Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa
File: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (raw, json)
Hash identifier: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=
Subject key identifier: 68:16:B6:32:37:4F:1F:B7:03:FF:31:A8:C9:CE:DA:57:74:68:00:E1
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 01942144184E6BEF4728543EE7473071897F
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48544
IP address blocks: 79.143.112.0/22 maxlen: 24
79.143.116.0/24 maxlen: 24
79.143.117.0/24 maxlen: 24
79.143.118.0/24 maxlen: 24
79.143.119.0/24 maxlen: 24
79.143.120.0/23 maxlen: 24
79.143.122.0/23 maxlen: 24
89.189.48.0/22 maxlen: 24
92.245.170.0/23 maxlen: 24
92.245.172.0/23 maxlen: 24
92.245.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:18:4e:6b:ef:47:28:54:3e:e7:47:30:71:89:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6816b632374f1fb703ff31a8c9ceda57746800e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:89:35:db:34:07:6b:0f:3d:9a:13:cd:38:
23:e7:a3:08:be:32:2e:2f:db:a7:71:fd:36:2b:a3:
94:19:bb:c7:64:db:3a:66:85:bd:ec:d0:d7:6b:32:
ae:94:6a:99:59:97:c4:9f:d5:a9:97:a5:2a:af:d4:
e7:a1:d4:0b:76:1b:44:da:b2:93:0f:50:84:24:7a:
58:ea:15:45:b4:ba:cf:97:cc:6a:6b:c3:75:7b:27:
92:12:28:1d:24:14:f2:f8:fa:1d:3c:fc:7a:92:8b:
8e:a7:25:94:1e:c4:fd:02:01:be:c4:d7:d9:38:31:
b5:ff:47:1e:46:5b:ee:da:8f:82:1c:7d:5d:47:d7:
70:21:81:25:e6:85:2e:93:53:da:db:00:f9:5c:5a:
5e:09:a5:67:9d:19:cd:79:df:f1:7d:a8:bf:58:a5:
40:ce:4d:c5:45:6c:50:0e:3a:59:f3:06:34:8f:5f:
dc:3c:90:bb:55:d7:0f:8e:b6:6d:21:1a:e4:c8:ec:
36:dc:53:fc:9e:1b:da:b5:2a:90:fa:a1:fd:7f:92:
69:0a:fe:75:65:f2:24:93:4d:a7:02:84:66:3f:b0:
b1:98:fc:e9:3e:cf:be:ad:04:4d:b6:f0:56:5a:e3:
e2:cf:03:04:5f:eb:e6:b9:38:7f:b4:ae:19:ad:2a:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:B6:32:37:4F:1F:B7:03:FF:31:A8:C9:CE:DA:57:74:68:00:E1
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.112.0-79.143.123.255
89.189.48.0/22
92.245.170.0-92.245.175.255
Signature Algorithm: sha256WithRSAEncryption
02:de:93:25:4c:fd:97:f6:19:b3:6a:f2:ea:46:6e:cd:2d:cb:
d1:df:2f:4e:c3:1c:3d:5d:7b:c3:6f:88:41:d2:3a:26:03:fc:
bd:a6:96:8b:dd:2f:06:05:3b:da:a4:f8:46:f5:61:b7:f9:1f:
c3:1d:f6:73:3f:02:74:f9:d8:90:a2:c8:a3:e6:55:4e:4c:3b:
e9:ed:44:5e:a4:93:10:b6:0d:3e:35:d2:7b:43:22:35:43:a1:
6e:32:c2:af:90:06:10:54:f0:8b:31:46:9c:82:7d:a4:72:15:
80:0b:1c:27:24:e7:a2:4e:cd:a1:e9:74:81:55:5d:34:b1:63:
04:68:20:c7:06:fb:94:f5:23:c4:62:83:5c:2e:55:98:3f:7d:
64:74:53:60:46:fa:ce:a2:98:ee:76:6a:16:fe:11:61:4a:27:
f9:37:a0:89:cd:e4:a0:d2:8c:ea:8b:98:a1:43:0e:02:a1:ad:
fb:11:f0:d0:c6:01:ce:5d:c3:e0:3e:45:4b:5c:46:31:8c:34:
5f:3e:b8:12:5c:c5:ae:e6:56:aa:42:93:52:dc:37:14:c4:db:
93:86:d4:8f:c1:f5:2c:1c:fa:25:0e:6e:af:e1:70:9f:8f:31:
01:52:5c:22:86:85:de:4f:4e:d0:ca:d1:73:f3:3f:2c:af:5e:
5a:99:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:35 2025 by rpki-client