Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/b7DEUQdG2oOvIJtycUpCy6AoF3M.roa
File: b7DEUQdG2oOvIJtycUpCy6AoF3M.roa (raw, json)
Hash identifier: k/+if+oSQ/fgX7WAcYydy6+lHJqvrrCdtod/PYV9DQY=
Subject key identifier: 6F:B0:C4:51:07:46:DA:83:AF:20:9B:72:71:4A:42:CB:A0:28:17:73
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 019422FB7C39A90129ABFD75EBAB0DDE4491
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/b7DEUQdG2oOvIJtycUpCy6AoF3M.roa
Signing time: Wed 01 Jan 2025 17:48:14 +0000
ROA not before: Wed 01 Jan 2025 17:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29028
IP address blocks: 141.105.120.0/21 maxlen: 24
141.105.120.0/22 maxlen: 24
141.105.126.0/23 maxlen: 24
178.21.112.0/21 maxlen: 24
185.2.44.0/22 maxlen: 24
193.200.132.0/24 maxlen: 24
194.145.200.0/23 maxlen: 24
2a02:2308::/32 maxlen: 32
2a02:2308:50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7c:39:a9:01:29:ab:fd:75:eb:ab:0d:de:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Jan 1 17:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fb0c4510746da83af209b72714a42cba0281773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:aa:d0:7c:69:40:b9:02:a3:a3:0d:80:c0:
36:ff:9d:0d:36:0f:46:a3:e4:7e:88:19:06:35:0a:
b0:3f:93:7f:6c:14:d5:d9:df:2b:bc:f2:64:26:72:
20:77:4f:ea:96:a8:7f:10:f6:d9:93:3e:93:aa:a6:
21:c9:bf:1e:4f:ba:75:cb:9b:d1:91:eb:d1:ec:a6:
28:16:ae:26:e9:b7:e8:89:1b:e4:8e:dc:a2:02:77:
a2:bb:f3:7f:06:0b:43:38:79:b8:75:a1:3a:7c:47:
69:df:7f:7a:c3:c5:2f:62:30:a4:49:a7:c1:be:c2:
95:50:88:30:3a:39:18:32:bc:9c:1a:4f:35:cc:79:
97:3c:14:6e:f3:70:ca:5d:7c:ac:c1:2e:fe:4e:bd:
84:0c:30:70:81:98:05:67:ee:d7:90:ac:25:a8:a2:
1a:60:ee:8c:ab:46:8b:6a:aa:fc:0f:d7:32:02:53:
d8:16:64:d5:aa:85:a6:dd:fe:b2:cf:e4:2a:27:22:
af:b9:fb:55:cb:c5:78:98:e5:34:fd:ab:ff:c3:c3:
9b:1c:00:60:c9:fc:70:93:a4:32:6f:3b:94:42:3d:
6a:48:04:48:8d:d9:b6:76:42:5b:c3:a5:fc:44:66:
40:2a:0e:93:4c:15:43:3e:7c:b1:eb:90:da:af:04:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B0:C4:51:07:46:DA:83:AF:20:9B:72:71:4A:42:CB:A0:28:17:73
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/b7DEUQdG2oOvIJtycUpCy6AoF3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.120.0/21
178.21.112.0/21
185.2.44.0/22
193.200.132.0/24
194.145.200.0/23
IPv6:
2a02:2308::/32
Signature Algorithm: sha256WithRSAEncryption
a1:86:be:56:66:ea:66:a4:8c:dc:a8:86:29:70:62:79:5e:50:
63:1d:35:4e:3d:9f:d9:bb:c7:a4:68:ff:82:4b:fe:99:b0:a0:
61:79:b5:5b:23:8f:42:06:67:ba:a2:8a:8f:56:31:4d:ae:3e:
2e:b2:64:68:f1:c2:69:1c:7c:0c:d6:a6:ac:a3:7b:b2:33:20:
71:00:c4:c0:17:e4:48:61:81:42:4f:8d:50:d9:24:45:97:50:
3b:19:6c:77:30:3f:f7:da:1c:a4:aa:4b:52:f3:b7:b7:11:98:
13:53:8b:b0:ca:0a:64:1d:1a:88:e8:aa:0d:c7:0f:62:a5:19:
ac:bd:d9:92:df:c7:b7:85:d3:07:cc:23:66:9a:17:8a:fb:13:
12:70:2b:64:3a:27:25:02:18:c0:4f:c3:4a:35:ab:eb:93:d0:
b1:70:0b:3e:d7:21:9d:2f:82:c6:71:05:52:27:e4:d5:e3:ae:
a5:5e:90:48:00:ef:3c:88:5f:4e:b6:9c:52:dc:88:2a:ff:98:
6c:9f:63:8b:15:77:a1:da:b8:b2:ad:18:eb:36:8d:99:50:a0:
69:57:07:75:d8:c1:b2:e7:0a:8b:79:d9:36:89:01:bf:c3:dd:
48:89:fa:91:5b:fa:b1:1c:a8:86:0b:cd:31:26:dd:16:01:48:
9b:b4:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:44 2025 by rpki-client