Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/sZzOId0-MCcpYuzen4Nr9pbpCWM.roa
File: sZzOId0-MCcpYuzen4Nr9pbpCWM.roa (raw, json)
Hash identifier: uaC6M8HkP81VbJLKmwQxRrL5lIIVQEkwETGYd2tWcYo=
Subject key identifier: B1:9C:CE:21:DD:3E:30:27:29:62:EC:DE:9F:83:6B:F6:96:E9:09:63
Certificate issuer: /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial: 019423697B3B9B6722130B7DF07033CEE866
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/sZzOId0-MCcpYuzen4Nr9pbpCWM.roa
Signing time: Wed 01 Jan 2025 19:48:22 +0000
ROA not before: Wed 01 Jan 2025 19:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39756
IP address blocks: 46.102.248.0/24 maxlen: 24
89.33.207.0/24 maxlen: 24
89.36.24.0/21 maxlen: 24
89.36.30.0/24 maxlen: 24
89.41.60.0/23 maxlen: 24
89.47.247.0/24 maxlen: 24
176.223.192.0/19 maxlen: 24
176.223.224.0/20 maxlen: 24
176.223.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7b:3b:9b:67:22:13:0b:7d:f0:70:33:ce:e8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
Validity
Not Before: Jan 1 19:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b19cce21dd3e30272962ecde9f836bf696e90963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:3d:e4:ee:3d:94:95:68:16:7b:b4:d5:16:
fd:51:23:62:84:0f:62:ed:ab:a9:4a:9f:ec:c8:31:
0c:64:0e:f1:67:89:0f:8e:9b:03:61:1d:cd:f6:98:
da:0b:51:bf:6c:69:e8:7d:0c:8d:f7:c4:c5:cc:9c:
b0:ec:ab:eb:08:49:5d:d5:83:34:c3:86:69:08:fe:
81:4d:09:67:d6:0d:1f:cb:ca:9d:50:b0:3d:36:8a:
34:45:34:fd:78:f6:4a:42:c4:da:b1:d0:16:72:bd:
3b:bc:ee:b3:54:21:6d:2b:ed:00:a3:17:6a:96:bf:
10:17:47:8b:01:bc:3e:b8:6c:08:dd:56:92:35:b5:
6e:d9:10:1a:95:83:bc:b4:74:a1:98:b8:ea:f9:00:
b9:96:8f:af:64:f7:c8:79:06:34:ba:18:20:2b:99:
aa:48:2d:e0:a4:ef:8a:b2:7b:b5:5d:dd:81:7e:23:
00:f2:4e:12:12:2d:cd:02:ba:26:08:6c:6f:d8:62:
95:28:ce:61:34:85:2e:f6:54:a1:eb:ea:a5:d4:50:
57:d8:92:bf:98:9f:2f:20:1e:06:94:29:c8:b1:cc:
91:c9:27:8c:64:e6:39:a9:23:8e:41:5a:a3:fe:f6:
78:90:7d:eb:61:a8:27:6f:1f:68:e4:cf:b3:91:ff:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9C:CE:21:DD:3E:30:27:29:62:EC:DE:9F:83:6B:F6:96:E9:09:63
X509v3 Authority Key Identifier:
keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/sZzOId0-MCcpYuzen4Nr9pbpCWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.248.0/24
89.33.207.0/24
89.36.24.0/21
89.41.60.0/23
89.47.247.0/24
176.223.192.0-176.223.247.255
Signature Algorithm: sha256WithRSAEncryption
65:28:0a:25:02:2a:50:23:81:2b:2f:ef:6f:c3:d3:e5:4c:6b:
b1:d0:2c:b3:71:aa:da:80:8e:76:00:22:82:7c:70:77:cb:d3:
a0:d6:1a:93:ec:05:08:0c:0a:d5:40:cd:a3:15:0b:ef:f3:23:
4f:51:25:b8:18:ea:cc:9e:7f:08:61:41:14:6c:45:78:7f:c9:
c6:81:1a:66:f7:d0:d6:a5:6f:60:11:80:7f:ba:a3:ad:1b:f3:
ed:55:06:d6:e9:da:c4:99:6b:e6:05:32:a0:e1:1c:8a:06:55:
77:59:72:fb:2f:d5:13:9e:66:de:91:90:88:9a:42:f8:1f:6d:
14:32:74:de:48:2c:53:98:eb:7e:8e:5d:40:19:6f:8f:6d:9b:
27:f6:69:81:99:40:3d:08:fb:90:16:e3:80:d3:2a:ef:0b:b5:
aa:b1:ef:78:b3:96:7d:6b:77:a4:f3:44:5b:1b:df:88:58:cc:
63:2f:88:18:30:ab:0f:b0:20:10:84:95:e4:8d:ed:5f:7c:3e:
72:52:6f:0a:11:8d:8c:13:1b:9e:a9:fc:9a:68:c2:ab:b8:8b:
de:80:4e:0e:6a:2d:40:6e:cb:9e:10:d7:9b:da:79:ec:f3:c3:
a3:99:ec:03:98:7d:47:5c:91:ad:cf:bc:2a:56:bd:a9:a9:73:
fd:a9:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:20 2025 by rpki-client