Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/kSa4_sqr5-NiqBRmmF4fkyu-chg.roa
File: kSa4_sqr5-NiqBRmmF4fkyu-chg.roa (raw, json)
Hash identifier: nw6nn6yk21XAzxXJuVEoChD6KrMH42rDNZdSGxHsW0U=
Subject key identifier: 91:26:B8:FE:CA:AB:E7:E3:62:A8:14:66:98:5E:1F:93:2B:BE:72:18
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 0194266ADB38F50D8006C1BC9FF8727F2067
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/kSa4_sqr5-NiqBRmmF4fkyu-chg.roa
Signing time: Thu 02 Jan 2025 09:48:44 +0000
ROA not before: Thu 02 Jan 2025 09:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20546
IP address blocks: 80.90.0.0/19 maxlen: 24
91.236.122.0/24 maxlen: 24
185.5.80.0/24 maxlen: 24
185.5.81.0/24 maxlen: 24
185.5.82.0/24 maxlen: 24
185.5.83.0/24 maxlen: 24
2a02:cb40::/32 maxlen: 32
2a02:cb41::/32 maxlen: 32
2a02:cb42::/32 maxlen: 32
2a02:cb43::/32 maxlen: 48
2a02:cb43:e::/48 maxlen: 48
2a02:cb43:f::/48 maxlen: 48
2a02:cb43:4007::/48 maxlen: 48
2a02:cb43:4009::/48 maxlen: 48
2a02:cb44::/32 maxlen: 32
2a02:cb45::/32 maxlen: 32
2a02:cb45:101::/48 maxlen: 48
2a02:cb45:102::/48 maxlen: 48
2a02:cb45:103::/48 maxlen: 48
2a02:cb45:104::/48 maxlen: 48
2a02:cb45:105::/48 maxlen: 48
2a02:cb46::/32 maxlen: 32
2a02:cb46:0:2::/64 maxlen: 64
2a02:cb46:0:3::/64 maxlen: 64
2a02:cb46:0:4::/64 maxlen: 64
2a02:cb46:0:5::/64 maxlen: 64
2a02:cb46:0:6::/64 maxlen: 64
2a02:cb46:0:203::/64 maxlen: 64
2a02:cb46:0:204::/64 maxlen: 64
2a02:cb46:0:205::/64 maxlen: 64
2a02:cb47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:db:38:f5:0d:80:06:c1:bc:9f:f8:72:7f:20:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Jan 2 09:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9126b8fecaabe7e362a81466985e1f932bbe7218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:31:b6:98:6e:fd:48:b1:ff:c7:f8:83:65:
94:1d:fb:18:c6:ad:2f:dd:01:b0:fe:07:4d:ef:24:
63:a7:c2:5a:17:78:21:2e:92:a5:5a:7c:55:3a:17:
ae:38:a8:b1:ae:13:3f:33:fc:63:7b:d3:bc:e4:87:
10:d0:b8:f4:21:9d:a7:90:8c:57:20:41:04:cc:e9:
7c:ae:e3:4a:73:46:fd:06:74:cb:46:47:01:6f:e2:
d2:76:86:11:c3:48:14:e4:47:be:24:6d:35:1e:1d:
25:28:91:e4:79:b2:ee:0a:a6:c7:09:78:3b:78:d4:
f1:15:37:75:c8:05:30:a9:80:6a:7c:12:ad:dc:5a:
7d:a8:16:13:98:49:95:db:92:81:71:c9:fd:c3:bf:
0a:ae:49:b9:c9:fa:48:01:94:12:dd:8d:b5:0a:de:
3f:a2:da:e0:4d:40:ba:f5:46:c1:39:64:ea:52:cf:
06:1e:ad:3e:17:f3:82:0e:03:d9:d0:58:3a:ff:25:
37:c3:fb:42:f1:69:aa:a4:8b:db:c1:77:7e:6b:f6:
70:5e:23:0e:49:bc:b9:b4:55:05:3e:e6:3d:01:47:
8b:08:ed:1e:4c:57:4c:a8:e6:79:25:45:59:73:c4:
c4:65:6a:ff:db:8d:e2:c5:2c:43:f8:12:dd:47:bf:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:26:B8:FE:CA:AB:E7:E3:62:A8:14:66:98:5E:1F:93:2B:BE:72:18
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/kSa4_sqr5-NiqBRmmF4fkyu-chg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.0.0/19
91.236.122.0/24
185.5.80.0/22
IPv6:
2a02:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
43:a6:1d:eb:1e:93:18:a8:32:95:7a:0d:b2:41:b0:d7:3c:d5:
08:e5:42:e0:f2:cb:49:0f:7c:46:57:78:13:6e:d7:2b:5f:76:
74:0c:3b:84:e0:74:19:cd:f4:00:73:b4:a7:99:99:e3:93:46:
14:aa:bd:81:17:95:80:a2:fd:b0:3b:12:17:bd:fd:8b:1f:af:
8c:46:d4:c0:07:3a:0b:c3:86:4b:78:01:77:ea:3c:24:98:14:
d0:59:3d:70:83:ae:f6:0d:72:64:3a:58:bd:c7:e9:e7:3b:81:
f8:f5:a0:d4:af:6c:5e:85:06:74:ab:d1:db:af:94:9e:c0:0b:
f6:96:32:69:16:c2:65:95:f3:fe:d3:c7:16:20:1e:a1:05:e5:
15:c0:d1:fd:e5:58:bd:65:a6:d6:cc:21:69:9a:0d:45:1c:f4:
72:b9:cf:25:19:24:85:19:31:a7:4c:89:c3:2f:ce:99:19:d2:
70:13:2c:5e:9e:df:ab:44:08:be:1b:d2:ec:b1:cc:1d:3f:22:
91:3b:84:1d:a2:bd:4f:51:f3:38:cd:3f:85:96:fe:32:b7:9e:
7f:36:c8:1e:47:fa:b5:12:7b:0e:4f:f9:48:e2:a1:3b:3b:4e:
38:05:c0:ca:1b:b1:c8:42:1b:de:8a:92:e4:45:8a:c3:33:45:
d3:fb:19:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:32 2025 by rpki-client