Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iAaGQCDc_iZliu2DoFEK7u1sCxw.roa
File: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (raw, json)
Hash identifier: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=
Subject key identifier: 88:06:86:40:20:DC:FE:26:65:8A:ED:83:A0:51:0A:EE:ED:6C:0B:1C
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 01941FFA1D8BE8F9475EC5AC6FA8E4608BAE
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iAaGQCDc_iZliu2DoFEK7u1sCxw.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203970
IP address blocks: 139.15.0.0/20 maxlen: 24
185.112.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1d:8b:e8:f9:47:5e:c5:ac:6f:a8:e4:60:8b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8806864020dcfe26658aed83a0510aeeed6c0b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:1c:d5:6c:d8:23:10:0b:73:71:59:06:1d:
11:3a:c9:d1:12:16:56:ca:1e:35:0c:f3:46:c7:4a:
35:cf:5d:1b:de:65:07:b8:f3:a2:df:44:bf:91:bd:
a4:35:5a:b1:cb:d8:37:b5:9f:6f:77:97:91:2f:7a:
82:a3:62:6a:51:c9:4e:13:83:c4:13:ee:10:fc:b2:
c6:dc:00:91:2a:31:94:94:e8:dd:de:ae:6e:58:41:
44:3f:04:1b:45:3c:66:d6:95:23:e2:c4:04:32:d1:
77:28:e6:e1:52:39:ce:28:02:2a:73:db:2e:8b:d1:
13:ec:67:62:07:82:ff:12:b5:f8:2d:fa:6f:07:b6:
81:95:c5:d8:be:e4:24:fd:b9:d0:2d:5a:cb:b2:a8:
6d:e7:5c:a9:3f:23:8a:02:6d:34:18:9d:2b:13:bc:
04:cc:4e:41:be:0a:ab:4d:f4:fb:3b:cf:50:5b:99:
08:1d:f7:10:b7:8e:41:67:63:ca:5c:c0:e8:2e:dd:
4f:79:de:0e:5f:87:d6:11:09:d4:ec:07:4f:13:a1:
eb:ed:2a:92:1f:0d:29:c5:3a:d5:f8:c0:72:e4:e4:
5c:8e:20:32:79:1a:c3:e4:68:d0:9f:15:35:62:17:
74:fa:16:f2:4f:6d:d3:57:bf:34:6e:82:70:9f:a4:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:06:86:40:20:DC:FE:26:65:8A:ED:83:A0:51:0A:EE:ED:6C:0B:1C
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iAaGQCDc_iZliu2DoFEK7u1sCxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.15.0.0/20
185.112.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:d8:0f:4c:9e:a4:9d:a2:f8:c3:42:d3:dd:38:63:b2:b6:82:
8a:33:dd:09:14:f8:da:bb:5c:75:a1:03:09:9e:6b:1d:56:97:
00:97:25:fa:6f:34:a3:64:4e:01:35:e5:1c:1d:ea:05:97:6b:
b7:ac:fa:2a:d8:1f:43:ad:73:08:fb:bc:be:f9:be:38:8f:25:
da:65:dc:5e:29:2a:30:d2:86:29:54:29:b4:af:b1:1f:87:4a:
ef:b7:4b:66:18:24:fd:b5:62:d2:22:b3:57:75:56:fe:f7:47:
8d:e9:77:d6:af:be:0e:e2:c9:b8:7e:46:1e:9a:f4:82:05:83:
81:1c:7e:db:5b:c9:95:17:52:a1:b9:d4:ff:81:42:38:00:1e:
ec:bc:d8:22:dc:8f:cc:2f:47:c4:61:30:e4:49:a6:1a:1e:31:
ca:8f:0d:c4:58:26:ad:a3:18:9c:b1:a4:7c:df:0a:3e:33:2d:
7b:cb:4c:82:e8:3b:5a:50:5c:7a:8a:92:ab:bc:38:04:a5:75:
29:6b:f2:e3:6b:65:b9:37:18:ab:b9:b9:88:73:a2:1e:53:d1:
c8:2f:c9:2b:6f:59:52:24:f2:50:3f:f9:02:d5:b9:23:02:7a:
89:89:bd:01:fe:0a:94:0c:88:dd:c6:50:69:2e:ca:a7:21:e4:
60:2e:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:03:36 2025 by rpki-client