Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/ORVB1Ox2NnzWUXxgxcDWyOhqR9Y.roa
File: ORVB1Ox2NnzWUXxgxcDWyOhqR9Y.roa (raw, json)
Hash identifier: qyGfVPHIyBKK6InkNLASEKuuIqiwxFZlcLlq+Kfxkhg=
Subject key identifier: 39:15:41:D4:EC:76:36:7C:D6:51:7C:60:C5:C0:D6:C8:E8:6A:47:D6
Certificate issuer: /CN=7dd1b5b42dc3d846c2ad2549664e34f72d1cb4a6
Certificate serial: 018572CCAD448ABA567D2C462001508E4AA8
Authority key identifier: 7D:D1:B5:B4:2D:C3:D8:46:C2:AD:25:49:66:4E:34:F7:2D:1C:B4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdG1tC3D2EbCrSVJZk409y0ctKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/ORVB1Ox2NnzWUXxgxcDWyOhqR9Y.roa
Signing time: Mon 02 Jan 2023 14:04:54 +0000
ROA not before: Mon 02 Jan 2023 14:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42336
IP address blocks: 185.203.40.0/22 maxlen: 22
176.121.24.0/21 maxlen: 21
87.239.224.0/21 maxlen: 21
94.177.140.0/22 maxlen: 22
94.177.100.0/22 maxlen: 22
89.46.116.0/22 maxlen: 22
91.245.160.0/20 maxlen: 20
193.33.118.0/23 maxlen: 23
2a0b:cd40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:ad:44:8a:ba:56:7d:2c:46:20:01:50:8e:4a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd1b5b42dc3d846c2ad2549664e34f72d1cb4a6
Validity
Not Before: Jan 2 14:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=391541d4ec76367cd6517c60c5c0d6c8e86a47d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:1d:f8:9f:50:92:a6:b5:17:de:b1:9b:4c:
3c:4a:f9:cf:7c:80:a5:f8:09:b4:f0:53:df:82:cd:
90:73:dd:29:c5:6c:67:55:5f:cc:f7:a1:6e:9e:42:
72:f6:a6:7e:ee:28:2c:a9:ba:95:4f:0f:cc:84:65:
89:a3:89:9a:db:c0:cc:df:e5:74:48:43:6e:12:01:
2c:a3:af:76:7d:bb:2a:bd:c8:b1:85:ca:89:cc:ad:
19:99:62:ad:12:ef:bc:82:f9:1a:78:0d:9a:9d:7b:
6f:f2:50:4e:1a:75:ca:bd:8a:40:cc:98:0f:1d:9b:
a9:06:57:53:ed:7c:00:ee:18:3d:98:33:1a:bb:3d:
d7:69:df:ab:50:cc:d2:5d:7b:12:70:72:f6:81:a0:
5a:30:88:67:58:fc:6b:06:3b:10:77:f0:d5:bd:e3:
aa:e4:ce:37:7d:3f:38:f4:14:69:40:e7:04:fb:60:
c6:e3:85:0c:2b:75:79:80:a0:b4:bb:a9:9a:a0:83:
9b:58:d3:b4:5c:3e:4a:5d:d1:bb:37:b4:a4:1b:b7:
30:25:7b:ab:69:12:53:f1:06:10:69:66:2e:f2:61:
52:70:54:dc:03:4e:d3:b6:24:92:a2:2f:0c:34:1d:
63:72:4c:30:fc:96:48:7b:22:8b:32:79:cb:72:2b:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:15:41:D4:EC:76:36:7C:D6:51:7C:60:C5:C0:D6:C8:E8:6A:47:D6
X509v3 Authority Key Identifier:
keyid:7D:D1:B5:B4:2D:C3:D8:46:C2:AD:25:49:66:4E:34:F7:2D:1C:B4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdG1tC3D2EbCrSVJZk409y0ctKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/ORVB1Ox2NnzWUXxgxcDWyOhqR9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/fdG1tC3D2EbCrSVJZk409y0ctKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.224.0/21
89.46.116.0/22
91.245.160.0/20
94.177.100.0/22
94.177.140.0/22
176.121.24.0/21
185.203.40.0/22
193.33.118.0/23
IPv6:
2a0b:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
7b:20:5a:91:01:23:91:d1:19:91:df:ad:23:d4:08:a1:a1:b4:
e0:63:86:71:38:45:37:d5:d1:3b:dd:91:a7:93:0c:aa:3c:24:
da:fe:db:22:e4:cc:fc:0b:a6:1d:2d:db:f4:4f:5a:4a:38:dd:
a4:85:7c:86:d4:8b:ee:18:a6:94:22:7d:01:2f:04:8d:9f:c6:
86:ef:8d:1d:65:07:5c:1b:f8:2e:6e:fd:08:82:6d:32:58:df:
d4:ad:9b:e0:07:ea:aa:c2:db:19:e9:f7:2f:77:a0:c4:35:61:
69:a3:33:0a:a2:ac:d4:69:67:93:6a:9e:56:39:17:f3:14:d3:
60:02:03:94:7d:78:5b:d3:81:1c:00:fc:67:af:10:ae:d3:1d:
97:14:b4:97:42:9b:6f:37:c9:dd:36:92:17:76:a5:c9:05:6f:
b0:4c:03:a5:84:bf:d0:97:d2:08:a7:13:5a:b2:d5:ce:19:b2:
b9:ab:f5:32:65:33:5e:d0:f4:75:bb:24:1f:73:cc:62:2f:ae:
cb:c3:03:00:6a:bf:ac:e7:90:a9:ea:61:86:e2:60:f8:71:1c:
6e:4b:29:a0:a1:34:24:ea:56:cf:ca:c4:04:f6:3c:81:a5:a1:
dd:b0:a0:ce:1f:3e:71:a3:a5:0d:62:8a:9c:66:28:f7:48:a0:
37:6f:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:54:18 2025 by rpki-client