Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa
File: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (raw, json)
Hash identifier: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=
Subject key identifier: 00:9F:01:70:46:3E:0D:D5:DC:4E:6C:4C:75:81:C2:98:8D:D1:C6:85
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 019420D616787E97180FD4DDEC71BB41CB1B
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 185.149.156.0/22 maxlen: 24
194.45.22.0/24 maxlen: 24
212.86.192.0/19 maxlen: 24
2a00:1970::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:16:78:7e:97:18:0f:d4:dd:ec:71:bb:41:cb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=009f0170463e0dd5dc4e6c4c7581c2988dd1c685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:af:9b:d9:3d:b0:f1:eb:0f:65:c1:2c:4d:
a5:46:f0:fa:ba:81:39:eb:7e:07:fd:99:b8:68:82:
c0:45:63:88:08:c3:44:11:32:3a:1f:a3:4f:4f:4d:
3b:82:d8:93:54:46:49:ef:5e:0a:12:b5:4c:19:5a:
49:c8:70:b8:a8:8e:96:41:21:c8:ca:4f:11:d8:9d:
d7:d6:06:db:0a:75:f6:6e:16:fc:7f:55:cc:f8:f6:
c7:b8:3c:90:a2:7d:ea:f4:8d:42:da:66:35:6a:91:
71:34:12:24:d2:65:bf:de:8b:de:35:be:f2:e8:f5:
0e:0f:99:a2:f8:c5:72:fa:4e:eb:f8:c9:66:ba:20:
42:cb:f9:3a:5c:7f:5b:e4:7b:e3:d8:e5:9e:d1:29:
1a:08:15:44:a7:17:53:c6:35:53:a8:d4:20:54:62:
a8:9e:13:c2:46:08:b0:db:bf:63:98:c2:63:39:ed:
0f:2b:4d:67:77:67:97:e5:17:30:3c:81:ed:48:85:
06:d7:11:f1:c7:93:c6:e6:5c:c1:67:36:df:26:5d:
73:f2:cb:44:87:5f:53:a9:bd:db:88:86:0f:4b:a5:
ef:ad:23:73:2a:f8:f5:f1:a6:88:f5:f2:16:0f:d9:
62:d3:61:7d:6a:c9:85:99:f9:22:7d:f6:61:be:52:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:01:70:46:3E:0D:D5:DC:4E:6C:4C:75:81:C2:98:8D:D1:C6:85
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.156.0/22
194.45.22.0/24
212.86.192.0/19
IPv6:
2a00:1970::/32
Signature Algorithm: sha256WithRSAEncryption
c2:10:45:28:76:39:2e:35:ac:29:94:13:73:4c:a8:77:cd:3a:
b3:db:a7:c7:f7:2d:b8:e0:92:b6:74:b8:36:8e:d1:1e:29:b6:
dc:e6:77:da:71:b3:8f:cd:8c:f1:4a:a8:c6:7a:c0:77:7b:fc:
2b:84:2f:5b:db:02:7e:ba:0d:6f:fa:81:b6:a5:48:1d:e1:b7:
05:b2:d9:b3:8d:fb:83:fa:b8:9d:ee:43:dc:53:c1:bf:d4:01:
ce:0b:7e:af:5c:ba:99:ad:a1:2c:38:0d:86:4d:06:72:81:bb:
11:50:07:1b:e6:9e:bf:54:ea:f0:c0:6c:1e:65:82:5c:2a:63:
67:69:59:0a:7f:a4:fb:24:36:37:15:60:9d:d9:54:1d:c8:2d:
61:f5:ae:79:a1:f0:2b:0d:fa:f1:7f:63:1f:f8:97:9f:56:ba:
cd:63:4c:f7:9b:f9:c0:27:6a:ef:27:d2:19:bc:a6:80:4b:2c:
7e:0f:7d:17:c6:cc:3c:ed:06:dc:80:40:40:2d:5d:21:4b:fc:
9f:88:ab:b9:13:73:4e:37:9c:3b:86:5a:57:93:23:51:e6:52:
86:52:2a:d7:1f:9b:17:df:6e:7a:c1:6e:93:85:9e:87:9e:fe:
6f:de:68:27:76:77:19:75:73:57:a0:b3:f8:78:ce:49:e2:44:
ea:88:b9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:46 2025 by rpki-client