Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa
File: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (raw, json)
Hash identifier: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=
Subject key identifier: 95:58:1A:5C:1A:8A:F6:2A:70:58:E2:F6:26:65:A8:11:6A:22:2C:16
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 019427B5F721B7099F1F8C67BF244A0C5C22
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa
Signing time: Thu 02 Jan 2025 15:50:24 +0000
ROA not before: Thu 02 Jan 2025 15:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6694
IP address blocks: 91.228.148.0/24 maxlen: 24
194.247.128.0/19 maxlen: 19
194.247.132.0/24 maxlen: 24
194.247.142.0/24 maxlen: 24
194.247.143.0/24 maxlen: 24
194.247.144.0/24 maxlen: 24
194.247.152.0/24 maxlen: 24
212.5.224.0/19 maxlen: 19
212.5.226.0/24 maxlen: 24
212.5.227.0/24 maxlen: 24
2a04:8240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f7:21:b7:09:9f:1f:8c:67:bf:24:4a:0c:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95581a5c1a8af62a7058e2f62665a8116a222c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:e1:f9:22:a4:d3:ad:24:57:5e:fe:55:96:
bc:f3:65:12:b0:b2:a2:7c:24:68:25:7d:76:f7:a5:
ad:65:32:4f:49:d7:bb:8e:14:42:38:4d:e7:ff:74:
ac:f2:90:cf:2c:60:2c:3f:c7:de:84:fe:50:9e:28:
b4:bd:39:8f:4d:8e:1a:1b:a6:1f:00:76:b4:b2:8e:
2e:89:3f:76:c5:86:38:c8:de:51:54:d9:c9:af:cf:
93:60:db:d9:b2:b4:e8:e1:44:a7:bc:a7:a8:68:69:
7c:b2:14:80:09:4e:d2:8e:52:87:e0:67:65:c7:9d:
cf:34:b7:52:d1:76:16:9f:8d:3f:2e:b5:df:e7:f2:
63:44:c4:b0:c7:96:00:1f:68:31:65:76:24:93:a2:
1e:9b:a5:7b:85:82:41:99:ba:c3:ec:3d:e3:e8:ba:
12:ad:b8:2f:95:b7:ea:c2:9a:de:89:a2:b1:8d:f5:
5c:2c:f0:d5:19:a8:50:8c:cb:5a:64:00:4d:67:85:
1c:41:98:d0:dc:1a:26:8f:dd:5d:58:46:3b:7b:db:
8e:a5:a5:d4:bc:c9:7a:72:11:8b:e6:4d:76:78:fc:
24:98:5a:ff:a8:d4:dc:33:61:72:02:f1:c4:8d:b7:
66:69:5f:d2:ca:82:23:cc:4d:1a:e4:01:56:30:cf:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:1A:5C:1A:8A:F6:2A:70:58:E2:F6:26:65:A8:11:6A:22:2C:16
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.148.0/24
194.247.128.0/19
212.5.224.0/19
IPv6:
2a04:8240::/29
Signature Algorithm: sha256WithRSAEncryption
b5:f6:85:15:46:3d:8e:db:b5:3e:63:0c:be:05:fb:36:85:e7:
3d:8e:c2:6b:9c:3f:a2:d6:1d:d8:c0:2f:7e:52:84:f4:68:cd:
54:7c:d9:48:33:dc:df:1d:f3:2f:a2:49:e6:f9:5f:0a:8c:a9:
0d:45:87:54:b0:f2:75:f0:8d:66:0c:81:98:b7:16:0b:51:9a:
ed:34:07:f0:84:c5:5b:8c:ae:60:5c:4a:78:74:ad:c8:6a:8d:
57:b9:9f:ea:7e:48:3a:ed:b7:38:fd:f9:d4:9c:bf:30:81:5b:
44:47:70:5f:50:dd:0a:f4:47:cc:2f:0f:8f:ea:a8:c9:a7:72:
ca:ed:ef:0b:5f:0a:ff:a7:2c:d8:f9:4a:21:d0:b7:9e:3f:63:
2c:7a:56:c7:bb:01:f9:41:f4:50:a1:c4:04:11:41:3d:1c:b8:
0a:d7:33:99:d8:7b:bf:5e:27:ee:75:75:ec:e3:21:95:fa:bc:
a9:cf:11:19:f3:9f:e3:3e:ea:f3:56:d3:08:d1:28:3e:21:40:
02:b5:9d:f2:89:57:07:d8:ad:ca:ac:7b:f2:93:d1:4b:d5:1d:
0c:a3:36:57:34:6f:ef:57:28:55:02:a7:46:5b:27:d2:81:7b:
f7:6f:70:02:9b:98:b2:c4:f4:12:4f:29:87:b4:f9:16:65:23:
74:86:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:19 2025 by rpki-client