Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/_Pgq84jrEp-zxajAzOXZ5wVPIRA.roa
File: _Pgq84jrEp-zxajAzOXZ5wVPIRA.roa (raw, json)
Hash identifier: EbB6LGcx8MIH+W1ZkKFUETSvGMpVK6Hy6dyclc0VHiQ=
Subject key identifier: FC:F8:2A:F3:88:EB:12:9F:B3:C5:A8:C0:CC:E5:D9:E7:05:4F:21:10
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 0195C84948DCADB60964B445089CE91F1C27
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/_Pgq84jrEp-zxajAzOXZ5wVPIRA.roa
Signing time: Mon 24 Mar 2025 13:13:20 +0000
ROA not before: Mon 24 Mar 2025 13:13:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 185.171.88.0/24 maxlen: 24
185.171.91.0/24 maxlen: 24
2a07:5dc0::/29 maxlen: 29
2a0c:f500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:49:48:dc:ad:b6:09:64:b4:45:08:9c:e9:1f:1c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Mar 24 13:13:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcf82af388eb129fb3c5a8c0cce5d9e7054f2110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:15:99:6a:3a:98:aa:98:d5:e1:63:90:d7:
ac:a3:ce:d6:fc:ad:f3:54:94:f4:b8:c6:e6:50:0e:
4e:86:48:b8:79:a1:23:73:eb:9b:c9:cd:1e:d9:47:
0b:8d:97:ab:85:5f:bb:be:9c:cf:c0:fa:04:d2:35:
f5:e6:1b:3d:44:0b:61:c2:f6:b8:2d:57:a2:ce:89:
ff:47:cf:2c:5e:d4:a5:92:51:dd:58:be:2c:f8:27:
04:92:be:22:bb:31:8a:fd:86:c5:7f:2c:d6:98:7b:
9b:02:83:eb:18:84:8a:20:1f:dc:e7:c7:34:08:d3:
63:24:2c:14:09:96:c4:cf:1d:91:0e:b7:5a:20:1b:
da:30:46:01:9c:dc:05:6e:c6:4a:30:66:32:8b:26:
2c:11:21:e9:45:c9:d0:7e:fe:4e:cb:32:84:a0:e4:
7a:f4:55:3a:90:ef:fe:d4:7f:15:c6:60:2b:81:07:
fb:95:6b:d4:c2:3d:53:8b:76:0b:02:63:e3:94:b7:
ab:ce:ac:ee:ad:d0:e5:c4:1c:eb:05:e4:64:46:91:
bb:f6:f0:e6:4e:9f:b6:a7:fe:cd:c8:12:62:1c:dc:
28:59:8e:69:61:d2:9f:43:50:ac:28:22:32:db:54:
34:93:a1:7f:5a:79:e2:9b:6b:d2:c2:43:24:e3:34:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F8:2A:F3:88:EB:12:9F:B3:C5:A8:C0:CC:E5:D9:E7:05:4F:21:10
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/_Pgq84jrEp-zxajAzOXZ5wVPIRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.88.0/24
185.171.91.0/24
IPv6:
2a07:5dc0::/29
2a0c:f500::/29
Signature Algorithm: sha256WithRSAEncryption
76:eb:a2:03:36:02:25:e7:9e:90:f8:23:8a:3a:9d:97:96:64:
10:36:63:eb:69:31:31:41:d5:e0:84:55:79:a3:b8:1c:eb:18:
9d:40:ec:88:3e:5f:61:21:88:50:1b:95:94:55:2d:fa:55:7c:
ef:0d:6e:94:7a:53:7d:d7:33:97:43:5a:4c:2b:3e:dc:b2:bf:
1f:7d:66:25:fb:45:5b:9a:e7:37:5e:f0:42:c9:7a:e6:60:d7:
d3:b2:e1:6f:3c:44:a5:0f:5a:f7:a0:92:38:67:0a:e6:50:7a:
f2:52:4d:38:e8:35:0c:48:36:2d:ec:aa:a9:c8:23:ec:bc:a0:
8c:58:50:d9:47:1e:e7:0b:1a:a0:c0:24:0f:94:3e:98:68:97:
8f:9b:59:f9:c1:95:aa:5e:db:bd:82:f4:a6:e5:2b:a7:f4:e5:
ea:e0:db:9c:ed:04:80:fc:7d:1a:b3:ff:19:92:aa:3c:41:f2:
16:f0:2c:e5:30:9b:d7:33:43:17:01:03:b8:89:7e:15:fc:15:
4c:d5:14:38:d2:eb:45:d7:7c:6d:bf:6f:bd:bc:5b:24:cb:87:
64:f1:52:47:50:02:75:3f:dd:77:ab:89:dc:95:7a:9a:32:55:
9c:0e:88:f1:a0:e7:4e:1a:55:ba:41:a1:d4:4c:aa:2c:27:08:
0a:62:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:24 2025 by rpki-client