Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/_UiUxv0oU2Vs8vl9aQlqGT-rguM.roa
File: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (raw, json)
Hash identifier: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=
Subject key identifier: FD:48:94:C6:FD:28:53:65:6C:F2:F9:7D:69:09:6A:19:3F:AB:82:E3
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 01942068552BDB13743BB24E468A3AAF40A2
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/_UiUxv0oU2Vs8vl9aQlqGT-rguM.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 25.25.25.0/24 maxlen: 24
25.26.27.0/24 maxlen: 24
25.129.196.0/23 maxlen: 23
25.129.198.0/23 maxlen: 23
2a08:600::/48 maxlen: 48
2a08:600:e0::/47 maxlen: 47
2a08:600:ee::/47 maxlen: 47
2a08:600:ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:55:2b:db:13:74:3b:b2:4e:46:8a:3a:af:40:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd4894c6fd2853656cf2f97d69096a193fab82e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:fc:b9:34:d9:75:b0:a0:3f:c2:43:ae:e8:
9f:36:f4:ba:20:15:cf:74:5e:79:ee:36:80:de:7d:
fa:51:2f:6d:58:18:31:2b:0d:6a:7f:fc:b7:0f:0e:
ea:47:08:26:5f:12:2c:d0:54:3b:4d:d2:e8:3b:51:
5a:e0:82:77:09:15:02:45:01:68:44:94:3a:75:84:
2c:86:a7:49:16:95:1f:c2:cc:32:3e:75:4d:4c:6c:
ef:7d:91:e3:61:10:f9:42:75:8d:5d:8f:49:1b:aa:
d5:06:f3:84:41:39:2f:80:f4:2e:fe:c6:39:de:81:
d4:cd:d7:8b:8b:43:b7:d0:36:1a:1c:a3:b5:b6:e5:
65:61:a9:e8:fe:da:b1:a8:3e:08:36:df:da:4d:cc:
08:34:0c:cd:77:2b:6d:83:88:15:17:5d:b8:f6:68:
03:f1:35:20:73:6f:c2:92:cc:72:ae:ed:76:f7:70:
f8:3a:c6:35:a6:a3:ce:f8:8d:e4:b1:06:e7:02:ee:
fb:92:45:ff:7c:21:d0:f4:c6:97:0d:e1:c7:64:3c:
af:25:52:97:b6:71:88:f7:ea:48:81:52:2d:0a:47:
ee:39:49:a2:c9:ac:b9:8d:19:07:28:1a:67:39:42:
6a:af:db:3d:bb:4a:dc:29:dd:50:ff:24:fb:ee:83:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:48:94:C6:FD:28:53:65:6C:F2:F9:7D:69:09:6A:19:3F:AB:82:E3
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/_UiUxv0oU2Vs8vl9aQlqGT-rguM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
25.25.25.0/24
25.26.27.0/24
25.129.196.0/22
IPv6:
2a08:600::/48
2a08:600:e0::/47
2a08:600:ee::/47
2a08:600:ff::/48
Signature Algorithm: sha256WithRSAEncryption
9f:54:3b:1b:eb:d6:ae:5f:57:45:31:6d:0b:34:f8:ea:7e:81:
25:6b:50:de:52:21:99:43:10:7e:ba:2e:e7:66:0d:d3:15:58:
15:e8:0e:d6:bc:1a:d3:a6:73:f9:b5:b8:04:67:9a:43:e4:f8:
81:8a:b8:1c:e5:b1:4e:8e:9c:44:ec:e2:78:32:4e:5f:0b:83:
cb:dc:90:43:0c:59:85:8e:a3:7a:16:39:bc:52:4b:2d:f8:da:
e4:a9:a4:db:05:65:83:0a:6b:b4:7e:4a:0a:6f:50:ff:19:3c:
3d:f5:7a:9a:1d:7b:55:95:76:51:f7:d7:31:94:b2:85:ff:3e:
e1:37:3c:d3:f6:00:98:2f:34:13:fd:06:d2:d6:40:a6:52:22:
2f:12:9c:f4:c1:c4:be:40:9d:fc:b0:60:9c:a6:10:e4:35:05:
72:86:6c:e5:50:25:f8:d2:11:4f:05:6d:b0:42:83:13:dd:3c:
e0:98:ae:c2:fc:40:a1:d4:fc:e1:07:ca:2c:ff:33:ff:34:c8:
a3:aa:1c:5d:fe:e6:88:7b:f2:55:f0:18:1d:f8:6d:30:f5:67:
db:d6:96:ce:04:9d:8b:ab:9e:b8:03:2d:2d:11:a6:c8:e4:f1:
85:3c:3a:71:52:84:1b:9f:29:4d:cc:d8:07:2a:47:0b:22:4e:
52:bc:ee:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:22 2025 by rpki-client