Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/rPbyx3eagwVe_OLgsm2HXO39flc.roa
File: rPbyx3eagwVe_OLgsm2HXO39flc.roa (raw, json)
Hash identifier: +A/qYPHq/9G5UEl5XmiqFSBixSHmc8xUD+k7eyiMoCc=
Subject key identifier: AC:F6:F2:C7:77:9A:83:05:5E:FC:E2:E0:B2:6D:87:5C:ED:FD:7E:57
Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial: 0194228E418038CA76557161878FD91F9A75
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/rPbyx3eagwVe_OLgsm2HXO39flc.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35717
IP address blocks: 185.12.48.0/22 maxlen: 24
185.114.4.0/22 maxlen: 24
185.128.236.0/22 maxlen: 24
185.129.44.0/22 maxlen: 24
185.199.40.0/22 maxlen: 24
193.36.45.0/24 maxlen: 24
195.137.184.0/24 maxlen: 24
195.200.195.0/24 maxlen: 24
2a03:7fc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:41:80:38:ca:76:55:71:61:87:8f:d9:1f:9a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acf6f2c7779a83055efce2e0b26d875cedfd7e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:0a:58:d8:98:1c:82:50:a1:5e:cb:29:67:
82:37:88:78:2e:54:83:d6:42:ab:54:2d:66:e0:85:
5b:8d:71:61:16:df:5b:8b:7d:cc:9e:48:e1:95:05:
6f:f2:0f:8c:ac:46:a2:e5:c3:b8:2b:50:90:e8:84:
87:10:90:99:bb:c3:72:50:c9:bd:c9:c8:22:a2:db:
4e:28:87:09:9c:de:e6:c0:e3:5c:45:72:1e:49:b1:
1a:ab:12:11:aa:b2:b0:80:62:54:4f:17:d3:16:2e:
00:9e:7e:af:91:cd:e3:85:66:56:67:99:06:2f:3b:
7a:ef:e1:0d:35:65:fa:c0:b4:5f:0e:00:8f:e0:96:
37:c1:31:eb:8e:9b:7a:b1:ef:d6:f8:80:03:5a:4f:
8d:eb:db:ac:d8:cf:b2:27:0e:55:96:8d:bf:21:49:
0a:0d:d9:fb:32:a2:5c:03:34:20:48:02:07:c8:34:
ba:f6:bc:99:0b:49:cb:64:ce:8f:d9:c0:52:a5:93:
c1:78:3c:ad:ed:8f:56:93:92:a0:31:c4:f3:f6:4c:
b7:a1:fd:13:1d:0b:00:69:3c:7c:d1:8d:4b:34:a7:
e9:42:f0:3a:dc:4e:6d:86:90:71:ec:a0:d2:bf:50:
05:1a:d6:7c:9e:29:fa:27:4e:71:8a:6e:d5:a7:c4:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:F2:C7:77:9A:83:05:5E:FC:E2:E0:B2:6D:87:5C:ED:FD:7E:57
X509v3 Authority Key Identifier:
keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/rPbyx3eagwVe_OLgsm2HXO39flc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.48.0/22
185.114.4.0/22
185.128.236.0/22
185.129.44.0/22
185.199.40.0/22
193.36.45.0/24
195.137.184.0/24
195.200.195.0/24
IPv6:
2a03:7fc0::/32
Signature Algorithm: sha256WithRSAEncryption
54:f0:01:ba:ce:d1:44:a8:38:f2:14:3b:27:f6:87:4b:d0:5b:
9b:24:60:b2:79:2b:67:17:c5:39:ef:d0:f0:1b:d9:6c:a1:a9:
b4:45:5d:cb:b9:e8:f6:2b:a9:30:46:af:88:5c:62:ed:74:e4:
13:b7:70:c5:73:04:0d:59:44:95:af:91:22:f4:fc:37:f4:d7:
d2:27:7e:69:23:4f:f3:63:18:e4:11:a4:4f:a7:e4:97:cf:79:
8c:7c:fd:8a:6b:8a:16:36:b8:07:43:30:72:58:d6:7a:65:bd:
51:29:86:46:6a:92:2b:fc:cf:6d:94:87:5a:e6:4b:6f:06:93:
0a:73:6f:9d:ab:44:22:87:5a:d6:b4:ab:ac:fb:06:64:ad:44:
32:b1:25:29:88:4b:75:cb:ee:6e:e4:03:1b:02:10:9e:d9:cc:
3e:bc:51:08:57:f5:7d:4b:04:dd:25:d1:96:94:e0:f9:c9:98:
01:37:5b:ba:10:8a:5c:71:06:99:b9:7a:cc:34:ca:58:4e:e0:
97:9e:d0:2c:67:5d:ae:88:d0:bb:3e:97:f1:9b:a2:56:90:14:
1a:fb:1c:6e:42:fc:a7:6f:e2:f7:91:c4:d9:ad:28:19:82:ef:
6e:52:71:7a:cd:18:2e:e2:7e:8b:8d:66:7b:9b:fc:46:9d:ae:
0d:2c:fa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:36:34 2025 by rpki-client