Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa
File: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (raw, json)
Hash identifier: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=
Subject key identifier: FB:10:00:5D:0C:54:6C:AE:C6:0D:D1:FA:B8:29:1D:C2:6F:46:70:A4
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 019423D762A7D36B41B5A5192058C5741B84
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa
Signing time: Wed 01 Jan 2025 21:48:25 +0000
ROA not before: Wed 01 Jan 2025 21:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60503
IP address blocks: 93.158.236.0/22 maxlen: 22
93.158.236.0/24 maxlen: 24
93.158.237.0/24 maxlen: 24
93.158.238.0/24 maxlen: 24
93.158.239.0/24 maxlen: 24
185.30.164.0/22 maxlen: 22
185.30.164.0/24 maxlen: 24
185.30.165.0/24 maxlen: 24
185.30.166.0/24 maxlen: 24
185.30.167.0/24 maxlen: 24
2a00:aee0::/32 maxlen: 32
2a00:aee1::/32 maxlen: 32
2a00:aee2::/32 maxlen: 32
2a00:aee3::/32 maxlen: 32
2a00:aee4::/32 maxlen: 32
2a00:aee5::/32 maxlen: 32
2a00:aee6::/32 maxlen: 32
2a00:aee7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:62:a7:d3:6b:41:b5:a5:19:20:58:c5:74:1b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Jan 1 21:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb10005d0c546caec60dd1fab8291dc26f4670a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:39:ef:34:b7:b0:f7:fb:63:92:b0:ac:be:
b9:c7:d2:7b:7c:5c:35:95:e5:14:65:25:97:16:5f:
37:60:f6:1d:0b:10:3b:69:8f:91:a1:78:2b:a3:59:
dd:dd:b5:fe:c2:85:16:9c:de:58:6c:c0:f1:59:bb:
e7:11:a0:88:c2:96:50:c0:21:c8:e7:b6:18:15:89:
29:9a:5a:f6:57:14:8c:9a:76:6f:e6:ed:56:62:d1:
e0:46:19:b1:43:91:13:37:98:51:6c:e3:d5:db:1a:
c1:a2:0a:06:3b:ec:e4:84:13:43:b3:37:1f:dc:81:
a0:43:ef:14:68:54:0e:5c:70:31:2b:1f:e3:ad:f4:
90:f0:0a:d7:28:bb:a5:6a:fb:27:79:b3:8d:f6:f6:
73:f4:f8:98:ae:d6:81:68:28:d6:53:bb:74:ae:ac:
62:28:21:68:71:42:eb:2c:23:ab:a2:75:af:ec:85:
91:a7:4f:85:9d:05:60:29:6a:b9:d6:49:3d:9b:72:
e0:b8:02:69:c3:9b:78:13:54:f5:31:3d:ef:5a:1c:
56:5f:80:94:66:f5:d1:87:77:55:4d:d3:3e:e2:4c:
93:c6:cb:92:2b:20:18:95:df:86:e2:2d:36:e9:e8:
d4:9f:e2:56:f8:9c:ad:1b:98:c1:8c:61:42:23:e9:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:00:5D:0C:54:6C:AE:C6:0D:D1:FA:B8:29:1D:C2:6F:46:70:A4
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.158.236.0/22
185.30.164.0/22
IPv6:
2a00:aee0::/29
Signature Algorithm: sha256WithRSAEncryption
af:67:38:6b:4e:74:0d:19:2f:60:d7:22:25:07:94:5f:ac:b5:
c4:74:ef:5a:48:f2:ef:20:f2:a3:f8:a0:d1:9d:e4:eb:9f:c0:
c3:45:88:2b:c2:8c:21:1b:3b:d9:41:eb:b3:e8:11:5e:8d:7c:
1b:a3:0d:22:e6:45:ce:57:e4:22:c7:dd:77:f0:57:87:d8:38:
4b:ae:65:ae:18:1a:08:31:c2:e6:f2:0e:93:fb:ac:58:fe:c3:
29:8c:ea:e6:83:50:58:a5:e8:a4:b9:52:65:7e:00:97:c7:a5:
2f:5b:79:52:40:ea:ce:d1:4a:11:bb:fa:7c:3f:50:fd:6a:58:
e5:e1:94:4b:48:8d:92:ba:b5:cc:51:c9:9c:56:b1:c2:98:65:
69:d4:3d:3e:f8:6c:ad:1c:2b:d0:cf:4e:b3:28:e9:07:5a:dd:
fe:93:79:7f:e2:fd:a2:f0:bb:cf:1a:00:0b:52:04:24:78:2c:
13:82:9a:09:4b:56:b2:aa:33:bf:18:ed:ab:9e:63:15:1f:20:
dd:de:06:24:74:e8:7b:5a:66:c5:7e:2b:5e:eb:58:61:1c:b3:
ca:c3:55:65:b4:57:b1:6a:72:08:4c:7c:a7:97:f2:d0:98:c6:
2f:56:88:52:e4:74:8b:6d:b0:6f:cd:11:81:f5:e7:02:15:b0:
dc:cc:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:33 2025 by rpki-client