Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/H56eIoUliY6jVcjR5ta2U5nz4ao.roa
File: H56eIoUliY6jVcjR5ta2U5nz4ao.roa (raw, json)
Hash identifier: 7aFAZZ/0mmD+m4hAZ/J8yK78AOaki08HxB+87eqDzGU=
Subject key identifier: 1F:9E:9E:22:85:25:89:8E:A3:55:C8:D1:E6:D6:B6:53:99:F3:E1:AA
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 0194258EF4E501C82B3E7350CF15748A8DD1
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/H56eIoUliY6jVcjR5ta2U5nz4ao.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28747
IP address blocks: 86.39.128.0/17 maxlen: 24
94.198.160.0/21 maxlen: 24
193.34.88.0/22 maxlen: 24
193.43.88.0/24 maxlen: 24
217.22.48.0/20 maxlen: 24
217.22.49.0/24 maxlen: 24
2001:1598::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f4:e5:01:c8:2b:3e:73:50:cf:15:74:8a:8d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f9e9e228525898ea355c8d1e6d6b65399f3e1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:c9:a0:97:68:17:a2:3c:99:21:07:95:80:
f9:9b:6f:7c:1a:f8:31:83:d6:bb:4a:b1:cf:e1:c8:
4a:0f:29:a6:4b:52:ba:4f:63:00:aa:dc:b6:b0:46:
49:b3:d0:73:74:cc:74:bc:6a:a3:70:aa:64:82:48:
cc:7c:4b:35:ef:38:8a:7f:58:f1:5c:98:2d:e1:60:
53:e3:56:35:8f:8a:10:70:64:64:42:3e:15:23:cd:
71:c5:97:89:25:96:ca:49:a8:7e:b0:02:58:ee:01:
82:a7:f5:7f:98:3f:c3:b2:aa:04:3a:da:d7:9f:30:
57:03:a1:dd:f6:e9:f8:d5:58:0e:03:12:63:9f:7a:
54:32:a8:c6:6d:cf:83:80:8f:27:f4:78:e0:bd:e7:
04:64:45:dc:c1:ec:2d:a2:80:14:80:15:05:79:54:
d6:26:b2:49:98:3e:5a:a7:75:e2:b6:81:91:05:a6:
55:87:75:84:5b:65:03:ec:70:4a:b1:ca:2d:18:f8:
8c:95:c3:c8:71:9a:9f:b0:21:44:db:d7:74:cb:86:
1d:64:11:35:7f:eb:07:09:bd:e2:0a:02:51:32:5d:
aa:44:0c:b0:ed:aa:d4:0b:5f:d4:c7:05:9e:1e:0c:
4f:d3:39:fb:e9:a7:d6:3f:18:41:73:84:3b:c1:a1:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:9E:22:85:25:89:8E:A3:55:C8:D1:E6:D6:B6:53:99:F3:E1:AA
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/H56eIoUliY6jVcjR5ta2U5nz4ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.39.128.0/17
94.198.160.0/21
193.34.88.0/22
193.43.88.0/24
217.22.48.0/20
IPv6:
2001:1598::/32
Signature Algorithm: sha256WithRSAEncryption
66:e2:4b:d2:86:54:ab:58:ae:b3:2a:5d:5c:3f:62:aa:f5:c0:
c8:fb:0d:74:5a:87:a5:c0:3e:4e:35:f7:99:93:9c:31:51:bc:
54:cf:02:82:ab:98:54:c4:bf:fa:88:0a:34:73:5a:de:36:26:
ba:94:d5:f9:a8:94:b5:fa:c7:8b:d5:c1:2c:d4:5d:c0:98:df:
30:0e:7b:fd:c5:66:eb:0d:1a:61:ed:c4:14:da:0f:48:68:42:
1d:d0:ed:0b:3a:15:c3:f4:ff:1c:03:25:b2:4e:d5:92:94:21:
df:a5:2c:ae:1a:50:f4:31:9d:5c:af:87:9d:cf:61:0b:39:d1:
9a:26:85:ad:8a:9f:f0:f6:71:e0:2b:33:1b:08:68:a6:e8:3e:
dd:ec:de:79:5b:af:bb:fc:42:1b:2c:e4:38:30:17:ed:63:6d:
6a:12:74:6c:52:00:95:72:e3:cc:9c:dd:61:b2:2a:df:40:83:
b4:32:be:57:81:75:1e:44:12:02:26:c9:7e:ec:33:06:c1:05:
16:9b:77:c7:9f:ef:f1:77:82:6a:f2:d5:5a:84:16:d5:c8:58:
6b:51:db:e5:79:7e:19:cb:5c:b0:a4:06:03:0d:d8:74:54:fa:
7d:33:12:42:db:c3:50:0d:c4:53:e1:a8:ad:11:67:50:22:2a:
82:04:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:50:12 2025 by rpki-client