Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/gT139MdjTKkXBtXTTh4QCsCQM_A.roa
File: gT139MdjTKkXBtXTTh4QCsCQM_A.roa (raw, json)
Hash identifier: ma+CSyVrdpRSsHK2XWLXIpfdxYPu0cR6X+BYAQxf8ig=
Subject key identifier: 81:3D:77:F4:C7:63:4C:A9:17:06:D5:D3:4E:1E:10:0A:C0:90:33:F0
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 0587D538
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/gT139MdjTKkXBtXTTh4QCsCQM_A.roa
Signing time: Sat 01 Jan 2022 04:02:09 +0000
ROA not before: Sat 01 Jan 2022 04:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206920
IP address blocks: 185.56.100.0/22 maxlen: 24
145.255.56.0/21 maxlen: 24
94.126.0.0/21 maxlen: 24
82.134.128.0/18 maxlen: 18
2a03:fb80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92788024 (0x587d538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Jan 1 04:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=813d77f4c7634ca91706d5d34e1e100ac09033f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:3c:64:53:4c:35:de:f5:ee:9f:6b:f7:56:
61:a3:e6:4a:6f:49:07:c5:17:77:34:77:be:15:58:
b5:30:a3:5b:d0:8f:13:d4:6c:a3:67:3c:f0:fd:e0:
71:9b:64:e9:70:2a:69:45:c0:ef:f6:39:6e:da:95:
ff:18:bd:a5:a3:07:b2:93:93:24:6a:e8:08:c5:e5:
af:0c:bd:5a:d3:ca:ba:38:e1:ed:f2:f8:a0:25:94:
9f:9f:9c:91:ef:3f:99:1d:f9:05:56:c8:a5:e9:53:
ad:18:ea:31:43:f0:f9:fc:0c:71:73:02:e2:3d:3d:
ce:be:69:65:38:64:1d:c3:ed:5f:45:d1:eb:5a:ca:
75:a8:50:b1:00:94:37:06:63:b9:cd:16:c6:b1:7f:
c1:bb:65:b9:74:ee:51:71:93:e3:b0:cd:f1:9c:28:
10:97:15:8f:4d:c4:f2:2a:78:35:09:0b:89:d1:f4:
7e:1f:de:b2:b6:05:07:14:04:d0:67:08:40:50:ed:
91:b6:88:cc:71:f8:30:08:c1:6e:dc:05:6d:ba:81:
5c:48:2a:7b:9e:f9:15:f4:eb:ce:b0:18:63:68:51:
b4:cb:7c:51:df:55:0f:b9:51:47:c2:7a:f7:84:66:
70:a5:c8:d0:59:80:8b:0b:1f:2a:8f:09:a8:de:3e:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3D:77:F4:C7:63:4C:A9:17:06:D5:D3:4E:1E:10:0A:C0:90:33:F0
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/gT139MdjTKkXBtXTTh4QCsCQM_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.134.128.0/18
94.126.0.0/21
145.255.56.0/21
185.56.100.0/22
IPv6:
2a03:fb80::/32
Signature Algorithm: sha256WithRSAEncryption
17:0f:62:5d:36:75:20:46:19:e4:26:f9:af:41:e2:31:94:ff:
a7:35:8f:be:01:8f:41:7e:2e:3c:91:38:a8:88:df:76:cd:14:
ee:99:d4:ba:1f:b5:67:b8:54:80:b9:c2:e1:1d:b6:6d:21:f5:
74:37:2e:15:c9:ca:a7:37:91:01:35:30:f0:78:a4:a2:48:4f:
e6:5c:fb:45:30:aa:8e:c9:b2:d8:e0:b4:55:d2:23:4c:9b:b4:
03:0e:82:56:4f:58:12:27:0f:09:2b:58:f4:4d:ed:1d:93:9e:
83:b5:72:4f:ad:cc:9e:68:3b:9e:ce:94:bb:79:db:fb:cf:82:
7c:81:7b:54:37:fd:1e:f6:01:d4:1a:60:3a:e8:62:84:c0:dd:
f1:1c:f7:f8:f9:72:46:94:37:04:e8:42:1b:3c:f5:b5:a8:0f:
54:97:20:c4:97:b2:6c:d8:21:5b:17:b5:b5:0c:e7:7b:66:e4:
53:08:3f:a8:9b:81:7a:5d:12:e1:cd:5d:ad:cd:87:66:47:c6:
36:28:48:38:e0:d9:2d:93:ba:0c:6e:f5:28:e2:33:64:e6:53:
ef:fc:b5:86:2e:69:b5:f1:13:90:47:6e:ce:97:cd:59:c1:f6:
43:83:69:1b:25:1b:99:b4:4d:36:11:bd:b8:8a:73:ed:2f:ef:
37:d5:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:37 2025 by rpki-client