea:08:cd:db:6b:94:05:01:ef:e1:b4:67:a5:36:
82:09:8a:5e:e4:82:5d:06:c9:e7:e7:41:77:3d:2f:
e8:04:50:15:34:ca:cc:35:81:d6:8a:a0:2c:6b:3e:
63:f7:4d:9c:e5:13:72:07:b4:89:55:c3:72:23:2b:
6d:64:99:2f:e9:1c:a0:4a:cb:97:b2:f0:bc:5c:91:
8d:d1:d0:93:78:1e:0c:a7:4c:f5:a3:ef:b4:24:7d:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:05:B2:25:3D:D6:35:E1:49:C8:4D:96:03:66:EB:28:07:15:9D:A4
X509v3 Authority Key Identifier:
keyid:AD:E3:62:EF:58:88:C9:C2:13:75:7F:95:11:40:33:71:96:37:23:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/reNi71iIycITdX-VEUAzcZY3I3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0e7176-c072-4503-a268-c72fd3a9d657/1/nQWyJT3WNeFJyE2WA2brKAcVnaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0e7176-c072-4503-a268-c72fd3a9d657/1/reNi71iIycITdX-VEUAzcZY3I3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.128.0/20
185.31.248.0/22
185.40.216.0/22
185.41.132.0/22
185.64.184.0/22
185.70.68.0/22
213.188.32.0/19
IPv6:
2a01:228::/32
2a01:52a0::/32
2a01:5660::/32
2a04:5640::/29
Signature Algorithm: sha256WithRSAEncryption
81:3e:32:c3:11:10:d5:52:aa:f5:f6:37:88:7f:51:d4:48:4c:
61:8e:88:28:33:9e:79:26:f9:7e:e8:8d:e1:28:3f:eb:88:55:
3e:cb:8d:ab:47:76:53:63:37:91:e6:2a:8b:e1:58:e6:0a:85:
6b:9c:ea:bc:f4:18:80:cb:c4:01:0a:26:9e:e7:2c:12:4e:ab:
8d:72:98:69:56:8b:5e:02:74:65:f7:19:e8:49:7c:5d:7d:e2:
36:63:8d:ad:d3:2c:4d:a9:2d:b9:ef:08:b1:f1:05:30:4f:ad:
2c:40:29:58:fd:56:c6:a1:f0:7a:86:46:fb:fc:99:a9:c2:3f:
1c:c4:58:45:c0:c2:3a:de:e7:7d:73:4e:d6:13:79:dc:a5:2b:
c5:8e:8b:0f:39:0e:13:6d:cd:d2:95:8a:78:45:42:20:f2:ec:
6a:95:64:a6:ab:01:29:cc:c5:d4:fb:90:81:a4:39:bd:3e:6b:
f1:2d:68:9c:70:ea:31:68:f8:67:3a:a5:da:6e:3e:b0:f2:51:
78:e6:14:62:9e:31:0d:17:92:a7:1d:71:fc:2c:83:c2:be:ba:
50:1c:04:ce:4d:0b:0d:6d:1a:e3:8c:76:e0:16:5f:d8:88:a6:
f1:18:6b:e4:0e:05:d2:97:4c:3f:ae:0f:18:b0:c8:0c:16:32:
ed:97:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:45 2025 by rpki-client