Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/23ACakt78guGwZL3RTi3BKpWsN0.roa
File: 23ACakt78guGwZL3RTi3BKpWsN0.roa (raw, json)
Hash identifier: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=
Subject key identifier: DB:70:02:6A:4B:7B:F2:0B:86:C1:92:F7:45:38:B7:04:AA:56:B0:DD
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 01942444E54430AEE2E045C9FE40589C5EDA
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/23ACakt78guGwZL3RTi3BKpWsN0.roa
Signing time: Wed 01 Jan 2025 23:48:02 +0000
ROA not before: Wed 01 Jan 2025 23:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28730
IP address blocks: 93.95.202.0/24 maxlen: 24
93.95.203.0/24 maxlen: 24
93.95.206.0/24 maxlen: 24
185.176.44.0/24 maxlen: 24
185.176.45.0/24 maxlen: 24
185.176.46.0/24 maxlen: 24
185.176.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e5:44:30:ae:e2:e0:45:c9:fe:40:58:9c:5e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Jan 1 23:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db70026a4b7bf20b86c192f74538b704aa56b0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:26:a3:7a:63:ec:e8:f4:d3:17:43:6c:d4:
be:3d:42:a0:36:94:40:b0:c5:18:a0:ba:b4:ce:74:
8d:eb:39:08:22:c5:41:e5:6d:f6:f6:c8:2e:20:17:
5d:51:a2:d6:4f:92:8c:79:23:84:4d:a6:65:1c:6b:
1c:81:66:a8:b8:c0:1f:e0:54:b1:91:2f:de:6a:e3:
b7:1b:a8:16:c4:cc:32:4c:8c:c6:4d:1f:62:d0:99:
7e:69:60:9f:a1:1c:f2:4a:1e:23:6f:7b:86:cc:d0:
21:30:db:b3:04:d3:73:3b:e1:46:72:e8:f5:46:9e:
ef:a2:5f:8d:86:7e:f9:95:6c:6d:d5:53:ca:cd:9e:
d1:de:2b:da:cb:3d:bb:03:5c:0d:9d:34:7e:e2:f1:
07:71:be:84:a8:f7:f9:68:62:30:43:f8:30:45:fd:
73:56:68:79:72:f4:fc:b3:63:8e:b8:48:59:7d:c6:
af:05:9c:1f:32:34:3e:95:de:2d:2e:dd:d5:8e:ea:
84:dc:39:4d:5b:67:39:4d:a4:a7:14:80:0a:78:1a:
ed:0d:17:1d:04:47:7e:19:c0:90:9b:a0:1a:8e:76:
f4:df:d7:ee:14:50:d9:3f:d4:9d:34:30:7a:50:cc:
82:d1:20:f8:5f:03:19:54:c3:2c:0f:f8:73:2e:b8:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:70:02:6A:4B:7B:F2:0B:86:C1:92:F7:45:38:B7:04:AA:56:B0:DD
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/23ACakt78guGwZL3RTi3BKpWsN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.202.0/23
93.95.206.0/24
185.176.44.0/22
Signature Algorithm: sha256WithRSAEncryption
64:7f:fc:be:37:8d:55:ef:82:01:0d:2c:71:10:81:1f:3b:32:
bb:bc:d9:27:39:bb:1a:53:1f:a3:aa:6e:f4:69:f5:5b:90:37:
b4:9b:d9:dc:cb:1f:b9:cb:fa:42:f7:8f:27:1b:b0:d0:03:e4:
73:63:2f:44:f8:58:0d:77:f5:1c:67:73:b6:8a:85:29:98:ba:
44:b9:76:d7:4d:6c:0f:57:a2:e4:55:d8:3a:a8:ad:04:8b:70:
84:21:ea:69:2d:ac:1c:aa:a1:83:47:57:d7:3f:ac:c9:1b:47:
32:ad:12:ca:e5:3c:f9:c9:17:74:18:63:e8:83:8c:1f:61:a5:
2e:cb:48:20:3b:f2:4c:61:1b:d7:cd:87:5c:df:66:67:3a:ce:
a7:94:af:93:a2:26:90:e8:e4:41:88:9e:b2:a4:5a:5e:c1:73:
6d:17:46:9c:16:18:a3:d7:05:8e:d1:d7:bc:c5:9e:82:fc:2c:
e3:e1:4b:85:5d:c0:ce:4e:70:36:19:73:26:20:f9:4a:88:67:
fe:ae:c0:ab:47:d8:5a:11:f9:1a:10:cd:f9:f8:de:0b:be:5f:
a8:22:24:c0:88:4d:b3:14:03:75:a5:bd:53:43:4d:cc:e6:47:
ff:06:d2:ed:3b:cc:3b:f9:6e:5f:c2:9a:9b:4e:4d:e5:27:0c:
ef:55:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:22 2025 by rpki-client