Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa
File: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (raw, json)
Hash identifier: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=
Subject key identifier: D3:4A:56:11:B2:CA:F2:D2:EC:9E:35:B9:A6:0D:8D:CF:C1:BE:CC:CC
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 01941FFAA87EE6E72C84A8C3E3B37C908D96
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20495
IP address blocks: 77.74.48.0/21 maxlen: 32
185.58.56.0/22 maxlen: 32
193.16.154.0/24 maxlen: 32
193.189.149.0/24 maxlen: 32
195.210.56.0/23 maxlen: 32
2a01:310::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a8:7e:e6:e7:2c:84:a8:c3:e3:b3:7c:90:8d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d34a5611b2caf2d2ec9e35b9a60d8dcfc1becccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:01:73:1f:28:c6:b3:e0:42:1c:3f:eb:5c:
2c:07:b7:04:cc:bc:96:76:28:ec:6e:5d:4f:6f:84:
38:fd:75:b1:ac:0a:2b:98:7e:b9:47:00:78:e5:f2:
a0:3b:04:74:d1:15:f2:99:85:7d:3b:b9:74:a4:0b:
28:fb:60:6e:7a:6d:b7:30:1e:b9:99:9a:8e:6a:10:
cd:7c:8f:36:d8:a6:83:39:e9:e4:ec:7c:16:05:c4:
3d:27:79:b7:92:58:1a:df:17:04:e2:12:dd:13:1c:
5b:6d:b2:a1:94:66:45:4e:bd:b9:55:61:b8:2d:9d:
72:e1:74:9b:53:4a:ea:eb:01:fe:3a:84:92:34:96:
e0:d4:09:74:40:45:2c:40:0b:c8:25:65:cc:75:9b:
e0:19:f1:fe:68:cb:6c:69:88:e5:d4:9f:70:c7:87:
67:fb:8a:d0:54:8a:67:fb:f5:2c:51:ba:30:24:9a:
8a:35:db:23:99:ac:23:f4:0b:e0:ac:41:64:79:ba:
64:04:2c:8e:01:90:07:57:1b:63:77:12:ad:ba:a1:
b5:75:5d:8f:fd:e2:ee:8e:73:1e:92:08:c9:ff:6e:
de:4b:9a:d3:ad:99:fb:dd:1a:db:e3:84:01:1c:6b:
ec:6c:b0:50:36:33:32:92:7b:6b:9f:83:d8:65:7b:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4A:56:11:B2:CA:F2:D2:EC:9E:35:B9:A6:0D:8D:CF:C1:BE:CC:CC
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.48.0/21
185.58.56.0/22
193.16.154.0/24
193.189.149.0/24
195.210.56.0/23
IPv6:
2a01:310::/32
Signature Algorithm: sha256WithRSAEncryption
43:53:f2:ab:8c:e4:e3:76:75:b7:84:bd:89:35:66:93:4c:77:
4f:f9:28:67:5e:98:ea:b2:6e:f9:f3:a5:58:b4:d8:59:87:0c:
a9:56:ae:92:32:22:0c:fe:8d:b0:41:aa:ca:22:55:1e:01:18:
16:eb:ab:db:79:95:f4:03:9f:16:a0:3d:aa:73:66:da:87:0c:
c2:b3:0c:ea:00:96:b6:f2:2e:2a:3c:83:c1:99:68:15:c7:f1:
7f:d6:89:da:cf:a0:a4:56:74:06:c6:95:de:92:c6:0e:9b:69:
02:dc:4f:c0:d8:6e:6e:1c:87:34:be:4e:e9:ef:06:f8:f1:56:
be:eb:8c:b6:76:3c:9b:88:cd:d0:97:ca:f0:58:df:5a:74:e5:
be:1a:57:c7:b9:2c:4c:ea:29:5f:e6:94:61:d3:3d:ab:07:ec:
d5:e7:c5:46:3e:36:ac:e9:d6:84:a0:6a:76:f1:ce:8a:75:61:
2f:d9:6e:cd:73:28:31:ee:9a:07:55:c8:87:d4:7d:f6:c8:97:
59:a6:1e:1d:72:05:42:f8:85:86:4a:93:25:94:60:e8:b8:25:
26:68:bf:58:d2:4b:95:70:52:68:2f:a0:96:01:57:18:d4:fc:
30:c4:6f:52:48:2b:ce:49:20:c2:bb:78:1f:03:a6:74:27:27:
19:86:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:17:55 2025 by rpki-client