Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/97AdoGW1a9RlS9UfFpxEvOpPucY.roa
File: 97AdoGW1a9RlS9UfFpxEvOpPucY.roa (raw, json)
Hash identifier: c/sUucQ71cQMUZ6Dqlnh04HOlP02JwEbP5Xlvy118TE=
Subject key identifier: F7:B0:1D:A0:65:B5:6B:D4:65:4B:D5:1F:16:9C:44:BC:EA:4F:B9:C6
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281AF846BA0DF0FFE12760324FC55D
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/97AdoGW1a9RlS9UfFpxEvOpPucY.roa
Signing time: Thu 02 Jan 2025 17:55:04 +0000
ROA not before: Thu 02 Jan 2025 17:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48917
IP address blocks: 62.204.158.0/24 maxlen: 24
78.83.128.0/24 maxlen: 24
78.83.129.0/24 maxlen: 24
78.83.130.0/24 maxlen: 24
78.83.131.0/24 maxlen: 24
78.83.132.0/24 maxlen: 24
78.83.133.0/24 maxlen: 24
78.83.134.0/24 maxlen: 24
78.83.135.0/24 maxlen: 24
88.203.156.0/24 maxlen: 24
92.247.72.0/24 maxlen: 24
92.247.73.0/24 maxlen: 24
92.247.74.0/24 maxlen: 24
92.247.75.0/24 maxlen: 24
92.247.76.0/24 maxlen: 24
92.247.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:1a:f8:46:ba:0d:f0:ff:e1:27:60:32:4f:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7b01da065b56bd4654bd51f169c44bcea4fb9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:89:c9:bc:b8:b5:77:f5:9d:68:80:d3:14:30:
68:a9:99:07:3c:79:62:ac:da:b7:81:4b:d0:0f:a8:
c1:a7:07:84:76:08:e3:b9:f8:b2:b7:b2:7a:89:fe:
38:b6:4a:5d:10:4d:b4:94:9f:9f:47:2d:d9:5f:ae:
b3:bc:3f:22:ea:1b:88:d4:80:72:91:db:78:19:ab:
15:53:e5:f6:65:d6:9e:3f:29:ab:14:b8:e9:f8:3e:
5a:ab:2b:30:1b:ad:56:ab:ba:45:9f:26:fb:b6:2f:
30:36:84:d9:ff:d7:56:e5:74:11:3a:9b:0b:49:14:
1d:da:a0:8b:28:3a:a1:f6:0f:8c:12:7b:f1:d1:78:
fb:be:cf:44:b9:ca:dd:9b:ed:18:9d:2f:6f:b8:a9:
a9:07:53:f5:38:53:dd:48:22:31:a5:f9:a1:8b:49:
3e:e3:56:bc:23:49:54:2b:a2:74:4f:c8:5b:58:30:
62:57:2f:8a:77:4d:f7:66:a6:f5:90:e3:41:03:03:
00:c8:67:d0:42:47:89:8d:9f:02:88:16:ab:ff:17:
3e:27:87:d4:7d:04:aa:3d:b4:f3:bb:ac:92:a8:21:
2e:a2:2d:f4:de:8b:6c:b8:2a:63:09:90:85:7a:aa:
49:0b:fc:9b:f3:97:e8:0b:ca:e0:12:3a:83:09:4d:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:1D:A0:65:B5:6B:D4:65:4B:D5:1F:16:9C:44:BC:EA:4F:B9:C6
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/97AdoGW1a9RlS9UfFpxEvOpPucY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.158.0/24
78.83.128.0/21
88.203.156.0/24
92.247.72.0-92.247.76.255
92.247.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:73:65:9f:3f:0f:79:c8:d1:dd:f6:64:33:c0:7a:d0:57:5c:
4c:86:e5:51:77:84:0d:b3:10:97:2f:45:5a:14:6d:38:83:20:
fe:01:e8:28:40:b3:f2:5e:4d:51:4c:a2:c3:ca:0e:a8:a7:f8:
4b:c6:18:b0:e7:4c:d0:68:2a:29:a0:b5:4a:d9:65:cc:8c:de:
d1:ce:42:05:39:ba:20:20:a0:73:f2:39:f0:26:cc:01:b2:f3:
aa:67:33:0e:39:c6:51:bc:f8:bf:64:50:8b:14:d9:f3:66:64:
49:8a:58:5a:6e:b3:3e:80:9a:39:94:1b:ea:96:7f:97:e3:82:
af:93:67:cf:2e:20:3c:11:35:23:c1:e6:42:39:da:7e:7f:7f:
04:af:72:94:b0:b0:18:5e:ce:b8:e5:4d:cf:af:a3:ba:e5:e1:
2e:9e:07:3b:14:7a:6e:48:84:e7:1e:00:e5:a3:0e:61:95:af:
3f:59:60:a8:d8:db:84:f9:d5:98:5e:e4:b3:b2:b6:a4:82:93:
9a:a8:a6:d4:98:be:30:ff:f1:30:20:1a:9e:5f:3d:db:1f:cb:
5c:4b:85:a3:e5:8b:a6:d4:f8:3b:0d:b5:72:4b:81:c3:e2:9e:
ec:c8:41:83:cf:60:05:60:30:22:7f:f3:66:a4:c6:fc:fa:ec:
3d:f7:d9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:10:33 2025 by rpki-client