Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/p42tVKRgtW90NYVe4yV4TVcbL8E.roa
File: p42tVKRgtW90NYVe4yV4TVcbL8E.roa (raw, json)
Hash identifier: Fnu2rBchgcLJYjfD7pLzHkdsd+iSS8drEcgmn9sA27E=
Subject key identifier: A7:8D:AD:54:A4:60:B5:6F:74:35:85:5E:E3:25:78:4D:57:1B:2F:C1
Certificate issuer: /CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Certificate serial: 018CC349511F58EC37C875B3F064BAD82A06
Authority key identifier: C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/p42tVKRgtW90NYVe4yV4TVcbL8E.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 185.39.216.0/22 maxlen: 24
95.181.220.0/22 maxlen: 24
2a04:800::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:51:1f:58:ec:37:c8:75:b3:f0:64:ba:d8:2a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a78dad54a460b56f7435855ee325784d571b2fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:0d:ac:ef:81:a6:8f:d9:48:6d:4e:76:2c:
76:78:ab:3a:88:0d:27:b9:95:ab:22:1d:46:17:8d:
71:33:8c:8b:99:82:e3:c5:36:6a:88:49:79:f9:6a:
6c:b8:7d:51:71:f6:b0:83:af:5d:97:21:98:38:2f:
15:a9:27:b7:68:0f:cb:61:5a:1f:25:60:ec:41:9f:
17:e5:f4:a2:01:5b:e0:30:9d:e1:49:ae:75:e2:30:
9f:67:bd:df:98:c6:22:4d:8d:3e:5c:c7:8f:20:f6:
23:c4:4a:e3:5f:78:c9:63:89:81:0a:80:5c:94:24:
77:34:4c:6e:ad:ad:7c:68:f5:c4:b9:b9:70:01:e6:
17:ea:45:3f:56:78:60:74:69:13:da:59:f1:58:ab:
45:79:4c:d9:73:78:bc:92:68:c8:44:8c:7f:19:86:
5e:f5:74:77:c0:e3:fe:18:7f:82:db:ce:4a:fa:fc:
cc:96:30:84:cd:5a:01:e5:9d:42:2b:06:a5:14:bd:
d4:31:e2:de:d7:7a:40:01:97:a7:e2:0d:f0:2d:75:
a8:cb:bf:1a:4c:f7:b9:8b:ac:7b:54:88:ea:9d:69:
85:a4:f4:ac:67:6f:32:6c:c2:63:9d:5f:5f:61:24:
f2:aa:f7:9d:db:85:27:05:9f:27:66:b5:a7:d1:1a:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8D:AD:54:A4:60:B5:6F:74:35:85:5E:E3:25:78:4D:57:1B:2F:C1
X509v3 Authority Key Identifier:
keyid:C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/p42tVKRgtW90NYVe4yV4TVcbL8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/xT_rKsYPoxP5pzAOTF7jO0Oog0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.220.0/22
185.39.216.0/22
IPv6:
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
7b:bf:1f:11:77:6b:1a:73:ca:1f:76:9a:b6:d6:00:80:c8:1a:
99:81:d0:40:e4:86:75:39:9b:62:63:d4:b3:26:9f:d2:40:6f:
0a:1d:43:25:1d:92:ff:04:ec:b5:fa:db:5f:3d:00:56:07:d2:
75:12:a8:8e:4f:cf:24:30:f5:c7:ab:62:7c:a0:9c:56:08:6a:
c1:0e:17:48:99:e5:46:04:6c:bb:3e:d7:60:ec:da:5f:b5:80:
30:c6:06:2e:ef:5e:a3:43:7d:ba:12:7e:4b:a5:8f:1d:a2:ac:
2e:2c:bf:10:cf:59:6b:6f:fa:e8:8d:cd:47:1f:1f:7d:72:47:
40:7c:41:dc:c6:6d:c6:c2:1a:34:d7:fb:79:d3:ed:00:69:2b:
3b:28:06:8a:5a:f3:a5:e2:17:84:55:93:3e:79:a8:c0:3b:83:
87:b0:5b:d1:33:89:fc:a7:95:d5:61:c3:eb:82:04:7f:ac:8c:
8d:43:d0:9c:82:88:10:66:26:59:2f:25:a4:72:11:45:d3:cc:
ec:89:08:68:62:51:81:0c:d7:f7:3e:7b:95:ad:bd:18:b4:a2:
a7:28:ff:d2:50:d2:11:a0:ea:8e:8c:25:b1:52:92:aa:6f:87:
40:ce:df:7e:74:50:6f:b7:91:8b:43:f6:ef:32:52:3f:c3:9a:
90:b4:a3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:53 2025 by rpki-client