Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/18cY9ujv5WzKPjVh_KMBfXh1aXk.roa
File: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (raw, json)
Hash identifier: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=
Subject key identifier: D7:C7:18:F6:E8:EF:E5:6C:CA:3E:35:61:FC:A3:01:7D:78:75:69:79
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019423D7C466E5511525D526F90071A107EB
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/18cY9ujv5WzKPjVh_KMBfXh1aXk.roa
Signing time: Wed 01 Jan 2025 21:48:50 +0000
ROA not before: Wed 01 Jan 2025 21:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196670
IP address blocks: 91.213.26.0/24 maxlen: 24
194.36.92.0/24 maxlen: 24
195.200.254.0/23 maxlen: 23
195.200.254.0/24 maxlen: 24
195.200.255.0/24 maxlen: 24
2a04:9140:3001::/48 maxlen: 48
2a04:9140:3041::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c4:66:e5:51:15:25:d5:26:f9:00:71:a1:07:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jan 1 21:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7c718f6e8efe56cca3e3561fca3017d78756979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:98:c9:2a:52:6f:5b:16:92:bc:af:20:77:
96:fa:6e:65:6e:4b:04:07:dd:53:8f:fb:83:b1:3d:
84:20:5a:f4:93:3c:68:90:43:db:08:37:48:9e:40:
1e:13:49:e9:1f:66:b5:c3:32:ce:8d:f3:12:19:3f:
70:94:7f:1b:ca:9c:6c:91:62:7d:60:dc:a6:12:eb:
9a:3c:8b:e4:6e:78:ce:c2:bb:a1:81:42:2c:eb:e0:
a4:ee:11:29:45:9c:98:3e:90:75:9e:c9:57:ef:f8:
1b:f1:60:87:e5:30:2f:a8:8b:55:7c:fa:9c:61:d8:
a1:69:bf:e1:b1:3b:54:79:dc:19:1b:2b:5b:ee:e2:
58:cf:cd:c3:a3:9d:7d:76:48:18:2a:16:1c:ef:22:
53:47:f2:5a:21:6d:3a:c8:23:df:66:25:2b:71:18:
8a:53:4b:13:ec:29:20:4f:39:61:a5:a1:06:1c:c5:
d2:be:41:06:3d:4d:7b:52:ea:d5:d1:4e:cf:28:84:
89:4e:8d:df:5f:9e:ee:a9:e5:26:cf:2f:3e:a5:fc:
d8:20:a7:73:c7:75:a0:a5:46:75:69:27:3b:9f:ff:
05:f7:3b:34:79:cc:de:30:36:e8:57:86:72:c3:76:
04:57:d2:7b:ca:99:e6:81:34:14:2a:03:21:93:61:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C7:18:F6:E8:EF:E5:6C:CA:3E:35:61:FC:A3:01:7D:78:75:69:79
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/18cY9ujv5WzKPjVh_KMBfXh1aXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.26.0/24
194.36.92.0/24
195.200.254.0/23
IPv6:
2a04:9140:3001::/48
2a04:9140:3041::/48
Signature Algorithm: sha256WithRSAEncryption
52:cb:ee:e4:19:dd:d4:a4:6d:a3:b0:78:22:03:97:62:6a:55:
bf:33:42:8f:10:ac:69:e9:2e:71:40:02:c8:45:24:3a:d2:3e:
aa:24:d7:b3:82:30:12:5a:bb:ff:79:8b:77:15:b8:56:b8:e2:
44:e5:d9:0f:16:cc:fe:b3:db:68:47:5a:a8:73:4b:7c:a6:c3:
a1:24:e8:fb:f3:d0:05:8c:ab:69:87:a5:51:56:39:4d:7c:3b:
0d:65:c6:0d:e2:17:22:3f:b0:98:1a:31:84:03:b6:9b:6a:61:
38:7d:2b:56:7a:98:62:5b:63:79:c8:54:21:0a:e8:a0:0c:c2:
1f:e6:05:68:1b:9e:9b:86:ff:9a:e6:67:98:e8:ac:34:68:1f:
c4:e4:75:d1:96:c0:c1:a2:84:ce:d0:ae:4f:8a:07:e8:78:d3:
25:7f:6d:b1:24:4e:e3:ae:1a:53:38:82:c5:bb:af:3a:89:5d:
02:db:6a:2b:73:66:0f:5c:97:16:cb:c9:a2:dc:48:57:03:08:
b1:12:5a:13:4e:77:11:3f:a7:e7:f3:f8:37:e9:41:5c:fb:c7:
51:cc:4b:9d:47:e8:de:a9:43:d9:bf:30:a5:00:9a:63:5a:91:
02:fe:ac:1d:f1:4e:1a:ae:42:40:18:2a:7e:00:22:87:da:7a:
7d:2a:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:53:04 2025 by rpki-client