Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/mDRyfngxgYL9lEVKzyAkCQzkYsA.roa
File: mDRyfngxgYL9lEVKzyAkCQzkYsA.roa (raw, json)
Hash identifier: Md6fZymUQHzfcYJLAnblEk5P1I8XxKhta5Tqwb60pgA=
Subject key identifier: 98:34:72:7E:78:31:81:82:FD:94:45:4A:CF:20:24:09:0C:E4:62:C0
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 0194228DCC8734F81122FEAA4135D75FEDC7
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/mDRyfngxgYL9lEVKzyAkCQzkYsA.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 46.80.0.0/12 maxlen: 12
62.153.0.0/16 maxlen: 16
62.154.0.0/15 maxlen: 15
62.156.0.0/14 maxlen: 14
62.224.0.0/14 maxlen: 14
79.192.0.0/10 maxlen: 10
80.128.0.0/11 maxlen: 11
80.128.0.0/12 maxlen: 12
80.144.0.0/13 maxlen: 13
80.152.0.0/14 maxlen: 14
80.156.0.0/16 maxlen: 16
80.157.0.0/16 maxlen: 16
80.157.8.0/21 maxlen: 21
80.157.16.0/20 maxlen: 20
84.128.0.0/10 maxlen: 10
87.128.0.0/10 maxlen: 10
91.0.0.0/10 maxlen: 10
93.192.0.0/10 maxlen: 10
192.166.49.0/24 maxlen: 24
193.158.0.0/15 maxlen: 15
194.25.0.0/16 maxlen: 16
194.150.228.0/23 maxlen: 23
195.145.0.0/16 maxlen: 16
195.243.0.0/16 maxlen: 16
212.184.0.0/15 maxlen: 15
217.0.0.0/13 maxlen: 13
217.80.0.0/12 maxlen: 12
217.224.0.0/11 maxlen: 11
2003::/19 maxlen: 19
2003::/23 maxlen: 23
2003:8:f400::/48 maxlen: 48
2003:8:f401::/48 maxlen: 48
2003:8:f402::/48 maxlen: 48
2003:8:f403::/48 maxlen: 48
2003:8:f404::/48 maxlen: 48
2003:8:f405::/48 maxlen: 48
2003:8:f406::/48 maxlen: 48
2003:8:f407::/48 maxlen: 48
2003:8:f408::/48 maxlen: 48
2003:8:f409::/48 maxlen: 48
2003:8:f40a::/48 maxlen: 48
2003:8:f40b::/48 maxlen: 48
2003:8:f40c::/48 maxlen: 48
2003:8:f40d::/48 maxlen: 48
2003:8:f40e::/48 maxlen: 48
2003:3c0::/28 maxlen: 28
2003:3e0::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:cc:87:34:f8:11:22:fe:aa:41:35:d7:5f:ed:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9834727e78318182fd94454acf2024090ce462c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:60:9e:e3:d0:38:50:a7:06:7b:ca:73:56:
35:13:0b:6b:df:e9:c2:b5:7c:20:fd:a3:c3:d1:97:
52:e4:e5:8c:d7:1c:64:ba:4e:55:4a:11:fa:b2:65:
21:7f:d1:57:db:73:88:05:c5:82:9e:2e:47:75:e1:
5b:0f:90:c8:56:d0:45:d0:0c:f1:93:53:13:28:29:
6f:80:49:1c:18:b9:fd:b3:c6:fd:f6:a8:15:6b:9b:
ab:c6:61:d5:0a:a4:24:e3:79:14:f6:6f:9a:02:a7:
b3:14:ec:6c:32:28:4a:f1:47:b0:9e:08:1d:cd:67:
a1:12:4a:50:4d:0f:71:af:67:69:ac:9d:b5:d9:db:
fc:7d:d3:b0:8c:71:47:34:99:57:83:db:72:63:7a:
b3:af:ef:e2:b0:09:e1:a2:2d:73:0b:ab:9d:c1:5a:
5f:a2:31:02:24:fc:a4:aa:65:d8:82:42:fc:26:fd:
53:c5:0f:f9:c7:a5:4b:ed:cf:ce:3a:b2:95:b3:bd:
a6:83:55:71:8f:65:1d:72:07:e6:ba:8c:0a:17:3c:
2b:4e:f8:c6:ed:0e:ec:3c:09:09:40:cf:61:69:d2:
f3:c1:29:20:93:40:db:a7:f9:62:a7:e9:2a:c5:2d:
5f:13:2a:dc:50:50:45:51:f7:e0:f4:33:2d:5c:73:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:34:72:7E:78:31:81:82:FD:94:45:4A:CF:20:24:09:0C:E4:62:C0
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/mDRyfngxgYL9lEVKzyAkCQzkYsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.80.0.0/12
62.153.0.0-62.159.255.255
62.224.0.0/14
79.192.0.0/10
80.128.0.0/11
84.128.0.0/10
87.128.0.0/10
91.0.0.0/10
93.192.0.0/10
192.166.49.0/24
193.158.0.0/15
194.25.0.0/16
194.150.228.0/23
195.145.0.0/16
195.243.0.0/16
212.184.0.0/15
217.0.0.0/13
217.80.0.0/12
217.224.0.0/11
IPv6:
2003::/19
Signature Algorithm: sha256WithRSAEncryption
9b:72:bc:77:3f:d0:28:ee:8e:a4:cf:0c:1a:b8:86:61:f7:2d:
f5:70:fe:67:c5:5c:7e:a6:41:7e:1e:7a:e0:f5:73:38:3f:43:
60:0e:d7:ce:db:50:d4:d7:90:84:21:48:66:41:d5:9c:bf:75:
af:46:e3:08:b1:f9:cd:3e:dc:d4:b1:cc:d4:4c:35:b6:5f:2b:
d8:1f:55:2c:b6:0f:be:26:77:99:bf:7e:ae:e0:8c:80:36:5a:
b0:4b:3b:83:42:a7:08:7b:4c:d9:a0:25:ea:0b:79:4f:87:ea:
32:51:6e:cb:d6:01:33:aa:05:38:5b:7e:92:63:02:06:b1:2c:
ad:a4:f3:c2:40:ce:bb:8e:49:75:d8:3e:bf:31:b2:34:ff:36:
85:50:d6:32:7b:89:07:8a:2d:87:d7:a1:dc:56:fc:6f:19:8b:
21:e5:a6:bc:e0:0c:6b:24:01:a7:46:ef:67:04:fa:99:c6:26:
23:83:9c:31:2e:bb:48:6f:4f:89:14:6d:00:0a:9f:c5:5a:93:
a9:ab:b8:5c:09:0a:7d:b9:08:42:44:ac:67:3e:12:cc:51:fe:
36:11:55:f2:50:18:7b:73:0a:91:2c:5e:20:e1:9f:9a:88:e7:
c8:e0:f6:0f:e0:d5:c3:f3:b6:8f:b6:74:ac:e7:44:0b:a2:8d:
7e:ba:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:16 2025 by rpki-client