Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/fV9G8OutvawEP_xsKieVXci-tIE.roa
File: fV9G8OutvawEP_xsKieVXci-tIE.roa (raw, json)
Hash identifier: o9Ux/+t3JTsGEZGnq53xgSqRPo9nNu5/xoSyWOejP2Q=
Subject key identifier: 7D:5F:46:F0:EB:AD:BD:AC:04:3F:FC:6C:2A:27:95:5D:C8:BE:B4:81
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 0194221FD8F029CFB95F3741544CACFA59CA
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/fV9G8OutvawEP_xsKieVXci-tIE.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5413
IP address blocks: 37.252.60.0/22 maxlen: 23
95.172.224.0/19 maxlen: 24
212.105.160.0/19 maxlen: 24
2a00:10ef::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d8:f0:29:cf:b9:5f:37:41:54:4c:ac:fa:59:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d5f46f0ebadbdac043ffc6c2a27955dc8beb481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:04:d4:93:f9:6c:71:8c:dd:3e:ba:4f:7e:
f9:e9:09:a9:dc:a2:c9:c3:f6:ac:a7:72:d3:2c:12:
32:b5:94:3d:fa:81:9e:6c:eb:3e:4f:64:0d:4e:dd:
0c:aa:e7:26:5c:93:8b:4a:af:0d:fc:68:ad:d3:94:
d3:14:d6:6a:48:83:0f:8e:3f:f3:49:7f:62:03:3b:
71:4d:79:d1:44:40:ea:a6:cd:7b:5d:31:8c:20:01:
ef:f5:29:90:b0:d9:46:2b:d1:7d:1f:f2:e2:09:2e:
ff:fc:78:f6:c8:48:ab:07:ba:18:ac:87:50:61:87:
4b:21:e9:c5:62:26:96:0d:39:aa:ca:4b:79:21:a4:
88:3c:db:59:2d:3d:95:cf:0b:d4:f6:1b:67:23:0a:
b5:fe:26:80:05:6c:90:a2:07:82:29:b6:2e:df:eb:
64:56:9e:60:0e:36:ab:a6:e4:3a:de:37:ba:04:7c:
44:b1:83:58:5d:5d:4b:af:76:3b:f9:93:a8:68:a3:
ef:d2:f2:22:1f:67:bd:b2:67:72:fc:58:3b:f3:b3:
c2:71:4e:3e:d9:5b:da:55:6c:8f:6e:a3:54:c5:68:
fc:9c:a7:39:f6:70:57:b0:7e:1c:c8:d2:21:ca:97:
dc:d9:10:88:e3:43:88:38:b2:ec:f5:41:ad:38:25:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:46:F0:EB:AD:BD:AC:04:3F:FC:6C:2A:27:95:5D:C8:BE:B4:81
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/fV9G8OutvawEP_xsKieVXci-tIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.60.0/22
95.172.224.0/19
212.105.160.0/19
IPv6:
2a00:10ef::/32
Signature Algorithm: sha256WithRSAEncryption
17:7b:0f:e0:a1:fe:d2:67:b3:2f:3e:2f:0b:e2:79:7a:be:ff:
96:0c:5f:33:64:55:c5:70:9e:7b:fa:ba:45:d7:81:df:08:5c:
59:a0:2a:93:7e:96:3b:83:58:9e:ba:5a:35:04:dc:4f:d3:d3:
06:41:20:63:50:f9:31:f0:bc:2e:b7:69:d3:85:f0:3a:64:d5:
3c:84:82:7f:78:31:74:d9:62:d5:99:41:62:c7:fe:9b:2b:39:
5d:80:97:34:9c:1c:ef:67:6c:dd:f4:aa:e8:30:84:00:19:fd:
17:ac:71:0e:ba:b2:0f:28:86:83:02:86:f7:fd:34:09:f3:f9:
5a:a7:c8:c5:14:eb:62:72:a1:a9:d7:67:a5:aa:97:c1:2e:79:
c4:84:54:ee:e7:91:e9:74:18:0d:28:9a:ff:dd:e5:a6:e2:38:
b6:91:a5:fb:6a:75:c1:1c:90:05:9f:ac:5d:c6:67:21:b1:78:
4c:64:82:41:4a:4d:8a:a4:c8:ca:0d:db:fb:7a:a5:13:8b:a9:
ce:6a:6e:43:21:d5:ae:f9:7d:0a:dd:3e:11:c5:4f:c8:a7:45:
a0:cb:2e:df:ea:80:e3:84:71:f9:b8:31:20:0f:8b:44:00:18:
2f:2f:26:19:1a:28:14:a0:a9:80:6d:6d:cf:82:aa:3c:97:64:
6a:ad:fc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:38 2025 by rpki-client