Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/p-6VU9VbwdLY2dugnZQECLEYTqc.roa
File: p-6VU9VbwdLY2dugnZQECLEYTqc.roa (raw, json)
Hash identifier: wedDrwhQoZhiRyN3ptF+wLL7tGiTHOpQ2W3XT+Dwj5M=
Subject key identifier: A7:EE:95:53:D5:5B:C1:D2:D8:D9:DB:A0:9D:94:04:08:B1:18:4E:A7
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C1EF6530BA5F1C5EBB9C2D423C612
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/p-6VU9VbwdLY2dugnZQECLEYTqc.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39668
IP address blocks: 85.120.24.0/22 maxlen: 22
193.230.215.0/24 maxlen: 24
217.156.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1e:f6:53:0b:a5:f1:c5:eb:b9:c2:d4:23:c6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7ee9553d55bc1d2d8d9dba09d940408b1184ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:13:93:f8:e5:66:c0:33:c7:cc:ed:a8:37:
d8:db:5e:5b:f5:7a:3e:2a:44:f4:77:25:3e:b5:31:
f0:9a:8b:f5:c4:5e:07:76:95:e7:76:7d:9f:35:b5:
b4:a6:58:7b:b8:1e:ba:f8:87:b1:a8:7c:bc:77:23:
39:0c:41:fb:dd:42:a6:6c:3d:da:a5:04:20:c6:68:
79:52:10:56:ad:21:b5:b2:44:21:df:47:e1:f6:bd:
12:46:db:a2:3e:0a:62:a7:89:b6:77:cf:a0:93:0e:
56:09:72:40:33:5c:00:15:0a:8a:65:80:3e:d6:82:
d1:b0:55:45:d5:da:16:08:64:d3:cb:e0:a6:2b:de:
9c:6c:8b:cd:b0:fb:3f:2b:5e:99:dd:4b:65:55:e7:
35:f7:87:d7:fb:ac:be:d0:6b:ba:0e:84:9e:22:18:
a9:b3:9d:ea:bf:4f:32:90:f5:25:be:a0:e1:12:1f:
26:84:93:24:1d:39:97:aa:27:bb:8c:0b:bd:6b:c7:
e1:66:81:80:b5:8d:58:fc:4e:22:69:ea:c3:14:09:
0c:6f:54:7d:1d:04:bc:8f:04:7e:32:05:5b:bf:d7:
bf:bf:84:12:64:84:c1:88:c9:e8:7a:c7:00:db:45:
ba:75:3a:75:70:bd:0b:78:bc:6a:bf:a0:a9:81:f6:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:95:53:D5:5B:C1:D2:D8:D9:DB:A0:9D:94:04:08:B1:18:4E:A7
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/p-6VU9VbwdLY2dugnZQECLEYTqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.24.0/22
193.230.215.0/24
217.156.4.0/22
Signature Algorithm: sha256WithRSAEncryption
50:dc:1f:23:2a:77:60:ec:c6:c3:6c:99:be:0a:17:f7:f0:58:
3b:9f:b5:78:98:32:16:fe:c7:51:d3:61:6a:6c:70:ab:38:da:
54:12:f6:b0:51:d9:65:e1:ab:34:95:77:15:e1:fc:86:7b:b6:
1a:f2:46:72:1a:7e:f6:f3:f4:ea:1d:e4:8c:2d:0f:b0:e7:01:
5c:63:2d:e7:c6:5d:18:1e:53:7b:33:44:9a:01:bc:15:60:10:
b2:3f:a2:12:61:c5:3a:d6:03:6f:e4:68:4e:83:99:d3:94:4f:
3c:e9:fe:71:65:57:e6:58:e6:fc:95:7e:6c:24:2f:0c:48:54:
57:c6:be:0a:ad:d5:70:36:af:36:dd:45:b2:1a:94:54:ed:8f:
ae:59:33:37:75:e6:86:db:46:e6:d9:45:91:a9:81:92:e7:45:
d3:a8:d9:7c:10:27:18:c4:09:05:81:8a:21:c8:4f:e8:33:f0:
02:a8:f0:47:ef:ea:2a:bc:bb:df:6d:56:31:b2:dc:ca:65:c7:
35:ac:2f:88:f1:e7:8b:91:fd:7b:d2:13:1d:1d:f6:40:ee:85:
d8:82:ac:2d:1e:f7:89:31:9f:b1:c0:8b:91:bc:f1:e2:64:97:
af:2f:16:fc:e7:5a:b9:58:e5:c4:08:30:70:66:cf:87:e0:75:
f7:8a:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:06 2025 by rpki-client