Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/iudv22y-y8P0StKgDVn09sOPxbQ.roa
File: iudv22y-y8P0StKgDVn09sOPxbQ.roa (raw, json)
Hash identifier: AGBnBuW/ZJdL25BHl1KTaZBIhweMwsKY/9TBPO1YbCU=
Subject key identifier: 8A:E7:6F:DB:6C:BE:CB:C3:F4:4A:D2:A0:0D:59:F4:F6:C3:8F:C5:B4
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 01939E02C701FF1A5402635B10D36282EC8D
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/iudv22y-y8P0StKgDVn09sOPxbQ.roa
Signing time: Fri 06 Dec 2024 22:06:42 +0000
ROA not before: Fri 06 Dec 2024 22:06:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42908
IP address blocks: 46.183.56.0/21 maxlen: 21
78.136.128.0/18 maxlen: 18
80.78.136.0/22 maxlen: 22
80.79.0.0/22 maxlen: 22
93.92.48.0/21 maxlen: 21
93.93.32.0/21 maxlen: 21
94.241.64.0/18 maxlen: 18
188.119.96.0/22 maxlen: 22
193.107.252.0/22 maxlen: 22
2001:67c:13c4::/48 maxlen: 48
2a01:9f40::/29 maxlen: 29
2a02:2428::/32 maxlen: 32
2a03:7a00::/32 maxlen: 32
2a07:cc80::/29 maxlen: 29
2a0c:8b40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9e:02:c7:01:ff:1a:54:02:63:5b:10:d3:62:82:ec:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Dec 6 22:06:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ae76fdb6cbecbc3f44ad2a00d59f4f6c38fc5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:8b:06:3f:dc:a8:b3:4f:c9:b4:e9:b1:44:
e8:5e:c0:5e:68:b7:bb:70:57:2c:05:70:65:91:70:
63:78:65:ed:52:70:10:32:19:a3:06:90:78:b1:30:
0e:1e:dc:f5:3d:23:3d:1b:55:bc:2b:9c:5f:94:1b:
d2:9d:68:c6:da:6a:b9:42:25:6f:d0:9b:8f:ca:06:
ec:6e:77:61:6b:e4:d9:ad:ea:39:25:d3:f4:cc:5d:
00:a6:e2:71:d3:e5:f0:37:8c:3e:1f:24:6c:2f:d0:
fd:8c:79:f8:eb:7c:17:2b:d8:74:0b:1a:13:78:e0:
2a:e7:f8:51:bc:2a:f2:8f:8a:b6:d3:77:f7:59:f4:
ad:2e:5c:a1:c1:7c:06:44:22:ae:81:4a:82:cf:57:
c0:69:9e:23:94:0b:a5:cd:2f:3d:25:31:80:38:99:
34:5a:33:47:f0:23:a7:20:50:c6:47:98:54:c8:4c:
70:8e:7f:ec:64:1b:ce:1a:5e:ae:44:a3:c3:eb:a0:
d1:49:32:2f:d8:ff:24:1a:60:30:7d:9b:8c:21:fa:
08:e0:56:2a:ea:7e:f9:9b:48:ef:27:73:74:f4:42:
a2:eb:82:67:77:ed:94:72:17:01:23:d1:82:ac:3d:
07:5b:36:8d:d2:54:2e:84:0d:1a:f1:24:e1:0d:25:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:6F:DB:6C:BE:CB:C3:F4:4A:D2:A0:0D:59:F4:F6:C3:8F:C5:B4
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/iudv22y-y8P0StKgDVn09sOPxbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.56.0/21
78.136.128.0/18
80.78.136.0/22
80.79.0.0/22
93.92.48.0/21
93.93.32.0/21
94.241.64.0/18
188.119.96.0/22
193.107.252.0/22
IPv6:
2001:67c:13c4::/48
2a01:9f40::/29
2a02:2428::/32
2a03:7a00::/32
2a07:cc80::/29
2a0c:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
a8:b6:09:62:0f:a0:3e:4e:9d:c4:0b:e8:1d:9b:85:f1:e7:6b:
72:2c:dd:91:3a:11:d8:f0:e2:10:f9:ac:38:c5:29:ef:d7:0a:
b8:3a:65:54:8d:39:c5:c1:84:c8:56:27:70:1a:61:fb:aa:d8:
c7:e1:8d:dc:9a:45:9d:4d:f1:ec:89:28:88:f0:b4:d2:1f:b4:
c2:5a:be:7a:83:ff:97:82:0a:18:cc:c8:82:41:f3:ac:fd:ed:
4a:3c:5d:9d:5c:49:5a:a2:7e:c2:4a:0c:c2:33:e1:70:e1:bb:
b2:89:75:ee:36:74:f8:53:da:48:76:c9:80:c1:af:f7:1b:25:
9e:95:cd:43:25:d7:fe:fd:ac:44:fd:e2:3c:cd:b2:50:b4:8b:
fc:28:2f:a4:8b:20:7e:74:81:98:e8:fb:90:4b:36:8d:24:99:
18:36:e0:21:99:a6:c8:17:1c:11:aa:95:d6:5c:3c:40:bd:09:
8e:36:46:7b:56:e6:d3:cc:0d:d0:13:73:36:e5:a3:c3:b2:36:
47:bb:1c:50:56:49:3f:24:be:19:b2:f3:49:99:9d:42:1a:59:
7a:62:97:85:2f:96:ad:1d:d3:06:0c:0d:ae:60:94:82:84:90:
b2:20:e0:b3:95:62:ed:ce:d6:4a:d7:a1:6b:b5:52:e2:a2:93:
d2:d9:46:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:07:05 2025 by rpki-client