Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/_363_dFkTrxVWJRfmKGhVcGEYxw.roa
File: _363_dFkTrxVWJRfmKGhVcGEYxw.roa (raw, json)
Hash identifier: EFI43I2qKJ1jnWCRyPrzhjddU2bZAD3g2m1Gb9lWY6w=
Subject key identifier: FF:7E:B7:FD:D1:64:4E:BC:55:58:94:5F:98:A1:A1:55:C1:84:63:1C
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019422FC424ADF12E8ACA5E483A6FB57C844
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/_363_dFkTrxVWJRfmKGhVcGEYxw.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 2.58.124.0/22 maxlen: 24
5.252.20.0/24 maxlen: 24
5.252.21.0/24 maxlen: 24
5.252.22.0/24 maxlen: 24
5.252.23.0/24 maxlen: 24
45.83.180.0/22 maxlen: 24
45.150.110.0/23 maxlen: 24
92.118.124.0/24 maxlen: 24
92.118.125.0/24 maxlen: 24
92.118.126.0/24 maxlen: 24
92.118.127.0/24 maxlen: 24
2a0b:ec82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:42:4a:df:12:e8:ac:a5:e4:83:a6:fb:57:c8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff7eb7fdd1644ebc5558945f98a1a155c184631c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:5a:69:bb:b6:b8:f4:06:8e:fb:79:f3:66:
6e:1c:90:c1:34:62:7a:a4:5c:fc:c5:48:ff:1c:b1:
3f:27:10:88:ab:8e:61:d0:6c:04:38:fc:96:f0:95:
06:ad:82:3a:93:da:60:74:65:04:e3:7f:3b:a5:5b:
e0:0c:a5:7c:db:08:9f:8a:bf:0d:4a:fb:e7:7e:e2:
83:0e:64:7f:b7:20:d4:43:bf:ab:12:73:6d:ea:21:
f9:9c:a1:aa:32:db:79:b1:d6:86:5f:18:01:42:6f:
a4:15:f2:ed:fb:d5:50:ae:a4:14:f3:d7:ae:3a:dd:
33:d2:76:35:62:c3:45:33:e4:93:26:d4:2b:d0:1b:
e1:c1:72:55:51:0d:56:d3:e6:a3:d9:8d:3f:dd:72:
71:f9:e1:b3:97:28:4f:06:d6:0a:17:9d:93:9d:e9:
d9:cf:4e:c9:44:04:80:1d:77:f6:8b:f0:c3:30:50:
7c:34:b6:b6:ab:9f:28:3b:92:f3:cd:be:95:de:ff:
99:7f:0d:bf:6d:be:d7:eb:9c:2a:f7:0a:d4:a4:36:
2f:d2:80:94:98:d9:bf:c2:28:4f:cb:a3:56:d9:e0:
92:42:83:d1:10:0e:ac:2f:ef:ce:65:2e:ee:85:a7:
d5:89:fb:b9:38:64:79:4f:b5:82:e3:8a:78:e9:65:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7E:B7:FD:D1:64:4E:BC:55:58:94:5F:98:A1:A1:55:C1:84:63:1C
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/_363_dFkTrxVWJRfmKGhVcGEYxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.124.0/22
5.252.20.0/22
45.83.180.0/22
45.150.110.0/23
92.118.124.0/22
IPv6:
2a0b:ec82::/32
Signature Algorithm: sha256WithRSAEncryption
01:03:4a:4f:92:f9:43:d1:bb:df:85:1d:f3:fa:03:2d:93:38:
b2:82:02:8b:92:be:10:c8:1e:83:f8:de:4a:fd:6c:a8:ad:db:
83:7a:fe:18:24:7f:45:24:7f:1a:94:9b:59:6c:1b:1f:d3:3f:
37:2b:63:34:eb:91:45:57:8c:5d:bf:0c:fe:46:ae:83:d4:62:
1c:82:0b:c7:62:14:60:df:db:2b:6e:30:d0:7a:f7:1f:d4:38:
b7:22:04:28:14:9e:02:70:a7:a9:85:2b:f9:03:fc:17:aa:f0:
13:50:cb:f2:e8:de:d4:cf:b3:7f:92:70:88:43:a0:7a:5b:f3:
eb:bf:1b:83:ec:7c:d8:95:10:5c:f3:70:35:4d:e6:36:17:aa:
49:16:97:34:65:1e:68:57:d7:69:ae:59:f1:53:5f:06:14:eb:
c8:42:74:50:55:8e:3b:44:fa:d2:7a:86:58:cd:c6:34:7f:a9:
8f:35:05:7c:88:f0:02:11:a4:c0:95:d6:07:4b:c4:5e:26:83:
93:19:ff:c6:1d:df:27:6e:f4:a1:02:81:04:c7:eb:36:d6:e7:
9c:66:83:9e:78:4b:39:ad:9f:6b:6b:8b:9f:53:70:2c:63:b9:
f8:7d:83:eb:14:ed:15:52:e8:f4:a2:85:dd:c0:66:33:e4:f1:
66:55:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:59:33 2025 by rpki-client