Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/fOsTWD5Ar1YZxa1P3Pq5mxy5-1c.roa
File: fOsTWD5Ar1YZxa1P3Pq5mxy5-1c.roa (raw, json)
Hash identifier: Dkn0j1n45E5x1EWMxBbv2nQa8t9BDN0AoTeGlR/FbFY=
Subject key identifier: 7C:EB:13:58:3E:40:AF:56:19:C5:AD:4F:DC:FA:B9:9B:1C:B9:FB:57
Certificate issuer: /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial: 01942143B5A683D631D9CE3FDB334BEAF33B
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/fOsTWD5Ar1YZxa1P3Pq5mxy5-1c.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28918
IP address blocks: 185.55.232.0/22 maxlen: 24
188.95.0.0/21 maxlen: 24
193.28.96.0/21 maxlen: 24
194.59.172.0/22 maxlen: 24
194.59.172.0/24 maxlen: 24
194.147.133.0/24 maxlen: 24
2a00:b400::/29 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b5:a6:83:d6:31:d9:ce:3f:db:33:4b:ea:f3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ceb13583e40af5619c5ad4fdcfab99b1cb9fb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:9c:86:75:37:e6:02:2f:66:55:fe:b1:48:
54:fc:f2:8e:42:bb:3b:8f:20:bd:02:f4:91:bd:76:
d7:5f:9f:d9:3d:e3:41:9d:62:99:7b:8f:99:42:40:
16:b0:26:63:6a:50:97:73:bd:95:af:d5:22:7f:75:
82:24:c6:1d:84:c1:9f:b6:d1:2e:2b:bc:9c:56:69:
4f:cd:0b:bf:85:29:41:93:82:a7:3f:2b:3a:6d:c1:
76:9f:d6:41:da:72:1d:87:06:c0:4e:af:1c:5c:83:
ac:f4:68:72:e5:54:0b:01:ef:37:1b:29:8f:fb:92:
7f:a1:12:4f:51:62:ac:3b:54:bc:78:6d:c4:4c:a1:
af:88:90:35:2a:1c:eb:76:1d:b8:ec:4b:76:f2:11:
4e:d9:4b:f4:d1:56:71:7b:28:96:10:f6:4a:10:93:
3a:bc:7e:9c:b0:6f:c9:03:60:68:be:bb:2c:67:62:
2a:c8:0a:83:83:79:c6:ba:b6:c7:81:4d:78:2d:79:
2e:ef:ca:46:f9:b8:94:bc:8a:55:f3:a5:be:36:a8:
62:0c:bc:16:94:4a:8c:df:e7:e9:de:54:f3:69:c4:
a3:c6:e0:d8:48:99:8b:5d:88:27:4d:ca:d7:c3:ec:
42:03:f8:53:70:04:ab:eb:59:b9:ec:a6:01:aa:f7:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EB:13:58:3E:40:AF:56:19:C5:AD:4F:DC:FA:B9:9B:1C:B9:FB:57
X509v3 Authority Key Identifier:
keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/fOsTWD5Ar1YZxa1P3Pq5mxy5-1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.232.0/22
188.95.0.0/21
193.28.96.0/21
194.59.172.0/22
194.147.133.0/24
IPv6:
2a00:b400::/29
Signature Algorithm: sha256WithRSAEncryption
14:91:bf:c1:0b:79:a5:2b:1a:9e:90:cc:df:c1:fc:44:49:18:
45:d0:f0:9e:dd:97:0d:e8:d5:c5:f6:b6:69:86:4b:48:8f:58:
70:1a:dc:74:70:eb:ec:1e:9d:98:58:53:58:b6:4c:87:ce:52:
a4:20:57:34:b0:83:0e:43:81:45:55:bb:fd:05:a9:b3:bf:3a:
c7:68:c9:cc:f4:e3:58:35:45:46:42:6e:fc:8e:dd:1b:bb:55:
12:96:ce:67:4f:d7:c1:d0:d6:9d:18:fd:0c:7c:ff:8b:2d:f1:
4a:1c:00:53:74:a4:cd:53:6b:08:b0:82:c4:bd:bd:64:2c:7b:
b5:2d:d6:0e:24:01:7b:59:d9:d6:6e:16:bd:63:15:68:32:c5:
23:58:45:b4:91:a1:17:9c:6e:5b:0a:4a:4f:31:f7:b7:5d:43:
d9:2f:a3:88:5a:69:87:87:62:c5:46:66:8b:3b:21:bd:bf:b6:
36:23:8a:d8:8d:3c:3e:b0:e7:56:fa:54:bb:5a:98:8e:83:6e:
a4:31:0f:3c:c6:c4:7e:17:9c:6a:57:84:38:f2:4c:f1:00:3d:
eb:96:ed:7c:a3:48:20:02:84:6b:3b:99:49:59:69:53:5a:73:
79:e1:70:3b:c0:62:1b:07:9a:bd:5f:85:2d:d5:e4:5b:19:db:
7e:42:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:17 2025 by rpki-client