Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0mHHxrKDuXooxqRJqM3AcObFutU.roa
File: 0mHHxrKDuXooxqRJqM3AcObFutU.roa (raw, json)
Hash identifier: 0sIJmx7yyuOdBXcmte6YeWeL6TZg8JAjxBTze6wfptI=
Subject key identifier: D2:61:C7:C6:B2:83:B9:7A:28:C6:A4:49:A8:CD:C0:70:E6:C5:BA:D5
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 019425220EB4BA798255E730EB3BF571F364
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0mHHxrKDuXooxqRJqM3AcObFutU.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1140
IP address blocks: 94.198.152.0/21 maxlen: 21
94.198.152.0/24 maxlen: 24
94.198.153.0/24 maxlen: 24
94.198.154.0/24 maxlen: 24
94.198.155.0/24 maxlen: 24
94.198.156.0/24 maxlen: 24
94.198.157.0/24 maxlen: 24
94.198.158.0/24 maxlen: 24
94.198.159.0/24 maxlen: 24
185.76.132.0/22 maxlen: 22
185.76.132.0/24 maxlen: 24
185.76.133.0/24 maxlen: 24
185.76.134.0/24 maxlen: 24
185.76.135.0/24 maxlen: 24
193.176.144.0/24 maxlen: 24
2a00:d78::/32 maxlen: 32
2a00:d78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0e:b4:ba:79:82:55:e7:30:eb:3b:f5:71:f3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d261c7c6b283b97a28c6a449a8cdc070e6c5bad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:30:41:5f:c5:88:51:42:7a:08:d5:b2:ad:
a8:e0:8c:1f:e9:90:97:af:bc:c2:78:4c:46:55:93:
bb:4a:28:18:84:6c:e3:a9:62:63:07:e4:11:c8:25:
86:3d:9e:7a:37:d8:67:69:25:d5:5c:f9:64:b1:b6:
47:65:52:ab:20:19:14:84:49:3d:dc:c1:18:b5:3a:
1f:84:e8:86:5d:5f:94:dc:d4:a9:70:a1:28:63:33:
f6:5c:45:4b:20:6c:8d:7e:66:c9:38:6f:c2:c6:f0:
41:dd:bd:6f:88:3a:17:75:41:15:28:79:48:d9:9d:
fd:d1:f1:b0:bd:be:e2:40:11:bb:71:98:fe:c8:bf:
bd:43:77:76:ee:02:fa:5b:3d:d6:a7:aa:cd:fc:68:
6c:4c:8a:d6:37:4a:4c:f5:ce:a3:d4:3f:65:81:a5:
8d:fa:cb:e6:91:ea:df:c1:dc:dc:80:65:04:db:3d:
6e:69:75:e6:22:19:3d:22:18:40:63:60:47:c8:a5:
e7:02:3b:e8:a2:02:04:0a:19:a5:f0:bf:3b:77:58:
ee:47:2f:fb:09:34:a3:ef:8c:c8:07:ea:cd:47:28:
f8:d9:c0:4c:0d:df:7b:1a:6b:9e:fa:f1:d4:9e:f5:
78:0a:7d:02:37:4c:03:93:0d:0b:62:ed:62:d9:af:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:C7:C6:B2:83:B9:7A:28:C6:A4:49:A8:CD:C0:70:E6:C5:BA:D5
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0mHHxrKDuXooxqRJqM3AcObFutU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.152.0/21
185.76.132.0/22
193.176.144.0/24
IPv6:
2a00:d78::/32
Signature Algorithm: sha256WithRSAEncryption
5a:2e:14:db:a4:89:fb:c4:b7:7f:7c:3f:61:90:23:f5:06:2d:
fe:7a:ac:2f:15:e9:5b:18:54:26:e4:57:da:a2:af:db:be:5f:
7b:6d:3c:20:6b:0d:f9:49:63:22:ab:87:a5:74:81:99:d3:e4:
5f:7f:69:6f:8a:25:cb:8b:c8:5e:bb:10:46:63:6b:7f:cf:5e:
14:a8:e2:72:3b:20:98:e1:3e:9c:cf:86:6c:7a:3f:92:3f:8d:
37:22:ca:ef:7d:97:11:51:13:53:83:1b:3c:2e:f5:32:89:e9:
8d:f4:3f:5b:f8:55:40:8a:a4:e1:41:a4:e5:25:e9:f4:fd:6d:
0f:47:78:e3:d1:09:c2:e8:29:37:b9:4b:b3:0f:6d:5e:3b:2f:
98:0c:92:92:5a:de:7e:b8:08:da:1e:b8:17:aa:f0:b3:75:41:
ae:94:22:36:bd:0a:c6:b3:a4:56:37:20:3f:f2:8c:36:c3:fc:
ce:a9:84:d6:a1:f1:fb:ff:9c:9e:c5:8d:05:05:95:e2:ce:6f:
43:37:98:d8:b9:01:7b:a3:83:e8:47:a1:da:f8:58:d5:cb:03:
44:36:bf:59:9a:4b:34:fc:93:60:3d:dd:22:31:77:31:e7:57:
1e:e0:59:34:8a:a4:d7:34:f3:31:67:e5:95:96:c7:9d:1d:7e:
1d:b1:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:31 2025 by rpki-client