Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/sczi0Xd1zrIAV9nmfSl15eRsFjs.roa
File: sczi0Xd1zrIAV9nmfSl15eRsFjs.roa (raw, json)
Hash identifier: +eYJnX3IIBbl6F/o4u9HgVefQGV159jUNaihS6g+sWI=
Subject key identifier: B1:CC:E2:D1:77:75:CE:B2:00:57:D9:E6:7D:29:75:E5:E4:6C:16:3B
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBC77D8C89BF3090B1A6CF3F4B03B9
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/sczi0Xd1zrIAV9nmfSl15eRsFjs.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39521
IP address blocks: 85.8.160.0/22 maxlen: 22
92.249.60.0/22 maxlen: 22
188.119.68.0/22 maxlen: 22
193.32.186.0/23 maxlen: 23
212.107.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c7:7d:8c:89:bf:30:90:b1:a6:cf:3f:4b:03:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1cce2d17775ceb20057d9e67d2975e5e46c163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:35:8b:e5:c6:e1:85:91:7c:95:df:18:9c:
42:61:9b:e5:07:2b:e7:33:32:38:39:f9:98:aa:5c:
dd:58:a7:b9:59:6e:d1:2c:00:23:7d:03:da:d7:e4:
4e:63:8d:77:7a:76:5f:1d:bc:65:7c:27:32:3f:93:
a1:fe:1e:a8:00:25:68:a6:cb:25:1c:ea:b8:a8:7a:
8b:55:b3:54:d8:09:76:8b:83:0a:6c:18:c4:cf:b0:
d9:58:ea:d5:c6:eb:e1:d8:d0:d3:55:ab:4d:cd:8f:
5d:e5:b6:b4:dc:e6:f9:0a:01:0c:24:5b:bf:e7:20:
a5:fb:95:00:83:5f:b8:6f:ca:6e:8e:af:f3:14:e3:
86:93:f1:d1:61:3f:8e:da:93:df:54:17:c1:ab:cc:
59:15:b4:e6:55:2e:84:b2:79:5e:18:16:21:5b:84:
d1:06:c4:7d:7f:b6:d2:e9:a4:eb:7c:01:00:7d:1e:
25:46:89:03:7f:be:3f:00:c5:73:b8:7b:f7:cd:3c:
45:0f:8c:99:e3:95:19:2f:6f:1e:7c:77:d8:11:f4:
75:aa:2e:cc:6b:4e:fc:97:a6:bb:6d:93:8c:d3:ff:
ee:42:09:85:d3:03:08:b5:10:7f:86:f8:d2:5a:20:
b6:89:80:40:e4:59:c4:2f:3f:ff:6e:7d:a4:a1:3c:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CC:E2:D1:77:75:CE:B2:00:57:D9:E6:7D:29:75:E5:E4:6C:16:3B
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/sczi0Xd1zrIAV9nmfSl15eRsFjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.160.0/22
92.249.60.0/22
188.119.68.0/22
193.32.186.0/23
212.107.4.0/22
Signature Algorithm: sha256WithRSAEncryption
60:e6:a6:a8:25:5c:6d:81:dc:fa:b6:00:7a:73:21:b7:86:7f:
ac:19:38:df:37:a5:0e:99:54:cf:ed:d3:dd:b1:94:8d:e7:21:
bb:2b:b7:27:45:67:dc:ed:cf:8a:92:f9:37:52:42:79:eb:35:
ea:de:e1:f5:ad:0f:e2:8e:53:91:fe:59:df:0e:eb:36:56:3c:
51:69:cb:6d:9a:63:10:94:2b:ac:12:5d:04:1d:4c:dc:fa:db:
91:12:be:d1:fe:77:84:e1:68:8c:1e:b3:1e:49:7a:63:a2:e9:
ea:e2:e0:26:05:ab:12:53:93:ef:3a:de:e7:e9:0d:1f:7e:a9:
d2:07:7f:a1:b4:da:c0:02:5b:dc:41:0c:ea:c9:c5:eb:e6:6a:
98:a0:84:6e:6b:30:d6:99:33:59:a9:3d:36:62:97:50:86:49:
42:d0:c2:1d:21:be:a9:de:eb:91:4d:ef:fb:0a:a6:34:93:89:
05:a3:78:a7:c8:0a:32:55:6c:37:e4:fa:83:51:a0:a3:13:8d:
76:fc:17:2a:72:63:4d:5b:42:b1:05:c0:30:b7:43:dd:e8:97:
e3:2b:26:d6:8e:63:38:71:77:a5:cc:cf:44:fd:ef:0a:ca:84:
ba:41:72:1e:81:ce:e5:ea:0d:66:ea:94:17:6a:99:e5:6e:3e:
e3:94:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:51 2025 by rpki-client