Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa
File: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (raw, json)
Hash identifier: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=
Subject key identifier: F1:79:50:BC:80:E1:A4:F4:38:D5:BE:D4:1F:B6:76:B1:13:3A:78:62
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 019423D8065833A07BD89DBC4D5E042CBCEA
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa
Signing time: Wed 01 Jan 2025 21:49:07 +0000
ROA not before: Wed 01 Jan 2025 21:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 5.149.16.0/20 maxlen: 20
185.74.148.0/22 maxlen: 22
2a00:d260::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:06:58:33:a0:7b:d8:9d:bc:4d:5e:04:2c:bc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f17950bc80e1a4f438d5bed41fb676b1133a7862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:72:4f:08:fa:8b:44:40:f6:15:c6:27:b2:
eb:9c:7b:b9:52:41:88:3c:bc:18:8f:ff:4a:20:1b:
2d:28:50:64:ee:f4:43:6f:b6:95:65:c3:6b:9b:7a:
f2:ec:4f:aa:b8:09:0a:5d:b5:fb:76:cb:9c:90:7b:
9c:a4:4c:41:05:26:e3:a2:34:5b:1f:fe:07:d0:8d:
e7:71:7b:86:a0:f0:07:08:a3:08:08:d0:cc:d6:3c:
0d:0c:7b:ed:ca:75:bb:8d:00:be:63:0f:41:8d:a4:
a3:39:a7:df:e9:b6:40:df:81:ab:e0:af:8d:46:9e:
dc:9f:43:4e:6f:d4:37:7a:89:b9:39:5d:9a:f5:b1:
9f:f6:ee:57:c4:4b:5e:35:d8:53:e5:df:a5:01:05:
cf:6e:8f:64:9d:0f:c7:0a:56:ac:18:26:37:5e:6f:
30:24:d9:59:9e:9f:b8:38:f2:0c:ee:61:a7:33:bb:
92:b1:ee:65:cc:5a:de:22:5a:67:1a:39:00:f6:a4:
fb:1d:53:ac:85:93:ce:af:ed:cc:01:91:20:f8:96:
f5:34:28:b8:b2:0d:17:9b:b4:9e:87:4e:96:16:93:
ea:dd:8e:6b:a8:c2:6c:5c:fb:6b:a2:ff:4c:72:ee:
d6:c3:39:c1:a8:59:f5:ef:c1:ef:76:18:4e:0c:42:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:50:BC:80:E1:A4:F4:38:D5:BE:D4:1F:B6:76:B1:13:3A:78:62
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.16.0/20
185.74.148.0/22
IPv6:
2a00:d260::/29
Signature Algorithm: sha256WithRSAEncryption
61:fe:26:e4:77:bf:e7:ea:8e:76:3a:0a:49:6c:16:b8:79:4d:
b8:dc:0b:fb:b3:33:e4:85:18:8c:3b:33:d3:ee:90:fd:a4:5c:
68:6e:44:52:90:98:36:e2:f9:71:22:30:6e:02:f5:1b:cb:09:
e5:32:36:cc:5f:4d:e1:7c:7b:2a:1b:18:cf:1a:dd:3c:7c:c2:
d4:24:e9:13:6f:ec:71:6e:c6:4f:a0:5b:bf:7f:0f:d9:04:67:
ab:a7:47:51:13:f7:b0:2f:4f:1c:ae:59:0b:59:7a:32:35:ac:
26:f8:39:8f:18:0a:f3:f0:19:3a:94:23:1f:61:d6:91:03:b4:
a9:d0:ce:5a:dc:d3:21:25:66:7a:8d:ac:ad:36:b2:b3:a8:47:
51:2b:cc:18:38:8b:ce:fe:11:3f:4b:cd:67:ad:e6:62:13:02:
6e:d8:f8:b6:db:66:0e:c8:2a:b4:71:bb:cf:ba:5d:97:8b:09:
8c:b3:1a:50:ab:b1:c7:0a:f6:13:35:ca:73:8e:10:15:82:6d:
ee:8c:15:ec:61:77:64:2d:c5:2e:a1:77:3d:de:4e:a1:f8:eb:
92:c7:ef:f7:7a:f2:4f:54:c5:9d:57:29:d8:a3:46:1f:5a:37:
15:a5:10:46:75:20:74:48:61:ac:17:6c:64:06:14:71:98:52:
2c:24:e2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:39 2025 by rpki-client