Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/xJR2GQfKqHj5b2PK--fSGRPpJ2I.roa
File: xJR2GQfKqHj5b2PK--fSGRPpJ2I.roa (raw, json)
Hash identifier: JWr1uPpb291FHnBdamKv483VXiXyzM3g9qd/ryo/cBM=
Subject key identifier: C4:94:76:19:07:CA:A8:78:F9:6F:63:CA:FB:E7:D2:19:13:E9:27:62
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 0193F82E9F5FEE639E9618BF757FE8EA33A9
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/xJR2GQfKqHj5b2PK--fSGRPpJ2I.roa
Signing time: Tue 24 Dec 2024 10:20:25 +0000
ROA not before: Tue 24 Dec 2024 10:20:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12859
IP address blocks: 2.56.226.0/23 maxlen: 24
46.182.180.0/23 maxlen: 24
46.182.182.0/23 maxlen: 24
185.214.148.0/22 maxlen: 24
2a04:e1c0:1::/48 maxlen: 48
2a09:d240:1::/48 maxlen: 48
2a0b:9cc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:2e:9f:5f:ee:63:9e:96:18:bf:75:7f:e8:ea:33:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Dec 24 10:20:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c494761907caa878f96f63cafbe7d21913e92762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:c9:90:c8:97:df:d1:b0:5c:de:5c:c3:4f:
80:27:1a:0b:22:57:46:fd:d4:75:5e:27:2e:66:ba:
e1:44:0b:50:99:a0:4c:ce:f1:12:43:8d:dd:67:24:
1d:ac:2f:6e:7c:49:6d:74:13:8e:5a:ae:ac:ca:9d:
5b:a7:b9:7d:4f:08:40:eb:b6:7b:85:22:59:f7:90:
d8:1f:bd:78:ac:70:b1:34:7a:1b:b4:02:a4:0a:c8:
c0:9d:03:e8:c0:e3:cb:5c:97:c2:09:19:af:fd:6d:
5a:7b:9e:6b:15:68:c8:23:be:57:f5:f5:44:f7:b7:
94:c5:9e:27:0f:50:a4:a6:f9:48:4b:31:ab:48:4c:
03:39:b9:e6:f1:e9:5f:cc:53:a7:5c:b3:78:ab:da:
e9:b6:0e:12:ec:9f:f4:52:85:81:9b:a2:df:82:6a:
8b:ce:8a:7a:79:10:60:ec:83:2e:60:db:af:e4:d8:
8e:0c:c6:80:06:4a:ce:80:9c:ed:a5:89:a2:e0:34:
30:f4:db:28:bf:f3:e1:58:71:a1:df:13:77:83:42:
82:5b:f6:e8:5c:81:a2:b7:2c:63:d7:0c:12:f7:43:
ff:9d:d4:a5:f9:ff:7c:bd:2e:06:ff:01:09:68:13:
7d:f1:b7:5d:e1:8b:95:a4:7b:45:d8:5c:5a:19:ca:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:94:76:19:07:CA:A8:78:F9:6F:63:CA:FB:E7:D2:19:13:E9:27:62
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/xJR2GQfKqHj5b2PK--fSGRPpJ2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.226.0/23
46.182.180.0/22
185.214.148.0/22
IPv6:
2a04:e1c0:1::/48
2a09:d240:1::/48
2a0b:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
50:28:05:0c:a6:14:3b:0c:39:aa:f6:21:dc:4d:85:fe:24:29:
2b:13:2f:d1:a9:dc:f5:54:23:10:d0:d3:34:06:bf:fb:9e:a5:
a8:6f:ef:eb:f2:a3:4a:f6:9c:41:de:c0:82:3f:55:cf:27:5e:
98:bb:1a:c5:94:24:bf:9e:a7:f4:a1:a9:ab:c4:1f:44:ed:87:
d2:81:13:80:4c:78:65:af:b7:02:86:7f:1d:88:a6:c1:14:26:
15:93:ea:6a:98:90:29:47:77:10:a9:ce:38:f1:f3:63:9a:af:
8b:33:9f:24:83:ee:81:38:8b:e4:86:64:f4:4e:71:a6:f2:95:
8c:58:0f:bd:42:fd:1e:de:99:b6:a3:15:f4:40:49:87:1f:e4:
f7:56:a5:39:aa:5a:22:47:5e:c9:47:fc:53:32:9a:60:bd:8b:
28:89:20:3c:4f:5a:3a:67:73:3a:15:b4:ae:64:ac:3e:de:04:
16:78:8a:39:96:7f:c3:9f:cf:06:de:46:2a:5f:3f:6d:9e:d5:
96:d5:cd:58:fd:e7:f2:48:f6:7e:57:e1:d2:64:dc:48:70:43:
43:b9:74:21:6b:d5:7e:27:33:87:92:68:89:37:d5:dc:12:2c:
14:99:bc:c9:50:be:e0:47:0b:a1:bc:3c:fc:38:d8:e5:9a:49:
0e:d6:a6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:13 2025 by rpki-client