Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/iGufuZjxwz7pdT7rVOSbpYMFnnU.roa
File: iGufuZjxwz7pdT7rVOSbpYMFnnU.roa (raw, json)
Hash identifier: USEr0twobtfRdp/ckNUDIOYLYFcQleS+iBHy7odXXr0=
Subject key identifier: 88:6B:9F:B9:98:F1:C3:3E:E9:75:3E:EB:54:E4:9B:A5:83:05:9E:75
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019426ED636117FB90900396BDB7067ECE43
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/iGufuZjxwz7pdT7rVOSbpYMFnnU.roa
Signing time: Thu 02 Jan 2025 12:11:19 +0000
ROA not before: Thu 02 Jan 2025 12:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 31.40.196.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:ed:63:61:17:fb:90:90:03:96:bd:b7:06:7e:ce:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 2 12:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=886b9fb998f1c33ee9753eeb54e49ba583059e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:52:81:8a:65:06:67:4e:6a:db:7b:b3:f7:
09:64:87:0d:60:8d:e9:4a:ee:f5:4a:17:75:7f:73:
2d:28:d8:cf:92:6e:20:25:47:0d:de:38:6a:e3:9c:
9a:87:13:58:43:bd:60:1e:9e:2b:15:5b:54:1e:97:
a3:b0:83:7a:ba:4d:bb:d9:dd:ef:1c:c4:f8:9a:d7:
7b:30:7b:e6:69:b8:20:8a:64:19:55:ec:4d:ed:3f:
07:8f:e3:1e:7c:e2:d7:60:7c:ae:96:e9:5d:c0:0a:
14:7d:f9:43:0c:87:61:ae:5e:f5:7f:1d:db:1e:c1:
31:65:43:b8:0d:0a:88:40:04:84:58:b9:1e:b4:86:
07:48:cc:34:60:2e:c8:eb:d5:b4:6d:52:ef:08:03:
91:1e:c0:f3:33:cf:2c:c6:e7:ae:8a:31:4f:0a:83:
39:7a:55:be:95:2f:b5:1d:1d:4d:79:86:78:73:3d:
ba:33:f5:a3:96:89:85:8f:68:52:2c:32:3d:84:8d:
b1:62:e5:8b:b9:76:be:3b:3a:20:5c:38:c7:4c:94:
45:67:ab:30:e4:1c:9b:c9:d7:89:d0:fe:bf:32:d0:
3c:8f:6d:4a:50:6e:ef:fd:06:62:cb:c7:1e:54:b9:
54:31:d7:b0:1c:25:3e:b4:42:cf:80:a0:54:d9:73:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:9F:B9:98:F1:C3:3E:E9:75:3E:EB:54:E4:9B:A5:83:05:9E:75
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/iGufuZjxwz7pdT7rVOSbpYMFnnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
83.171.244.0/22
85.8.144.0/22
139.28.212.0/22
212.87.196.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:8c:69:51:48:82:89:2c:4f:46:61:2d:db:8a:67:c5:29:da:
92:a3:f4:d6:62:0b:2b:bb:09:56:e3:73:ca:02:9f:f8:8f:f6:
a3:87:be:c2:b7:a1:3a:b6:53:bc:19:31:4a:70:65:0d:cd:7a:
fa:c7:00:9b:5a:91:19:6c:92:d0:9c:cd:a9:40:f6:7a:4a:76:
d8:3e:9b:5b:18:fd:de:2c:65:86:da:2a:89:6f:51:93:40:54:
be:82:68:d0:0b:db:58:c5:37:4d:bd:be:7c:fd:6b:79:90:c1:
1a:0d:5c:98:98:b5:07:42:83:36:cb:ad:ed:f7:4e:cf:c8:d6:
37:da:19:1b:57:dc:ad:23:89:bd:ef:6b:dc:81:f0:a0:2c:d1:
f9:b5:de:73:65:1d:5d:15:8b:19:dd:b3:51:ba:29:4d:d1:e6:
8c:d2:dd:c0:fc:80:9c:34:7c:d3:b7:9a:fe:a9:f6:ea:83:66:
94:c8:19:cb:ae:eb:9b:49:70:33:b9:f9:31:87:fe:8a:02:04:
d4:54:57:3d:8c:00:78:1a:a5:48:6d:97:da:a4:99:77:b3:86:
a0:4e:f5:7c:d1:86:a4:ae:2d:ce:87:f3:37:51:9e:fb:b7:bd:
cf:fa:da:3f:e6:3b:2f:7a:7a:5c:ef:64:31:da:e9:ee:62:18:
7c:2d:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:34:07 2025 by rpki-client