Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/58Be7xiX6S3Rn5dMTKk_iVCR9xo.roa
File: 58Be7xiX6S3Rn5dMTKk_iVCR9xo.roa (raw, json)
Hash identifier: delgTuBHuHM98Jxou3H2EwXSN1rXHIyw+gAmbjVPHXE=
Subject key identifier: E7:C0:5E:EF:18:97:E9:2D:D1:9F:97:4C:4C:A9:3F:89:50:91:F7:1A
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 01942144677241757229963FAD89C4D08317
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/58Be7xiX6S3Rn5dMTKk_iVCR9xo.roa
Signing time: Wed 01 Jan 2025 09:48:38 +0000
ROA not before: Wed 01 Jan 2025 09:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 31.164.0.0/15 maxlen: 16
62.167.0.0/16 maxlen: 16
62.167.0.0/17 maxlen: 17
62.167.128.0/17 maxlen: 17
84.226.0.0/15 maxlen: 16
89.217.0.0/16 maxlen: 16
89.217.0.0/17 maxlen: 17
89.217.128.0/17 maxlen: 17
178.38.0.0/15 maxlen: 16
188.154.0.0/15 maxlen: 16
193.192.224.0/19 maxlen: 19
194.158.224.0/19 maxlen: 19
194.230.0.0/16 maxlen: 16
194.230.0.0/17 maxlen: 17
194.230.128.0/17 maxlen: 17
195.112.64.0/19 maxlen: 19
195.141.0.0/16 maxlen: 16
212.35.32.0/19 maxlen: 19
212.98.32.0/19 maxlen: 19
212.161.128.0/17 maxlen: 17
2001:1700::/27 maxlen: 27
2001:1700::/28 maxlen: 28
2001:1710::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:67:72:41:75:72:29:96:3f:ad:89:c4:d0:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Jan 1 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7c05eef1897e92dd19f974c4ca93f895091f71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:92:a8:ae:8f:1a:8f:c7:c1:63:9e:59:d7:
d5:8a:8a:ce:5b:36:03:32:90:35:cc:d2:1a:a2:7b:
d8:64:b3:4d:57:78:07:73:67:86:66:40:72:f0:f0:
88:81:6e:d0:6a:69:f3:a8:a8:42:72:9d:c0:0e:2c:
5e:60:50:7e:df:74:f7:e6:c4:09:b5:2c:57:a7:2c:
98:7b:c2:f4:30:a8:b5:51:1d:09:24:e6:39:d1:cf:
7e:ed:a0:96:4f:fb:51:99:b4:bf:61:94:1d:bd:49:
df:23:0b:0d:53:d4:bb:79:65:61:55:85:69:92:01:
dd:7c:f4:d9:0b:21:8d:84:e3:78:d1:8c:18:cb:ca:
05:a0:da:ea:0f:a8:49:45:e5:8e:55:5e:0c:d4:7f:
df:15:8b:3b:6d:b2:85:13:95:ad:45:e7:af:01:89:
5d:57:51:ff:38:51:e8:5e:21:b4:df:d6:57:4a:07:
90:43:f5:58:55:33:65:04:4c:7a:c4:73:f6:70:76:
2f:2d:92:5a:00:89:5d:db:a9:45:83:7c:02:2d:2b:
04:78:8f:1b:3a:06:61:97:ef:19:74:28:0c:ef:aa:
12:57:85:68:a3:39:60:37:ff:cb:ff:03:27:5a:23:
ba:b0:75:73:ab:a6:85:5a:93:b4:b3:56:2c:b9:66:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C0:5E:EF:18:97:E9:2D:D1:9F:97:4C:4C:A9:3F:89:50:91:F7:1A
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/58Be7xiX6S3Rn5dMTKk_iVCR9xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.164.0.0/15
62.167.0.0/16
84.226.0.0/15
89.217.0.0/16
178.38.0.0/15
188.154.0.0/15
193.192.224.0/19
194.158.224.0/19
194.230.0.0/16
195.112.64.0/19
195.141.0.0/16
212.35.32.0/19
212.98.32.0/19
212.161.128.0/17
IPv6:
2001:1700::/27
Signature Algorithm: sha256WithRSAEncryption
42:48:3e:c8:01:f7:b1:35:8c:49:3e:94:b9:b3:a5:77:6f:3d:
69:3f:ad:f4:e7:66:f7:1a:e7:5e:ca:95:cb:13:24:34:a8:de:
4c:61:9e:da:6e:14:40:73:0b:e8:9a:5e:5f:e1:ff:59:88:c6:
06:46:e5:3f:78:cc:c4:13:a6:e3:08:1a:98:7d:3f:3c:43:e8:
18:ce:ad:15:5c:31:52:ef:b4:bb:25:c9:33:56:e6:e1:f3:27:
0e:5d:a6:38:70:cd:dc:af:08:d1:6e:7c:29:14:43:8c:be:d8:
4d:e7:f2:56:40:e1:38:b5:07:4b:d3:34:5e:52:77:94:51:0c:
d1:3e:f9:13:50:ae:d4:31:c0:33:a7:a8:bc:bf:51:90:85:24:
42:39:ec:ab:a8:63:bf:4c:07:88:50:37:96:70:14:1b:b1:28:
ac:8e:67:0f:cd:63:d2:d5:6c:e9:34:2d:7f:0d:b8:ed:42:0d:
9b:5f:13:03:d8:c6:61:3b:03:fe:38:c1:3d:a4:e3:9e:49:d3:
f4:bd:d0:d7:1d:1a:0a:23:f1:6e:03:d3:59:60:96:72:95:40:
af:dd:f8:65:be:70:cf:3e:c1:c6:94:a5:28:41:9a:bc:a5:a6:
64:17:c9:4b:26:0f:91:53:c9:4e:3e:51:1c:c6:e0:5c:7d:0b:
5d:7b:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:08 2025 by rpki-client