Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/i7sGnx93z5ToyiS1WZHxfFDOt2Y.roa
File: i7sGnx93z5ToyiS1WZHxfFDOt2Y.roa (raw, json)
Hash identifier: zbLGd9ly7dB9bjJgAy7rLwK61cdvZID5dUKiv5voqUg=
Subject key identifier: 8B:BB:06:9F:1F:77:CF:94:E8:CA:24:B5:59:91:F1:7C:50:CE:B7:66
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 019427B56A520BF1E155919A5F828470CBA2
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/i7sGnx93z5ToyiS1WZHxfFDOt2Y.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8820
IP address blocks: 46.236.192.0/18 maxlen: 24
78.41.48.0/22 maxlen: 24
81.92.0.0/20 maxlen: 24
82.139.192.0/18 maxlen: 24
195.8.224.0/19 maxlen: 24
195.8.253.0/24 maxlen: 24
195.8.254.2/31 maxlen: 32
212.17.224.0/19 maxlen: 24
212.60.128.0/19 maxlen: 24
213.240.128.0/18 maxlen: 24
2a01:170::/32 maxlen: 64
2a01:170:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6a:52:0b:f1:e1:55:91:9a:5f:82:84:70:cb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bbb069f1f77cf94e8ca24b55991f17c50ceb766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:16:85:f0:9a:07:11:ba:e9:cf:6c:57:db:
b0:00:91:b1:1f:58:ab:7e:cb:a0:38:da:b1:5a:26:
d7:9d:ba:f9:14:8c:77:23:1e:31:ad:fd:0d:98:10:
99:42:42:c5:b0:47:8a:8e:d1:44:25:a7:e7:ca:5b:
d4:7f:f9:9f:77:4b:96:d9:97:62:7f:25:24:91:91:
c2:81:20:e4:f6:b6:49:5a:06:39:cb:2a:4c:cd:19:
3e:4f:b4:b2:33:78:36:4f:5c:22:31:06:40:b5:0a:
e8:45:2b:bb:07:96:cb:8a:c9:7f:aa:f3:dc:eb:fd:
a1:8c:2b:26:66:16:d5:72:ad:d6:4d:bd:b1:b2:0a:
9f:33:a5:ba:aa:7d:e8:af:75:b7:60:cd:8e:59:b2:
80:46:b0:85:d3:ac:82:a3:20:9c:7b:5b:2d:cb:b2:
e7:62:2a:bc:79:8b:48:3a:3b:fc:38:2f:85:1d:5a:
dd:bc:84:af:41:d9:ce:61:90:c6:61:f4:8e:ac:d4:
fb:62:0a:67:10:ab:1d:0b:df:13:18:ab:cb:da:97:
59:b7:d9:d0:bc:23:37:02:7f:42:38:1f:40:e0:cc:
16:d1:75:1d:7e:d6:fc:8a:bc:93:13:52:25:75:37:
72:4c:16:96:89:df:bd:b2:d8:ee:13:d0:61:c5:e7:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BB:06:9F:1F:77:CF:94:E8:CA:24:B5:59:91:F1:7C:50:CE:B7:66
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/i7sGnx93z5ToyiS1WZHxfFDOt2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.192.0/18
78.41.48.0/22
81.92.0.0/20
82.139.192.0/18
195.8.224.0/19
212.17.224.0/19
212.60.128.0/19
213.240.128.0/18
IPv6:
2a01:170::/32
Signature Algorithm: sha256WithRSAEncryption
87:71:21:17:cd:c7:2d:d7:43:4c:0a:7e:66:73:88:f3:04:5b:
84:98:bf:27:58:e3:81:1e:2b:ac:f7:ba:e8:c9:40:c9:3c:09:
1d:7b:a2:59:2a:c1:81:2c:53:2f:73:c6:d0:20:d8:28:a1:63:
bc:50:49:19:17:d2:3c:bc:8b:96:95:1d:ba:e2:26:50:1b:c2:
70:70:68:3d:75:91:2e:dc:fd:24:bb:87:d8:d9:0a:5a:fe:df:
0c:3e:5f:4e:66:6e:ab:84:0d:ad:91:3a:de:c0:54:47:76:d1:
c1:8a:50:1d:b1:9b:92:4f:16:31:a9:af:2d:4d:76:d7:bc:8f:
49:9c:5c:2d:69:65:c7:16:8d:be:8a:78:b7:7f:b7:b4:4a:98:
8d:77:3c:91:e3:53:a6:c7:3e:7f:dc:00:b4:f4:e1:05:74:bf:
27:e4:a3:36:b4:5d:c3:aa:09:0a:ac:53:30:29:de:4f:54:44:
95:d1:7c:54:c9:3e:b8:c3:f7:20:6c:23:c8:e0:84:6c:90:04:
50:ec:61:3d:30:eb:49:a2:e7:4e:70:94:65:b2:21:05:9c:4a:
43:a6:88:cf:85:bc:5a:67:f1:41:54:49:ac:2a:23:40:66:e3:
23:18:9c:04:31:84:70:ac:33:1f:c8:97:75:5c:38:27:7f:6d:
aa:1c:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:54 2025 by rpki-client