Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/1-5XVVmVVHnbWezmHevbBtqQuslE.roa
File: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (raw, json)
Hash identifier: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=
Subject key identifier: FB:95:D5:56:65:55:1E:76:D6:7B:39:87:7A:F6:C1:B6:A4:2E:B2:51
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 0195963CEC51DC76E1801F5046891893734D
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/1-5XVVmVVHnbWezmHevbBtqQuslE.roa
Signing time: Fri 14 Mar 2025 19:58:49 +0000
ROA not before: Fri 14 Mar 2025 19:58:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22351
IP address blocks: 80.255.32.0/19 maxlen: 19
80.255.32.0/23 maxlen: 23
80.255.44.0/23 maxlen: 23
82.206.128.0/17 maxlen: 17
82.206.163.0/24 maxlen: 24
82.206.219.0/24 maxlen: 24
213.185.96.0/19 maxlen: 19
2a00:fd8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:96:3c:ec:51:dc:76:e1:80:1f:50:46:89:18:93:73:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Mar 14 19:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb95d55665551e76d67b39877af6c1b6a42eb251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:b4:78:7f:eb:f2:72:cf:04:79:19:99:5a:
dd:1d:03:8c:a8:25:cc:3f:70:bb:7d:74:96:23:66:
1e:bb:94:8f:a2:7e:8f:c9:8a:63:a8:cb:89:f6:37:
51:8e:a6:9c:b8:8c:f9:a1:ec:7f:e8:fe:dd:35:58:
44:22:10:3b:58:6d:eb:f1:40:88:de:2d:e0:02:0a:
66:be:94:d6:cc:82:c8:bc:78:39:70:dd:df:52:93:
1a:2c:54:b3:b7:33:5f:85:f6:ab:db:22:c8:05:40:
48:3c:33:73:a2:e7:a0:c1:3d:51:e6:74:ee:56:e0:
44:f5:48:c6:35:14:96:f1:18:43:71:c8:5c:30:22:
56:3b:11:d4:3b:2f:f2:5b:66:94:a1:70:c3:3e:c7:
01:46:41:f3:c3:15:69:cb:a5:f4:7e:03:3d:32:9a:
71:78:3a:82:1d:5e:7b:1b:c3:16:ed:ec:c7:16:70:
57:c7:17:00:63:20:33:8c:20:9d:9d:16:87:00:ed:
d5:f9:7f:9e:02:26:10:52:5d:f2:cf:af:16:e4:a9:
23:de:0d:75:87:1d:f7:e8:78:09:52:24:bf:b4:e2:
83:42:28:17:10:86:b7:82:ab:ba:d7:c6:82:f4:3a:
e8:63:95:a1:38:a5:b3:6a:c1:44:ee:1d:01:67:13:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:95:D5:56:65:55:1E:76:D6:7B:39:87:7A:F6:C1:B6:A4:2E:B2:51
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/1-5XVVmVVHnbWezmHevbBtqQuslE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.255.32.0/19
82.206.128.0/17
213.185.96.0/19
IPv6:
2a00:fd8::/32
Signature Algorithm: sha256WithRSAEncryption
6d:b2:48:cc:67:22:02:e0:fb:3b:9c:cf:96:db:c0:6d:68:3d:
5a:1b:ac:71:61:1f:38:91:2f:b0:cb:95:53:21:33:e8:ee:02:
57:9f:8c:30:95:9f:6a:7c:c7:a2:c8:83:5e:2a:11:7c:04:2a:
6c:b3:fe:b4:0c:67:75:b5:fc:6f:ad:68:d8:df:9e:63:7b:83:
54:50:7e:91:7b:3c:f3:02:6a:04:b3:8d:c0:68:c8:f6:cf:bd:
d1:d1:60:53:69:13:29:ce:f3:79:2a:ca:43:e8:59:11:be:d4:
e6:19:e1:4d:75:45:3b:5e:72:16:2e:3c:b8:11:c9:f8:69:ca:
87:6f:86:9e:47:15:4b:4f:59:0b:2f:6f:ad:b7:6c:6f:61:3b:
e0:79:52:12:55:d6:90:41:1c:90:d9:a0:ce:cc:ae:36:69:fa:
a7:8b:27:42:24:5e:27:ef:8c:6e:fe:34:1d:d9:44:eb:f8:9c:
46:61:31:4f:58:fb:82:29:8b:e9:62:6c:fb:ff:39:85:a5:44:
44:26:b1:41:ae:e4:be:03:c0:98:3b:c5:91:35:50:5e:70:5f:
35:68:75:1b:32:c2:ab:cb:4f:7a:5e:f1:fc:1b:66:b2:5a:6c:
ad:41:43:36:2d:af:a2:f2:44:41:a0:ec:a0:fe:95:6c:c7:31:
2c:fd:d4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:53:02 2025 by rpki-client