Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9xxcxcirxihpGEy4Q0tfXy-bFpc.roa
File: 9xxcxcirxihpGEy4Q0tfXy-bFpc.roa (raw, json)
Hash identifier: fR2cazH1jylAzm1203zZClHCoe+wG2TvkzuP59k9ttE=
Subject key identifier: F7:1C:5C:C5:C8:AB:C6:28:69:18:4C:B8:43:4B:5F:5F:2F:9B:16:97
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2F6C7A87FD6148F8496DB9A8D10B1
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9xxcxcirxihpGEy4Q0tfXy-bFpc.roa
Signing time: Thu 02 Jan 2025 01:48:15 +0000
ROA not before: Thu 02 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.64.0/19 maxlen: 19
79.135.136.0/22 maxlen: 22
85.234.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:f6:c7:a8:7f:d6:14:8f:84:96:db:9a:8d:10:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f71c5cc5c8abc62869184cb8434b5f5f2f9b1697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:90:5b:7a:ae:cf:4a:3f:90:d4:cd:14:8d:
54:9c:c8:e2:e0:9a:12:54:c8:d0:08:7d:30:7b:cd:
cf:a4:38:bb:1b:61:43:97:f4:47:9b:70:7d:0d:8d:
30:55:0f:a3:32:da:c8:fd:86:47:bf:6a:3c:a1:85:
2b:f4:9b:28:aa:c4:16:4b:c2:d1:a8:e8:9d:7b:b7:
61:3f:2d:f8:c9:68:0b:63:c4:fc:55:2b:5f:3b:3c:
1d:ef:f5:ad:0f:9e:99:b3:a3:62:7b:55:06:6f:6c:
7d:78:84:89:c0:8b:c7:fd:cc:36:5a:e3:78:16:4b:
da:e3:0f:b8:cb:4a:55:09:69:f2:0b:71:ce:93:18:
67:02:3e:d3:52:3f:fd:42:01:ac:fc:f3:31:bd:0c:
1f:ba:bc:00:7a:f9:6f:50:5b:20:1b:8d:7e:32:a0:
a6:02:84:76:95:6a:c1:83:c0:24:8c:fd:76:95:07:
e5:c8:8c:e2:43:d0:56:0a:ef:01:de:f4:7a:ea:77:
c3:c6:59:1f:76:a2:82:a9:31:21:03:82:14:88:d0:
ca:72:dd:58:2b:e9:78:36:66:39:77:cd:01:9c:4f:
21:d3:66:9c:ee:01:cf:4d:05:b3:3c:b9:52:dd:2c:
cb:06:01:0e:c6:61:65:e8:3f:02:fe:21:19:23:90:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:5C:C5:C8:AB:C6:28:69:18:4C:B8:43:4B:5F:5F:2F:9B:16:97
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9xxcxcirxihpGEy4Q0tfXy-bFpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.64.0/19
79.135.136.0/22
85.234.160.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:43:03:49:2e:8a:87:83:86:22:ad:41:b9:90:a5:ee:31:68:
ca:47:da:88:6b:4e:da:08:8a:fa:f1:48:19:af:43:41:bf:e5:
54:01:53:80:c5:6a:c7:2c:f6:b4:23:4c:2e:3e:50:6e:5c:ac:
b5:b1:f3:2e:5b:db:10:5f:0d:8d:38:27:29:04:cc:f6:ec:34:
e5:1d:f4:81:0a:41:68:19:1e:9e:7b:3b:68:9a:10:9e:35:30:
68:ea:3a:ba:37:55:41:73:64:d4:ce:55:45:89:29:b3:79:a4:
74:c6:76:3b:17:29:79:52:b6:85:79:c4:ba:03:9c:b3:7b:aa:
cb:cb:ae:08:81:a8:3a:2c:8e:c9:c2:bb:30:f1:b4:da:47:59:
67:8d:f1:8d:6d:0e:82:81:3f:b0:ad:95:55:c4:c2:22:c5:61:
43:98:a3:bc:3b:0b:7d:c9:be:52:4e:e0:5f:95:ac:8d:2f:c2:
85:d7:fd:c9:5c:82:bc:1a:d5:a1:93:c9:1e:a5:d8:01:e6:00:
35:c3:18:12:ea:99:30:69:b8:ec:e7:65:81:7c:58:55:d1:ca:
08:58:bc:f6:d3:e0:42:a6:fd:3d:25:4b:56:48:fc:bc:fb:cd:
16:50:7d:04:3f:b1:6a:09:5a:2a:ef:22:db:7f:12:2f:c4:9d:
f5:c3:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:04 2025 by rpki-client