Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/0tq5kgZAzDMqnviitVn_OQYTHsM.roa
File: 0tq5kgZAzDMqnviitVn_OQYTHsM.roa (raw, json)
Hash identifier: gEsfs30k2T4OAeytJOfxkkrnBmtQHoikoZxrs0lJ3gs=
Subject key identifier: D2:DA:B9:92:06:40:CC:33:2A:9E:F8:A2:B5:59:FF:39:06:13:1E:C3
Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial: 019428273652772E0CF538EBE9FC92689673
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/0tq5kgZAzDMqnviitVn_OQYTHsM.roa
Signing time: Thu 02 Jan 2025 17:54:05 +0000
ROA not before: Thu 02 Jan 2025 17:54:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9558
IP address blocks: 194.24.250.0/24 maxlen: 24
194.24.251.0/24 maxlen: 24
217.195.144.0/24 maxlen: 24
217.195.145.0/24 maxlen: 24
2a06:2340:1000::/44 maxlen: 44
2a06:2340:2000::/44 maxlen: 44
2a06:2340:3000::/44 maxlen: 44
2a0d:9e40:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:36:52:77:2e:0c:f5:38:eb:e9:fc:92:68:96:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Validity
Not Before: Jan 2 17:54:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2dab9920640cc332a9ef8a2b559ff3906131ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:c8:68:1b:c5:91:32:f5:80:73:e1:38:11:
09:1f:79:ba:42:94:35:00:95:a6:88:b5:41:26:f8:
7c:18:00:fd:aa:d4:40:5b:7e:f3:88:6e:ae:30:0e:
b5:18:b0:3d:a2:2d:c9:b3:44:99:9d:af:1c:93:cd:
c9:f8:b8:75:d4:8f:ff:26:f8:52:4c:ed:28:09:c8:
f1:77:6e:e1:1c:33:12:78:70:20:8a:d7:28:f4:5b:
0b:85:1f:16:ab:bb:ec:e0:c5:53:88:d7:8c:dc:29:
06:0b:74:fb:05:8b:e7:e3:0b:8e:35:34:5e:20:33:
a9:83:71:fd:ec:16:1d:45:ef:37:48:e2:36:54:2c:
2e:ef:aa:5f:d3:7d:48:51:8f:dd:00:3b:72:2d:7d:
b4:ec:55:a9:c2:fa:46:e1:05:65:03:0a:42:6d:27:
0a:0d:ae:a2:b6:da:21:c8:2a:07:53:a2:2e:27:b0:
8b:1c:2f:70:b4:73:4f:77:18:08:01:fd:87:a4:f3:
2f:26:b2:f8:a3:d0:8b:dc:ba:07:ee:7a:73:8c:a7:
af:95:c4:32:51:70:9c:10:83:36:06:3b:0f:2e:8d:
4e:89:96:e0:c7:26:fc:b3:de:ef:74:51:fa:0d:88:
2d:96:b8:bc:85:ba:5a:34:86:3c:58:6e:d8:1a:47:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:B9:92:06:40:CC:33:2A:9E:F8:A2:B5:59:FF:39:06:13:1E:C3
X509v3 Authority Key Identifier:
keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/0tq5kgZAzDMqnviitVn_OQYTHsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.250.0/23
217.195.144.0/23
IPv6:
2a06:2340:1000::/44
2a06:2340:2000::/44
2a06:2340:3000::/44
2a0d:9e40:1000::/36
Signature Algorithm: sha256WithRSAEncryption
49:cd:be:99:eb:dc:3f:b9:0c:34:b8:7b:fa:90:7c:37:63:2f:
07:0b:23:a3:e9:5c:24:94:66:20:0c:6c:69:43:e8:ef:73:df:
6c:e0:9b:f6:d8:e4:f1:48:9a:21:68:b6:70:54:13:65:63:b1:
e5:c9:fd:af:39:36:e4:8a:9e:7c:66:02:c5:e9:03:c3:40:6b:
b7:d2:47:7e:5d:d5:f8:b1:d2:ce:32:f2:a4:1f:84:95:e7:12:
27:9a:09:c5:84:6e:8e:e1:b6:3e:e1:1d:40:27:21:d8:90:31:
56:cb:be:63:e5:e2:f0:4c:a4:fe:f2:15:bb:26:d8:72:ab:f3:
73:e8:8d:b6:8b:11:17:c4:44:03:df:2a:f2:88:42:a4:fe:cf:
95:7c:f0:cc:38:64:39:0e:2b:e7:ce:03:6b:cd:37:87:c7:d4:
e5:80:ce:17:3b:c3:57:a3:1a:a5:f5:4a:91:37:43:2d:56:86:
1e:b3:69:19:bb:1b:f2:6b:0b:c3:c2:f0:40:cd:f7:9b:ca:20:
66:4b:4d:db:8c:0d:fa:d5:6e:59:77:d0:d5:d7:35:e4:64:f7:
4f:24:ee:6b:50:0d:23:46:ca:f1:4b:70:87:3f:24:39:8e:ed:
d6:2e:82:ce:b7:fe:dd:b5:6d:a6:71:59:e7:e4:62:f6:11:98:
24:ba:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:22:41 2025 by rpki-client