Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/f1F0WxdJkw--IIYJ2pRVkM2V08g.roa
File: f1F0WxdJkw--IIYJ2pRVkM2V08g.roa (raw, json)
Hash identifier: PCXGQz19PbylWHQsw2l6MBgGvmv6YISk0m8qSQkolpM=
Subject key identifier: 7F:51:74:5B:17:49:93:0F:BE:20:86:09:DA:94:55:90:CD:95:D3:C8
Certificate issuer: /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial: 019420D61F7507D69AF5507BA83C4D600D39
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/f1F0WxdJkw--IIYJ2pRVkM2V08g.roa
Signing time: Wed 01 Jan 2025 07:48:11 +0000
ROA not before: Wed 01 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56665
IP address blocks: 31.204.88.0/21 maxlen: 24
94.252.0.0/17 maxlen: 24
185.3.44.0/22 maxlen: 24
185.40.60.0/22 maxlen: 24
212.66.64.0/19 maxlen: 24
2a00:4180::/32 maxlen: 48
2a04:81c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1f:75:07:d6:9a:f5:50:7b:a8:3c:4d:60:0d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f51745b1749930fbe208609da945590cd95d3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f3:35:35:d3:a3:5d:4f:2e:4f:96:17:7d:3d:
17:9a:a9:41:37:d7:4c:d1:5e:22:a6:01:7a:4c:28:
e5:b5:21:68:48:b0:16:e1:d5:8c:08:0f:8e:94:8b:
34:a0:c6:cf:17:bf:83:42:40:2d:7a:fa:75:99:a6:
7c:2e:88:e0:a2:c2:87:ca:7a:aa:3e:cc:0c:7d:86:
3a:d6:db:48:2a:84:bb:da:1c:65:6f:cf:e3:2b:a1:
9f:a8:1b:0d:77:99:95:e4:12:e5:21:6c:36:c3:bd:
dc:83:dd:04:7c:83:bf:38:a6:4b:cc:7e:ab:a3:f5:
ed:74:d4:da:b3:56:49:68:72:2b:d5:68:a3:81:c9:
da:c9:1b:90:39:3a:7d:87:c4:97:ea:45:12:bf:f1:
81:57:5c:12:d1:97:9e:8a:8a:8a:3a:61:82:8a:85:
31:54:18:8c:96:d1:5d:63:00:0a:b4:fe:16:e5:58:
04:57:0b:c0:75:2c:54:eb:60:d4:cc:f5:82:37:ba:
63:e9:69:42:e8:27:11:fc:cf:06:ae:a5:5c:c1:5e:
a7:fc:4f:22:10:74:72:b5:7b:56:83:4c:1b:d5:2c:
0b:c8:60:fb:3c:60:1a:56:a9:a7:f1:71:6d:4a:62:
9b:94:fb:bf:96:26:e8:87:b2:1e:c7:db:bc:e1:7f:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:74:5B:17:49:93:0F:BE:20:86:09:DA:94:55:90:CD:95:D3:C8
X509v3 Authority Key Identifier:
keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/f1F0WxdJkw--IIYJ2pRVkM2V08g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.88.0/21
94.252.0.0/17
185.3.44.0/22
185.40.60.0/22
212.66.64.0/19
IPv6:
2a00:4180::/32
2a04:81c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:0a:e7:3d:1d:d9:7f:62:cf:29:20:7f:1b:57:88:43:a8:87:
84:e9:96:f8:35:06:ef:3a:92:f2:55:ff:5b:1e:bd:82:3f:c9:
05:29:6b:4a:74:7f:02:90:49:43:36:95:24:56:7c:2d:a0:1d:
28:d1:e3:96:95:e0:43:9b:5a:87:88:49:f8:81:5e:e1:3a:48:
13:38:4b:6c:da:f1:cd:d1:33:f2:81:f7:14:d9:b3:c1:17:3c:
7d:11:82:6f:dd:61:7b:40:c4:10:af:de:80:83:dd:9f:97:85:
c4:d3:a1:d7:13:9a:9e:85:99:6d:c3:e5:a6:ae:ed:dd:c6:07:
46:9d:55:0e:7d:59:2f:a4:af:96:45:d5:5a:d8:99:e8:9b:ee:
85:dd:2f:bb:f2:bd:d7:bc:38:52:89:19:9d:27:8a:74:c5:5a:
6c:b8:2d:be:e3:b5:ac:ac:1b:ef:1b:d0:6a:83:3e:1b:3c:be:
75:6e:24:87:3b:ad:80:a7:a2:49:bd:4c:34:2a:35:64:95:5c:
e6:87:19:45:78:17:ff:64:4e:47:24:27:69:be:bb:b9:b5:10:
0a:26:91:7a:8d:6b:c7:6b:98:89:3e:53:e4:8d:72:94:25:96:
76:68:1a:ac:d2:e9:56:72:ed:6b:d0:e8:ca:b2:bc:94:2f:59:
8f:8e:06:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:34 2025 by rpki-client