Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/B2IUwm0uaSZHaP7DnPbSBjUieo4.roa
File: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (raw, json)
Hash identifier: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=
Subject key identifier: 07:62:14:C2:6D:2E:69:26:47:68:FE:C3:9C:F6:D2:06:35:22:7A:8E
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 019422FC1D0CC0817B60E0CF49DB445F7775
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/B2IUwm0uaSZHaP7DnPbSBjUieo4.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39647
IP address blocks: 185.93.116.0/22 maxlen: 22
185.93.116.0/24 maxlen: 24
185.93.117.0/24 maxlen: 24
185.93.118.0/24 maxlen: 24
185.93.119.0/24 maxlen: 24
194.34.240.0/22 maxlen: 22
194.34.240.0/24 maxlen: 24
194.34.241.0/24 maxlen: 24
194.34.242.0/24 maxlen: 24
194.34.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1d:0c:c0:81:7b:60:e0:cf:49:db:44:5f:77:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=076214c26d2e69264768fec39cf6d20635227a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:c6:aa:11:73:d8:df:cd:a2:af:ce:f1:bf:
21:4f:d7:24:ba:b8:3b:20:b9:f9:a9:7a:ed:7d:45:
ae:75:8f:77:73:10:01:0a:f3:75:a0:52:84:54:94:
41:b7:a3:65:7b:09:22:96:04:0d:a5:38:e7:49:b1:
95:c2:33:2d:40:2b:db:92:22:e1:0d:c1:92:ed:81:
1e:a5:67:70:52:29:39:23:bc:d1:fe:03:35:29:99:
c6:0e:4c:c8:e5:5b:c6:d4:8d:85:d8:a0:b6:9e:52:
4a:e5:e5:9b:20:24:3e:a8:b1:b2:bd:9b:1e:5c:c5:
21:03:86:59:f9:33:3c:bb:1e:c0:b3:46:7c:c6:70:
f4:e1:9e:3f:82:da:c6:7e:17:cb:2c:21:47:32:27:
97:21:71:65:4b:d6:4e:00:17:47:1b:a0:cd:04:04:
bb:83:31:25:8d:66:d2:b0:81:97:6d:3d:93:e1:c7:
c3:45:31:64:28:fa:06:2c:2e:a9:e7:da:b6:fa:fd:
ce:4d:ed:47:16:8c:d2:93:58:aa:1d:8a:dc:e5:d8:
50:0f:21:70:4e:52:ec:ef:8a:64:46:52:38:2e:ba:
ed:d2:e5:05:ba:02:de:9e:dd:21:cc:f1:e6:d2:5c:
4e:cb:e6:ab:c7:33:97:15:35:25:30:e5:7b:54:44:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:14:C2:6D:2E:69:26:47:68:FE:C3:9C:F6:D2:06:35:22:7A:8E
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/B2IUwm0uaSZHaP7DnPbSBjUieo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.116.0/22
194.34.240.0/22
Signature Algorithm: sha256WithRSAEncryption
97:63:81:b4:25:e3:ac:dd:9f:aa:5a:a6:c7:ee:8f:87:1a:84:
c7:c9:5c:09:81:86:3d:67:95:f5:ea:27:7f:f7:15:c6:42:d5:
02:53:58:89:c3:01:42:42:62:6e:84:87:91:fe:f9:35:cf:9b:
55:37:a1:9f:84:71:e4:78:5d:ec:40:34:7c:9b:cf:55:9e:6d:
44:c4:6c:28:11:22:26:a5:d1:9e:0b:dd:e4:2b:46:55:93:95:
7d:b2:8a:e3:17:4c:34:1f:80:43:e2:1c:0f:c3:49:60:27:2a:
8d:94:95:e0:58:7e:5d:8f:30:94:2b:85:d0:e1:94:77:1d:25:
cd:85:46:ae:3d:7a:07:62:ef:cf:cb:ad:52:44:c0:bb:e4:51:
94:fb:ae:d0:0c:78:8f:2f:3e:15:86:78:e4:2d:33:76:28:56:
44:b6:51:c7:e1:64:ff:32:de:52:63:ef:9c:f2:ed:5b:0b:6e:
ba:9c:ba:4e:d1:bc:aa:0f:e0:20:cc:9e:1a:91:91:ad:45:c4:
d6:01:60:b5:26:64:ac:a8:d9:ec:51:54:bc:03:a7:8b:0a:84:
01:f4:b1:8f:be:aa:51:12:a0:8c:43:7e:9f:9a:c6:c4:90:19:
7f:86:18:c8:77:06:50:af:58:b6:50:82:63:2c:a1:f2:7b:4f:
0a:95:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:24 2025 by rpki-client