Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/tZdYfZbtvBoL1PuFqRVIr40YorA.roa
File: tZdYfZbtvBoL1PuFqRVIr40YorA.roa (raw, json)
Hash identifier: 9/ShFLjqXPH/FU9fRS887UeJx3NTZoeFoqhL/mHPt14=
Subject key identifier: B5:97:58:7D:96:ED:BC:1A:0B:D4:FB:85:A9:15:48:AF:8D:18:A2:B0
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 01941FFA1C4B2B284E5E258B1D841F8057ED
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/tZdYfZbtvBoL1PuFqRVIr40YorA.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9183
IP address blocks: 139.15.0.0/16 maxlen: 24
185.112.176.0/22 maxlen: 24
193.108.217.0/24 maxlen: 24
193.141.57.0/24 maxlen: 24
194.39.218.0/23 maxlen: 24
2a03:cc00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1c:4b:2b:28:4e:5e:25:8b:1d:84:1f:80:57:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b597587d96edbc1a0bd4fb85a91548af8d18a2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0f:ab:f1:7d:be:f9:2d:2b:aa:61:83:ad:30:
16:72:63:78:b2:18:ff:c4:63:2e:41:63:e8:d3:55:
ef:8a:67:55:63:5b:9a:25:92:bb:39:be:82:5f:49:
b4:1f:1c:b6:c5:f4:7f:6d:43:89:e7:e4:40:10:27:
11:55:8d:ce:a6:93:4c:6a:1e:9a:41:5e:0d:f2:97:
62:0b:ea:76:ac:95:71:d7:c3:a0:a3:d0:20:96:b4:
32:ff:af:a3:e3:fa:e9:db:cb:11:12:d0:66:2a:7e:
65:d6:23:76:9d:2d:c8:e9:1c:66:40:75:04:39:a3:
71:f2:c5:61:fe:95:31:09:74:32:e1:ac:32:e7:62:
b6:f9:93:2b:f0:96:1f:d6:33:8f:b2:3a:12:31:c2:
ff:d9:31:c8:b9:76:6b:e0:68:c3:f7:95:a8:05:91:
00:ea:74:5b:ec:88:9d:92:3f:d2:18:ba:99:90:90:
7e:e7:fd:f4:ba:4d:b3:33:e8:9e:09:91:26:4e:e7:
51:39:c5:b6:6b:bf:32:43:23:a3:1e:cc:28:74:6f:
81:c6:b3:0c:66:fc:06:05:a0:ad:cb:b6:d3:76:ef:
52:63:40:58:6c:85:f3:91:0b:26:61:09:10:8c:af:
3c:46:1c:48:3d:53:58:d1:77:80:d8:cc:59:44:e1:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:97:58:7D:96:ED:BC:1A:0B:D4:FB:85:A9:15:48:AF:8D:18:A2:B0
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/tZdYfZbtvBoL1PuFqRVIr40YorA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.15.0.0/16
185.112.176.0/22
193.108.217.0/24
193.141.57.0/24
194.39.218.0/23
IPv6:
2a03:cc00::/32
Signature Algorithm: sha256WithRSAEncryption
36:46:f4:23:03:33:d8:b9:a3:61:c4:65:04:9c:61:d0:3d:7a:
ad:3a:61:af:18:a5:c7:54:7a:28:c2:50:04:8f:18:eb:ed:27:
3d:0b:01:af:e8:e1:63:c9:5f:5f:28:0c:46:fb:30:84:ec:ef:
44:66:3b:a8:34:bc:5a:a1:e6:a3:99:2f:47:1a:eb:45:e7:79:
f3:e2:b4:a3:6b:9a:7a:51:d0:68:d5:b5:9f:38:e4:3a:47:86:
f4:80:08:4c:fe:26:df:fe:cf:17:94:46:4f:ba:2e:d0:86:a5:
8e:1c:00:89:b4:4c:35:49:3c:f5:04:f7:76:da:7c:72:c6:2d:
d4:fb:d6:ff:45:75:dd:6c:5c:28:99:b6:71:51:66:be:58:fa:
f2:b4:39:88:b2:af:e8:88:43:5c:01:05:48:0a:4c:00:d9:6b:
cc:05:51:99:8f:11:13:0c:c9:7a:ad:3a:99:37:6f:c3:60:79:
6e:c9:c9:b6:3b:de:b2:ed:ab:72:1e:9f:f0:6d:fc:a9:38:89:
04:8d:27:95:1b:52:53:bd:10:75:83:0b:5b:64:38:5e:69:be:
18:ec:82:48:79:73:cd:f1:5b:0e:1b:36:b4:37:c6:ed:a5:c0:
90:81:12:bc:d3:56:d9:4e:04:bb:11:d2:21:36:31:5d:2d:36:
79:7f:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:23:55 2025 by rpki-client