Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa
File: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (raw, json)
Hash identifier: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=
Subject key identifier: 7D:62:D5:D6:DA:9C:53:89:BB:BD:6B:00:1E:E9:C0:42:F7:0C:1D:0F
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 019424B3D2C0548D32DA773AAC0B0B02C15C
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa
Signing time: Thu 02 Jan 2025 01:49:12 +0000
ROA not before: Thu 02 Jan 2025 01:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209824
IP address blocks: 91.204.168.0/22 maxlen: 22
188.65.144.0/21 maxlen: 21
2a00:1aa0::/29 maxlen: 29
2a00:1aa0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d2:c0:54:8d:32:da:77:3a:ac:0b:0b:02:c1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d62d5d6da9c5389bbbd6b001ee9c042f70c1d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:57:1c:bf:c8:97:de:2e:22:56:0a:63:0a:
5e:1f:db:b1:96:03:63:80:1f:0f:3a:e8:fe:25:e3:
80:83:9c:f0:0a:f3:85:43:83:c2:0a:7e:eb:3b:ca:
dc:87:97:1c:cf:ee:16:13:2d:79:e1:c5:5b:df:f6:
c6:69:05:85:b5:13:3d:f3:34:f7:38:7d:7b:cd:c0:
b3:15:8b:b2:8b:5a:50:98:80:1e:30:12:52:aa:48:
f2:48:3c:24:ec:cf:47:14:64:2b:b7:23:7b:58:00:
84:ce:ac:09:9f:b1:b0:6c:63:69:a3:c1:0c:e9:0d:
19:3d:59:6b:3f:8f:d5:39:58:c1:9a:a6:21:62:93:
cf:ae:d6:c2:de:5e:a6:41:8f:4e:5d:dc:9e:41:87:
96:0a:09:0d:2d:30:df:65:3f:28:b5:cc:07:94:44:
4b:24:bc:d5:ad:a7:52:8a:22:da:57:61:58:79:aa:
ef:06:ac:8d:dd:98:c8:58:47:89:7f:14:b6:c7:7a:
cd:c6:03:1e:30:70:d2:b7:66:29:0e:6b:c0:e8:94:
7a:1a:19:bd:b3:a6:47:40:b0:40:71:15:c2:8d:cf:
15:62:a0:97:fb:7b:7d:0b:a2:b0:db:80:77:15:32:
13:fe:9b:7e:78:da:03:e1:27:49:ec:71:ec:9e:2c:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:62:D5:D6:DA:9C:53:89:BB:BD:6B:00:1E:E9:C0:42:F7:0C:1D:0F
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.168.0/22
188.65.144.0/21
IPv6:
2a00:1aa0::/29
Signature Algorithm: sha256WithRSAEncryption
47:23:1f:7f:f9:3c:4c:c8:ea:fd:5d:2d:3b:78:d5:98:2f:52:
f9:06:01:aa:40:fb:f5:d4:86:5e:61:46:46:10:35:c9:73:d4:
65:ff:95:9e:a3:08:d5:d0:5f:7f:1b:41:ab:a0:2b:66:f7:23:
09:7f:e9:34:6b:02:09:ee:7f:36:55:d9:ce:f4:2f:7b:00:7f:
47:41:fb:10:d3:e9:7b:91:4a:47:b9:dc:be:dc:41:03:48:eb:
fc:69:4c:2a:f8:4f:29:d7:37:4d:2a:c8:ba:fa:4a:21:ce:dc:
95:88:4d:7c:f2:78:d1:85:5d:34:16:1c:b1:5b:a8:56:13:17:
65:33:50:a6:a8:63:d2:fe:d2:ea:c6:4e:88:f6:86:6b:15:5c:
79:7e:a1:df:8b:ce:44:11:1e:c9:d1:3b:fe:e4:fa:a0:39:db:
40:53:f2:d6:60:41:b6:38:33:75:73:41:80:39:d3:1c:9c:14:
06:b7:d5:96:23:d0:5e:12:0f:b4:b4:25:b7:c7:65:10:d7:de:
d3:b6:5d:14:55:b5:22:87:d2:47:97:70:23:33:5f:f2:de:4a:
d7:b7:e5:dc:b0:53:2f:fd:d2:11:a1:b9:10:f7:fb:12:a6:d2:
0b:d1:8a:0c:4b:6a:d2:a6:5e:eb:df:c6:fc:e7:68:7d:03:fb:
c7:9f:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:25:46 2025 by rpki-client