Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa
File: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (raw, json)
Hash identifier: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=
Subject key identifier: 83:54:23:D4:A9:EE:33:16:69:5E:E3:1A:18:B4:CC:6E:05:8B:47:21
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 0194228DD8236314F3099377D5D366766715
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24634
IP address blocks: 80.81.144.0/20 maxlen: 24
92.62.160.0/20 maxlen: 24
141.105.80.0/20 maxlen: 24
185.3.20.0/22 maxlen: 24
195.112.192.0/19 maxlen: 24
195.112.205.0/24 maxlen: 24
212.28.224.0/19 maxlen: 24
2a00:16e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d8:23:63:14:f3:09:93:77:d5:d3:66:76:67:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=835423d4a9ee3316695ee31a18b4cc6e058b4721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:34:a0:33:12:a8:18:12:a3:46:1f:f0:bd:
a4:c8:72:eb:d8:9c:42:f4:d0:17:8a:18:58:19:e6:
e6:65:58:6e:61:2b:aa:a5:9d:c5:b1:83:74:a3:3e:
c1:01:a3:2c:45:c6:ff:6e:4c:c4:41:83:6e:53:31:
f2:ad:3d:6e:6c:32:26:a0:ce:6d:21:e1:e7:ea:c7:
6b:60:bc:e6:17:d3:e6:91:3d:45:bd:64:92:85:4f:
12:5a:46:90:5a:36:d1:9a:de:5f:07:db:37:53:29:
d2:9b:5c:ea:61:eb:5d:0c:67:40:8d:2a:73:3c:06:
bb:65:52:15:6b:a8:af:8f:34:53:51:41:6c:4e:0f:
1f:e0:7e:e4:3f:9f:7f:b1:a2:da:94:7b:dd:0a:66:
2b:de:e6:be:00:51:1d:75:19:78:a8:bd:4b:cc:f8:
2e:b0:23:e9:ee:49:8a:b8:fa:28:ed:53:87:12:52:
9e:3f:3d:12:8a:19:0c:c5:39:30:02:eb:f3:1a:50:
43:81:3a:23:3e:68:c6:fd:33:a0:52:83:61:5d:c5:
47:cb:72:30:0b:04:ca:c4:29:52:10:b6:82:95:45:
d4:95:72:63:73:38:30:0e:58:44:e8:6a:23:98:59:
99:03:35:4e:58:a1:88:b2:bc:ff:54:04:23:3e:25:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:54:23:D4:A9:EE:33:16:69:5E:E3:1A:18:B4:CC:6E:05:8B:47:21
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.144.0/20
92.62.160.0/20
141.105.80.0/20
185.3.20.0/22
195.112.192.0/19
212.28.224.0/19
IPv6:
2a00:16e8::/32
Signature Algorithm: sha256WithRSAEncryption
35:71:01:cd:82:dd:35:f2:44:88:5f:c0:f7:11:46:51:fa:17:
18:b6:3b:6f:87:21:b7:da:75:43:e2:75:3e:7f:5d:76:54:17:
0e:38:0b:cb:83:80:54:f7:c2:2b:dc:53:d7:fe:07:c2:91:9b:
ab:ba:96:35:64:66:78:b9:4c:9c:74:d4:9b:fa:9b:51:18:65:
d4:94:f5:89:8b:e5:08:f2:5c:40:22:7f:ef:b5:a5:1d:bf:81:
d7:86:6f:16:9c:97:d7:ee:3c:47:05:92:9b:23:2b:56:42:24:
4a:fd:06:5a:76:18:8d:fd:f3:35:d0:48:64:56:96:3b:73:74:
eb:83:e6:7d:7e:39:f5:61:98:ca:59:14:16:2c:57:35:c2:3a:
7a:55:14:29:3a:26:10:44:99:28:62:1a:de:b0:fd:71:89:9f:
a1:c1:35:83:66:22:ad:91:26:96:e2:6a:55:2f:37:99:6b:a1:
14:a0:f2:db:81:55:d0:54:cc:76:e3:42:ff:e0:90:dc:2b:c4:
b5:c8:19:47:ba:8a:e5:48:25:df:ef:10:81:50:a2:88:fd:76:
93:eb:1a:f4:8a:88:7b:53:3e:51:a7:04:8a:51:c5:5a:df:75:
8c:91:0b:db:ff:d2:0d:9a:bf:49:bd:a0:45:51:b3:4c:49:ad:
76:e4:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:57 2025 by rpki-client