Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1-McB382TnLJHe0CWwI2w6if5d5Y.roa
File: 1-McB382TnLJHe0CWwI2w6if5d5Y.roa (raw, json)
Hash identifier: M8+ccyngLPt1dH4iscA2XEb5SS/2+cGmZchXvvBSwkk=
Subject key identifier: F8:C7:01:DF:CD:93:9C:B2:47:7B:40:96:C0:8D:B0:EA:27:F9:77:96
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01945F7E2AC3BE358467A93C8518562374D2
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1-McB382TnLJHe0CWwI2w6if5d5Y.roa
Signing time: Mon 13 Jan 2025 11:48:11 +0000
ROA not before: Mon 13 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 83.171.244.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:7e:2a:c3:be:35:84:67:a9:3c:85:18:56:23:74:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 13 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8c701dfcd939cb2477b4096c08db0ea27f97796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:07:ab:d3:b7:5c:cd:76:b0:e3:b7:5b:d1:
c7:8b:d2:f6:8b:a1:4c:01:95:49:1a:7e:e1:9f:39:
53:c2:d1:1c:74:21:81:5e:78:3e:36:bf:15:ea:c1:
e2:98:dd:a3:76:c8:87:0c:96:9c:cd:ac:bf:f5:cf:
ea:84:49:f6:21:9a:84:e3:48:69:97:a1:44:1d:f1:
a7:a1:ac:8a:a3:76:ce:20:4e:be:f5:84:29:f4:e9:
b9:e6:14:a0:e1:7f:27:3e:b6:eb:74:1f:87:98:14:
dd:fe:40:9a:5e:46:55:5f:49:a9:b1:79:a8:0b:6d:
de:90:c6:c2:b0:4e:57:51:14:46:40:37:d7:a8:5d:
e9:98:14:e5:59:9e:8d:4e:44:18:98:e7:58:8d:f3:
4c:98:6c:ea:54:9b:0f:76:8a:11:cb:f8:df:6b:17:
43:9f:fe:55:b0:fc:f9:c1:d3:5c:f8:b7:d3:d5:15:
2f:1f:f0:75:8c:20:ef:f0:64:2b:e2:28:80:c1:9c:
70:e6:27:fa:6b:96:8d:f9:7d:2e:3b:d0:87:4d:87:
b7:6a:fb:02:db:30:98:17:a7:a4:a5:f7:0e:cf:5a:
42:b7:16:38:14:c9:58:24:fe:1d:53:de:8c:d7:5e:
15:d8:15:20:95:9e:f7:9d:5e:16:21:6a:69:f4:d3:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C7:01:DF:CD:93:9C:B2:47:7B:40:96:C0:8D:B0:EA:27:F9:77:96
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1-McB382TnLJHe0CWwI2w6if5d5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/22
85.8.144.0/22
139.28.212.0/22
212.87.196.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:90:45:63:12:b8:2c:e5:7b:a2:82:47:53:12:ef:07:01:ea:
c2:a8:c3:02:5b:a7:54:7b:5b:d3:8e:72:95:0e:74:3d:75:b5:
84:8f:73:41:77:72:58:3e:c6:41:39:81:2f:de:d2:7c:0b:42:
8b:35:08:ab:7a:c3:e0:ac:5d:93:fd:df:bd:c3:f9:41:c4:36:
8a:22:b9:bb:d4:94:e9:19:8b:57:93:8e:af:b2:15:8b:e4:39:
3d:3c:8b:fa:18:f5:0e:cf:ae:b8:36:24:70:b8:3d:98:5d:49:
db:2c:7e:a4:64:41:2a:63:f1:39:91:d9:d9:1d:e2:ef:85:bc:
be:61:18:f6:cd:0c:08:98:7c:4d:89:4f:bd:e5:b7:43:24:31:
a4:ac:b2:29:4a:ab:26:9f:1f:cd:57:d3:d7:48:48:a7:84:0c:
99:55:75:f9:ec:0c:88:57:ab:fb:ad:7a:17:57:b8:c3:2b:e3:
e3:4d:09:e9:6b:aa:b3:82:1c:e6:59:e3:42:ed:bb:c4:2a:e1:
12:9c:dd:39:3b:95:f7:9a:6d:f8:9c:ce:2b:cc:63:ab:62:ca:
2d:68:9e:b0:0d:71:eb:57:f6:fb:c5:25:7b:2d:3e:23:d7:b1:
00:ca:1b:c2:05:29:27:3b:de:31:f5:ff:ac:f3:3b:69:e4:68:
51:d4:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:19 2025 by rpki-client