Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/i1vwA0ap7h2LfjZQlcwOj9UjT64.roa
File: i1vwA0ap7h2LfjZQlcwOj9UjT64.roa (raw, json)
Hash identifier: d4pShBAtU/dXwIq4JU/1943EzupOUJvPT19il982RrU=
Subject key identifier: 8B:5B:F0:03:46:A9:EE:1D:8B:7E:36:50:95:CC:0E:8F:D5:23:4F:AE
Certificate issuer: /CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Certificate serial: 018364A1CCAB9EFBC2CF1559413E58EC7D18
Authority key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/i1vwA0ap7h2LfjZQlcwOj9UjT64.roa
Signing time: Thu 22 Sep 2022 09:57:48 +0000
ROA not before: Thu 22 Sep 2022 09:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51185
IP address blocks: 94.124.64.0/21 maxlen: 21
94.124.67.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.53.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
2a02:2891:13::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2890::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:ff::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2890:ffff::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:1::/48 maxlen: 48
2a02:2892:36::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2891:11::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:a1:cc:ab:9e:fb:c2:cf:15:59:41:3e:58:ec:7d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Validity
Not Before: Sep 22 09:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b5bf00346a9ee1d8b7e365095cc0e8fd5234fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:48:c8:84:fd:ec:34:01:d6:3d:d6:f1:d4:bb:
c5:10:22:5d:1d:d3:95:1e:94:35:f5:45:d3:de:64:
bb:33:dc:11:4b:57:8f:4d:ff:21:f5:5a:54:ed:e4:
97:d4:ed:4e:b1:df:bd:b1:b0:c6:c9:12:06:5d:d5:
74:e3:da:9f:24:12:bb:13:3d:c8:6d:a8:ed:f5:2d:
0e:0d:da:51:fe:9b:70:ab:30:09:68:e9:e6:b2:c0:
a1:5d:70:b9:da:ce:31:a9:8f:52:c5:f7:84:dc:25:
c2:ee:cf:e6:4b:83:15:89:2e:7f:07:db:df:fd:8d:
fd:af:20:bd:78:7a:23:f7:d9:56:e9:34:86:eb:81:
79:15:3d:6b:4a:3e:a3:27:97:86:7c:39:d6:37:63:
ba:7d:48:ed:90:a9:bd:6c:55:2c:cf:19:81:95:a7:
e3:ee:ec:9b:89:d9:21:e2:c3:9b:64:df:ce:9b:28:
27:8d:42:81:25:8a:d8:84:1f:fd:1a:d8:89:34:50:
8e:31:54:22:54:dd:a5:2b:be:da:e8:0b:3b:98:61:
4c:02:56:64:53:03:a6:8c:87:3b:96:a7:8c:1b:03:
99:66:3c:60:6b:bb:34:a1:d6:2a:24:71:9a:ed:2b:
47:5b:c0:e6:e7:54:c0:0d:0d:9a:94:96:8f:1e:12:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5B:F0:03:46:A9:EE:1D:8B:7E:36:50:95:CC:0E:8F:D5:23:4F:AE
X509v3 Authority Key Identifier:
keyid:F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/i1vwA0ap7h2LfjZQlcwOj9UjT64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.64.0/21
178.248.48.0-178.248.54.255
185.45.208.0/24
185.45.210.0/24
185.187.159.0/24
IPv6:
2a02:2890::/48
2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
2a02:2891:4::/48
2a02:2891:10::/46
2a02:2891:15::/48
2a02:2891:29::/48
2a02:2891:ff::/48
2a02:2892:32::/48
2a02:2892:36::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
6e:15:6f:95:a7:1b:ee:08:9c:fd:0e:21:0a:bb:d3:0f:cd:b9:
30:70:40:21:29:cf:9f:35:2f:e2:08:57:f5:af:d9:9c:2f:dd:
68:62:bd:d3:2b:e8:26:66:b2:38:73:74:23:29:7f:ce:5e:85:
35:fb:79:27:98:cd:54:17:9d:05:1f:e4:91:b9:cf:01:c9:dc:
09:44:5c:44:c5:c7:3f:ea:92:ca:de:71:63:75:f7:d6:81:9c:
0e:9a:1e:13:04:7d:8f:ea:6a:a0:34:5c:cb:c9:6f:55:e3:5c:
d6:16:f1:cf:a0:6d:5b:a5:44:0d:ce:b0:b1:08:f0:43:49:bd:
00:38:ea:d1:14:d9:51:9d:7a:12:ac:76:cf:ef:83:d0:df:28:
0d:20:90:71:a2:64:b4:cd:80:9c:ef:46:b4:fb:59:ca:ce:0d:
c8:1c:7d:2f:aa:d0:d2:be:8d:0c:51:53:8c:2c:74:1c:45:c4:
61:38:63:5a:24:f1:62:41:eb:41:f9:95:ae:00:14:f3:87:d2:
5d:6f:b2:c1:c3:5b:a7:f5:56:49:dd:25:1c:37:cf:28:a6:a6:
0d:7e:e8:13:d4:8f:29:24:d7:0d:45:e8:da:88:1d:94:ba:75:
eb:73:50:1f:c8:95:f8:1c:bb:d8:51:00:6d:da:8a:ee:16:98:
52:e1:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:44 2025 by rpki-client