Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/xtKHi03X1rn73LOhmyBcH9uojR8.roa
File: xtKHi03X1rn73LOhmyBcH9uojR8.roa (raw, json)
Hash identifier: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=
Subject key identifier: C6:D2:87:8B:4D:D7:D6:B9:FB:DC:B3:A1:9B:20:5C:1F:DB:A8:8D:1F
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 01941F8C093F2ECE76571A980C8B9F109323
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/xtKHi03X1rn73LOhmyBcH9uojR8.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200820
IP address blocks: 185.94.12.0/23 maxlen: 23
185.94.12.0/24 maxlen: 24
185.94.13.0/24 maxlen: 24
185.94.14.0/24 maxlen: 24
185.94.15.0/24 maxlen: 24
2a03:9fc0:1::/48 maxlen: 48
2a03:9fc0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:09:3f:2e:ce:76:57:1a:98:0c:8b:9f:10:93:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6d2878b4dd7d6b9fbdcb3a19b205c1fdba88d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:a7:06:ca:f9:d3:26:9c:e3:1e:f4:18:f2:
c4:29:46:92:b2:3c:82:18:a4:59:82:dc:b3:2b:15:
8d:fc:ed:ab:71:d1:30:38:52:05:aa:03:45:db:a8:
14:83:5a:9b:e4:7d:73:68:11:12:46:1a:be:5a:da:
1c:98:60:48:3e:19:37:ca:54:45:f9:ab:f4:f1:70:
74:96:a5:ab:2e:b7:23:08:1d:23:69:d4:0e:da:65:
90:8c:fc:7b:2f:47:7c:75:21:52:3d:4d:d3:33:c0:
ef:05:75:e1:bf:50:53:b5:79:7d:44:0e:11:66:5a:
f2:ea:ac:a7:f3:6e:30:32:04:6b:9f:bc:45:06:b6:
00:53:b3:ba:d4:88:a3:15:c1:93:ba:6c:5c:9f:bb:
5d:94:ab:15:15:30:c6:32:39:07:cd:ad:c2:bb:40:
f3:af:88:64:fb:23:f6:c9:ac:12:c2:25:41:8e:c1:
9f:97:73:d9:be:29:b3:b5:d3:db:bd:9b:cc:af:75:
cc:ab:e9:9f:43:0d:12:3a:2b:1d:43:8d:cd:ab:73:
8d:0f:50:98:07:5e:0e:2e:22:77:c0:4c:1f:39:3c:
9c:a5:e4:fe:61:f9:51:15:20:f2:40:7e:f2:71:ce:
ff:66:39:80:71:c5:a0:65:4d:91:b7:91:8e:2d:25:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D2:87:8B:4D:D7:D6:B9:FB:DC:B3:A1:9B:20:5C:1F:DB:A8:8D:1F
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/xtKHi03X1rn73LOhmyBcH9uojR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.12.0/22
IPv6:
2a03:9fc0:1::-2a03:9fc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:cb:05:4b:ee:79:b7:41:16:1d:0f:cf:d4:2f:bb:7e:fe:df:
fe:6a:bf:7b:02:5e:fa:5d:28:ab:d5:6d:f7:d9:50:10:d2:2b:
83:de:a7:06:e9:6a:91:2d:00:83:24:58:d0:a3:79:e1:5e:ca:
00:e2:e6:29:29:14:35:72:61:ab:88:ce:72:8a:ac:a2:27:69:
44:46:27:fd:51:a6:e4:0e:20:24:9d:92:9c:a0:98:84:59:19:
e2:02:ee:f4:29:db:98:ec:d4:1f:3a:99:ca:50:3e:19:6b:65:
c5:65:39:2f:2d:b6:30:ae:b0:14:db:b6:15:1d:eb:02:d8:df:
56:f9:2a:a0:f1:50:51:87:70:62:9c:97:9a:49:c3:00:ed:fc:
a8:81:42:1e:cb:17:cb:a2:aa:9b:95:75:40:b3:f0:ae:97:c2:
2e:bb:b6:ce:1f:5e:b3:a8:8f:20:40:30:70:e0:a6:59:be:50:
4c:6b:02:92:74:20:2e:fd:bf:30:ec:37:62:2d:01:ef:13:1f:
93:d1:4e:48:d7:e4:de:d2:7d:58:0f:92:bd:00:2a:11:53:8b:
28:fe:a7:26:eb:69:5a:0f:fb:95:86:77:d2:3d:6c:b1:25:30:
b9:db:06:81:06:02:6d:70:61:14:a0:41:05:62:cb:b1:94:06:
9c:4b:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:38 2025 by rpki-client