Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/1-4thfGCfV_85lt2WZkN-l71fwv0.roa
File: 1-4thfGCfV_85lt2WZkN-l71fwv0.roa (raw, json)
Hash identifier: 7cUPpyEsjpN2LkemwyOwpAzp6M6Mod4nt5VJCSxBi3s=
Subject key identifier: FB:8B:61:7C:60:9F:57:FF:39:96:DD:96:66:43:7E:97:BD:5F:C2:FD
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019420D64D047AAEE99A47E185DB072C6302
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/1-4thfGCfV_85lt2WZkN-l71fwv0.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49767
IP address blocks: 109.72.0.0/20 maxlen: 20
194.31.216.0/22 maxlen: 22
2a02:2930::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4d:04:7a:ae:e9:9a:47:e1:85:db:07:2c:63:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb8b617c609f57ff3996dd9666437e97bd5fc2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:4c:90:cc:21:e4:83:64:59:68:f4:61:4b:
59:81:55:1c:cc:bd:9b:c0:ef:b8:6c:91:db:08:5d:
b8:2c:ab:f1:e2:49:61:d4:28:52:3f:3e:83:63:31:
da:6c:2c:20:ce:0c:a2:1c:e6:90:d9:13:3b:df:e5:
78:64:d7:f2:61:9d:11:56:07:00:07:ce:b4:7c:2e:
dd:6d:94:c6:ce:ed:47:1f:51:e2:e9:05:dc:47:07:
16:7c:ca:36:33:98:8f:c3:f1:ce:f1:10:8c:fd:72:
42:d6:88:e6:23:23:22:da:4c:b3:d1:97:c7:bf:dc:
de:88:d0:b4:1f:00:2b:63:61:73:1c:bb:78:f6:c4:
d8:67:70:1a:6f:7f:c3:d4:a9:4e:16:2e:e0:86:6f:
15:d0:74:9d:b9:39:a3:16:20:0b:e6:5c:a3:a5:06:
cd:05:58:36:56:c8:bb:af:90:7f:cf:45:d4:aa:89:
fd:54:20:fe:b1:02:79:85:b2:dd:7d:ec:7c:7a:cb:
44:67:d6:64:c7:83:8a:bf:84:69:6f:bb:ee:c1:6b:
51:80:73:5f:54:b5:2d:e8:64:98:9c:fb:c2:a7:b9:
86:b2:80:f6:e5:15:12:9b:fc:56:24:d6:ce:03:6b:
9c:e8:8c:b6:be:82:f8:c1:fb:f3:30:20:4d:2a:68:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8B:61:7C:60:9F:57:FF:39:96:DD:96:66:43:7E:97:BD:5F:C2:FD
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/1-4thfGCfV_85lt2WZkN-l71fwv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.0.0/20
194.31.216.0/22
IPv6:
2a02:2930::/32
Signature Algorithm: sha256WithRSAEncryption
aa:9c:bb:8e:6a:42:48:27:dd:75:4a:28:36:a5:4d:97:98:bb:
a1:46:51:6a:9e:53:9f:87:c1:12:8b:35:80:ff:de:6c:74:39:
95:ac:5d:51:5b:44:75:d4:ac:62:2b:35:72:a0:ad:b0:c3:72:
a6:9a:e2:aa:fd:74:00:a9:30:41:35:ec:08:10:87:79:86:cb:
cb:81:0f:3f:cc:a5:7b:70:94:37:87:38:a0:d2:b9:64:5e:36:
aa:ac:d5:fa:9e:69:48:b6:ff:1e:b7:5d:09:55:7b:83:17:3b:
b8:80:43:c6:67:fe:0b:ff:49:84:0d:ea:0b:01:43:94:f0:a4:
8a:46:a4:f6:69:ff:2f:1c:3f:73:16:2a:c4:34:d4:bc:35:ef:
df:a6:53:0e:dc:1f:c3:1e:29:71:21:26:48:0d:7d:2c:60:96:
72:4a:95:d3:2b:00:10:86:8d:c9:f4:01:ad:27:91:7a:66:df:
6f:1d:4b:f6:30:ad:8e:35:82:8e:78:69:d2:dc:39:24:b2:30:
3b:5f:2c:1b:b7:13:1a:8a:78:b3:37:7d:c5:ad:7d:35:cc:e6:
c3:59:25:c3:0c:92:93:8a:37:4b:5a:f5:bd:97:ef:71:1f:a6:
2f:5c:fb:d6:1b:66:4a:03:65:7b:83:9d:88:e4:75:08:3f:bd:
7c:aa:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:03 2025 by rpki-client