Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/b0c1ZACD83cmlmA3TQPYH2ZFOCI.roa
File: b0c1ZACD83cmlmA3TQPYH2ZFOCI.roa (raw, json)
Hash identifier: 2d36mUIHI/BGLAOo8koypTMZvHTviwK+YEoZItvEVY4=
Subject key identifier: 6F:47:35:64:00:83:F3:77:26:96:60:37:4D:03:D8:1F:66:45:38:22
Certificate issuer: /CN=7dd1b5b42dc3d846c2ad2549664e34f72d1cb4a6
Certificate serial: 018A6A86EAFC85431892E6476D2EAA205127
Authority key identifier: 7D:D1:B5:B4:2D:C3:D8:46:C2:AD:25:49:66:4E:34:F7:2D:1C:B4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdG1tC3D2EbCrSVJZk409y0ctKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/b0c1ZACD83cmlmA3TQPYH2ZFOCI.roa
Signing time: Wed 06 Sep 2023 12:45:41 +0000
ROA not before: Wed 06 Sep 2023 12:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42336
IP address blocks: 185.203.40.0/22 maxlen: 22
176.121.24.0/21 maxlen: 21
87.239.224.0/21 maxlen: 21
94.177.140.0/22 maxlen: 22
94.177.100.0/22 maxlen: 22
89.46.116.0/22 maxlen: 22
91.245.160.0/20 maxlen: 20
193.33.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:86:ea:fc:85:43:18:92:e6:47:6d:2e:aa:20:51:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd1b5b42dc3d846c2ad2549664e34f72d1cb4a6
Validity
Not Before: Sep 6 12:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f4735640083f377269660374d03d81f66453822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:5a:d5:a1:8d:02:19:e7:d4:22:8a:2b:a8:
eb:ed:b1:07:76:e5:d3:bb:58:f0:31:34:24:9e:1e:
2f:68:d3:21:e9:e0:7d:5f:08:d2:38:c6:03:d5:69:
bd:fa:54:50:f6:d7:cf:68:90:77:d6:a5:a5:7a:48:
61:da:c2:63:03:7a:b6:eb:29:6d:14:a6:32:6a:93:
2f:37:46:98:00:a1:a5:16:05:63:d3:77:08:2f:4d:
db:c5:d7:b1:35:fc:66:e0:f2:59:e8:24:04:9e:f8:
f6:f1:35:c7:d9:02:d9:36:dd:1a:cb:12:03:14:03:
62:37:1e:53:29:98:98:5f:48:a5:d4:b5:17:4e:d2:
5b:00:a2:2c:26:a8:50:b0:c3:5b:63:ff:98:9a:a7:
3b:f2:2b:04:ce:24:48:68:63:d7:7e:d0:e0:f4:04:
44:0e:c7:0b:d4:c3:a6:83:03:de:41:45:7a:79:75:
28:ee:8b:f2:97:91:6e:65:cb:ca:88:ae:58:97:fb:
a4:49:38:27:e8:5c:f0:58:7c:b6:77:62:4f:47:b4:
05:ec:0b:9f:03:7f:f8:8b:ca:55:e9:06:43:d7:d2:
4f:a3:b1:42:a0:28:26:21:76:19:55:89:0e:85:b5:
68:55:8d:83:3e:d0:a9:08:5c:86:ed:c2:29:64:c0:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:47:35:64:00:83:F3:77:26:96:60:37:4D:03:D8:1F:66:45:38:22
X509v3 Authority Key Identifier:
keyid:7D:D1:B5:B4:2D:C3:D8:46:C2:AD:25:49:66:4E:34:F7:2D:1C:B4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdG1tC3D2EbCrSVJZk409y0ctKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/b0c1ZACD83cmlmA3TQPYH2ZFOCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5f5d8f-332b-42d6-a9bb-2f405d7f1d8f/1/fdG1tC3D2EbCrSVJZk409y0ctKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.224.0/21
89.46.116.0/22
91.245.160.0/20
94.177.100.0/22
94.177.140.0/22
176.121.24.0/21
185.203.40.0/22
193.33.118.0/23
Signature Algorithm: sha256WithRSAEncryption
91:dd:38:ab:1e:91:2c:ec:9c:25:c6:f6:a9:c8:76:08:81:1b:
27:38:aa:8e:89:c9:c3:91:ae:cd:b1:ef:67:59:15:b1:03:b5:
e2:f9:d1:5a:c4:d6:c3:f7:16:29:b6:20:7c:07:be:a7:a1:21:
a1:cd:c8:d5:01:e1:01:5f:ad:54:e6:2f:14:e3:e5:7d:3a:87:
10:f2:23:c8:d0:c5:aa:72:ea:d7:69:9f:87:6f:86:88:10:e1:
90:6d:05:27:57:c5:f5:12:ac:bb:5d:05:94:06:34:5d:0b:9b:
f7:1b:b8:51:11:10:ef:f8:26:52:72:2e:34:05:5c:24:85:66:
95:b6:3a:ad:51:cb:ec:b9:68:35:bb:b0:d7:2a:07:c9:be:2e:
3a:be:de:b7:03:d7:b2:90:73:27:e6:bf:af:cf:15:65:31:52:
30:28:48:41:7f:4c:34:0c:2b:48:e9:44:f1:54:4e:33:61:d9:
17:cb:49:47:91:eb:2c:6b:c2:d2:cb:83:b2:41:62:c4:47:fb:
12:ab:e0:82:18:7e:a9:e1:fa:ff:e2:f5:b2:ac:4d:fd:1b:f5:
b7:64:ab:c9:ba:92:cd:27:b3:ea:5e:6d:67:f0:5b:46:ef:51:
87:8d:71:c6:d6:16:da:06:2e:43:35:05:40:bc:d2:c2:4a:94:
1d:6d:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:46:00 2025 by rpki-client