Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_2qBrAKQoiAvAdjodd4kqj7bT2E.roa
File: _2qBrAKQoiAvAdjodd4kqj7bT2E.roa (raw, json)
Hash identifier: c5iyFiLtY1L+HrnvJu5gHTasH8KtUT/CwRWNh730qdQ=
Subject key identifier: FF:6A:81:AC:02:90:A2:20:2F:01:D8:E8:75:DE:24:AA:3E:DB:4F:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247AE1426D31D1FF2C146D6BC9FF48
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_2qBrAKQoiAvAdjodd4kqj7bT2E.roa
Signing time: Thu 02 Jan 2025 17:51:06 +0000
ROA not before: Thu 02 Jan 2025 17:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43548
IP address blocks: 85.217.176.0/22 maxlen: 24
87.120.99.0/24 maxlen: 24
87.121.108.0/23 maxlen: 23
91.92.168.0/22 maxlen: 22
93.123.65.0/24 maxlen: 24
94.156.4.0/23 maxlen: 23
94.156.80.0/21 maxlen: 21
94.156.97.0/24 maxlen: 24
2a00:1728:2d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:7a:e1:42:6d:31:d1:ff:2c:14:6d:6b:c9:ff:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff6a81ac0290a2202f01d8e875de24aa3edb4f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:45:2c:29:20:2a:66:b6:03:4f:b3:03:bc:
1a:64:77:55:87:3f:f7:fa:17:fd:02:d4:a4:b9:e6:
ff:fc:98:2d:bd:54:ff:73:09:56:fb:e3:ce:7c:d7:
bf:5a:9c:f8:75:b4:bc:0c:1c:16:11:29:15:7c:be:
d1:74:ad:46:19:c6:24:a7:b6:b7:65:de:a0:73:89:
d5:4a:5d:56:8b:de:0c:86:2e:f8:28:81:c8:4c:78:
c5:0d:e4:af:6c:21:04:9c:74:61:52:ae:56:46:f3:
23:b3:75:aa:ce:b3:64:a2:c1:fe:e2:e0:c0:b8:60:
93:08:02:6d:c8:91:8d:95:fd:f0:e1:a0:e3:ac:49:
72:7e:75:c1:7f:e9:ac:28:78:92:70:48:41:e5:af:
f7:3c:49:27:44:fd:ea:21:e8:89:37:e0:02:33:c4:
e4:b4:b9:e0:d4:fb:9f:de:ef:cb:3f:67:43:da:ed:
e2:47:7f:ef:e9:9f:fb:2a:be:14:c5:de:ae:3e:5d:
a5:56:7e:cf:f4:80:6c:3f:5f:8e:c5:9d:14:0d:d3:
79:1d:ad:86:61:14:b4:17:39:6c:b8:0d:70:b0:14:
a1:ca:21:9a:cb:2f:28:c3:7e:95:d2:cf:d2:fa:10:
7f:b3:17:44:eb:e2:3b:2b:ab:3c:b0:7e:34:18:19:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6A:81:AC:02:90:A2:20:2F:01:D8:E8:75:DE:24:AA:3E:DB:4F:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_2qBrAKQoiAvAdjodd4kqj7bT2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.176.0/22
87.120.99.0/24
87.121.108.0/23
91.92.168.0/22
93.123.65.0/24
94.156.4.0/23
94.156.80.0/21
94.156.97.0/24
IPv6:
2a00:1728:2d::/48
Signature Algorithm: sha256WithRSAEncryption
98:1b:18:95:9e:d0:5c:89:50:fd:02:2c:b8:83:9d:73:35:10:
38:e5:c8:d4:bc:d3:e6:71:41:65:44:64:86:d3:5c:3a:53:85:
5e:e3:11:fa:d9:08:d0:89:15:f9:ab:7d:28:d0:56:a5:a9:1a:
93:c8:bf:88:8a:fb:0c:1c:3d:ad:f5:28:ed:4d:cb:6c:af:5c:
8b:ba:86:58:b7:84:08:c0:28:d6:fa:99:a7:e8:cf:fa:0e:72:
36:0a:b2:69:41:f3:a9:86:af:66:13:14:28:c1:85:2a:3e:4b:
84:ed:76:6a:21:66:9d:f4:b6:a8:85:fe:a6:9b:9c:1d:fd:d8:
fe:05:e3:57:e2:db:5d:c2:62:30:0d:3f:fc:7e:2a:fa:7f:bd:
41:55:7b:73:f7:bf:7c:30:26:79:d9:42:97:f9:75:28:fc:b5:
a2:b5:55:11:a9:11:9c:80:1d:2b:82:f6:eb:3e:27:53:da:9f:
a4:41:ee:cc:c5:81:b2:74:0b:d8:7b:7d:2f:f4:3b:61:09:23:
3d:59:fa:8a:85:a1:56:7c:01:5c:9d:f5:cf:ca:30:37:72:d4:
35:03:16:86:6b:8f:56:38:66:2c:81:c2:85:fc:10:26:95:85:
84:ec:ad:dc:9d:af:78:c5:0b:db:1d:18:25:dc:e9:e2:1b:83:
60:e6:9d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:06 2025 by rpki-client