Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/IaPBa6Hj2qzzYsZmokHQW4vyP0Q.roa
File: IaPBa6Hj2qzzYsZmokHQW4vyP0Q.roa (raw, json)
Hash identifier: 1A+sCZv+qiX9ixtk4SAIR/CsExXQZvWzEsFLw/UEfks=
Subject key identifier: 21:A3:C1:6B:A1:E3:DA:AC:F3:62:C6:66:A2:41:D0:5B:8B:F2:3F:44
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 019566EFB3713ECF55113D735C02F6C89F70
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/IaPBa6Hj2qzzYsZmokHQW4vyP0Q.roa
Signing time: Wed 05 Mar 2025 15:32:19 +0000
ROA not before: Wed 05 Mar 2025 15:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203847
IP address blocks: 45.142.15.0/24 maxlen: 24
62.112.200.0/22 maxlen: 22
77.83.132.0/22 maxlen: 22
89.222.64.0/20 maxlen: 20
185.122.44.0/24 maxlen: 24
185.122.45.0/24 maxlen: 24
185.122.46.0/24 maxlen: 24
185.122.47.0/24 maxlen: 24
185.206.52.0/23 maxlen: 23
193.162.128.0/24 maxlen: 24
2a01:57e0:1::/48 maxlen: 48
2a01:57e0:200::/39 maxlen: 39
2a01:57e0:400::/39 maxlen: 39
2a01:57e0:600::/39 maxlen: 39
2a01:57e0:800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:ef:b3:71:3e:cf:55:11:3d:73:5c:02:f6:c8:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Mar 5 15:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21a3c16ba1e3daacf362c666a241d05b8bf23f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:63:3f:4a:9d:78:fa:6e:53:f8:04:29:47:
94:6b:df:dc:e1:71:f4:75:b6:5e:50:bb:42:e5:5a:
72:10:dd:6f:90:ab:62:55:cc:12:73:c6:75:ed:b5:
3f:cc:cb:80:8c:45:18:c0:0e:bc:ab:2e:91:bd:dc:
67:e4:ed:97:c1:67:b8:99:f4:61:33:67:90:84:51:
28:c4:76:c4:d7:4a:e9:cc:57:cf:37:33:c7:44:40:
84:5e:01:e8:e9:cc:d6:d3:79:a7:d4:93:33:36:48:
99:bb:8d:99:26:1a:b3:39:d3:a6:1e:39:aa:28:1f:
24:7d:23:e3:db:12:2f:24:2b:75:bb:dc:39:16:e0:
be:3b:f1:f6:9b:84:df:76:cb:f1:08:82:ff:9c:0e:
98:34:ad:6a:b9:90:a0:8f:df:f8:2a:b0:31:d1:2f:
5e:04:ba:b1:99:44:91:ed:f1:b0:67:c2:c7:c2:4b:
46:ee:9d:bd:7d:04:9b:c5:5a:8b:e2:fe:c1:a9:d8:
78:42:49:72:e9:e2:ed:70:98:74:b4:65:e7:ca:f0:
ef:6a:a5:ac:d7:01:c1:d9:3d:2f:2a:fe:b2:76:8c:
bd:e1:38:74:30:18:eb:c7:49:b6:f6:3c:88:62:e8:
84:58:ee:aa:56:f7:e5:76:19:ab:51:b8:af:a4:35:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A3:C1:6B:A1:E3:DA:AC:F3:62:C6:66:A2:41:D0:5B:8B:F2:3F:44
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/IaPBa6Hj2qzzYsZmokHQW4vyP0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
62.112.200.0/22
77.83.132.0/22
89.222.64.0/20
185.122.44.0/22
185.206.52.0/23
193.162.128.0/24
IPv6:
2a01:57e0:1::/48
2a01:57e0:200::-2a01:57e0:fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3b:f6:41:7c:5f:0d:6b:7a:45:b6:f5:e6:cb:36:19:40:58:c8:
be:f7:27:23:30:d1:77:f7:ea:32:3d:8f:96:5e:da:22:d9:b0:
77:a9:16:88:36:83:5d:81:b3:6d:b6:cb:0e:4d:fd:89:d6:a7:
51:2f:35:1f:ed:da:c2:d3:23:29:ec:48:cd:7d:83:61:fc:72:
bd:65:ef:35:6d:33:65:a9:92:a9:fc:73:0a:32:e0:74:7e:d2:
6f:6c:04:4c:c4:38:32:36:59:a2:8c:b4:61:06:6c:b2:6b:c5:
e8:90:20:48:61:1e:1c:29:8e:00:d9:cb:70:8b:4f:bc:7a:27:
f4:b8:33:5c:f9:19:c3:be:2f:fa:48:5a:7e:88:00:ab:73:05:
77:8b:1e:7f:d2:d9:0c:e3:02:97:29:06:a5:8f:bc:cc:70:71:
33:10:16:9a:97:31:77:c2:65:96:15:52:ba:a6:74:e1:98:ce:
16:fa:1b:c5:e6:1f:f0:5d:b0:51:f2:2e:0c:9b:78:17:68:91:
ae:8d:02:14:60:89:0d:f8:02:83:2a:5b:c5:1d:c7:0e:2b:17:
14:c7:e6:ab:0e:29:f3:e1:47:19:22:ec:bc:95:a5:2c:02:06:
fa:ce:a0:60:0c:e0:06:44:1a:9f:db:90:b7:ec:f8:08:f3:b3:
7b:00:9b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:58 2025 by rpki-client