Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/foffFzsX_C0XZVackxzc9TT3Ql0.roa
File: foffFzsX_C0XZVackxzc9TT3Ql0.roa (raw, json)
Hash identifier: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=
Subject key identifier: 7E:87:DF:17:3B:17:FC:2D:17:65:56:9C:93:1C:DC:F5:34:F7:42:5D
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 0194221FF5E5D52ADCF060710750ABD9FB94
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/foffFzsX_C0XZVackxzc9TT3Ql0.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15744
IP address blocks: 83.230.0.0/18 maxlen: 18
83.230.80.0/20 maxlen: 20
195.82.160.0/19 maxlen: 19
212.106.128.0/19 maxlen: 19
212.106.160.0/20 maxlen: 20
213.227.64.0/20 maxlen: 20
2a01:1df::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f5:e5:d5:2a:dc:f0:60:71:07:50:ab:d9:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e87df173b17fc2d1765569c931cdcf534f7425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:40:78:40:a0:2b:d7:46:be:ae:4a:6f:1e:
14:be:0d:d3:d3:c9:3a:14:21:38:e2:b1:f4:5b:ab:
87:ca:21:21:1f:f5:d8:74:f7:6d:13:f8:7f:5c:c0:
da:46:e7:13:00:7f:2d:47:6f:2e:64:3a:3b:ed:8d:
bb:1b:4e:e1:ca:70:d1:78:cc:9a:60:c7:35:57:e2:
51:32:07:4a:f8:8c:71:0b:ce:71:57:22:a3:c6:da:
a8:6c:e8:e6:ce:d5:80:4b:7f:b3:b6:c0:81:09:05:
ff:2b:aa:33:b0:d9:37:93:c9:23:74:4c:35:c5:32:
b7:b8:25:2a:a9:ad:9b:18:b5:06:81:1e:23:ce:3e:
8a:1b:a7:3c:d9:32:fb:bf:d3:42:66:1e:0e:4f:ef:
d0:5a:e5:5f:ea:0b:3a:bb:67:ee:e8:a3:04:7d:50:
a5:f5:76:25:0e:bd:3c:81:68:29:6c:8e:71:ec:59:
23:31:33:7e:57:c6:98:27:9b:e4:c1:3c:f7:10:13:
94:2d:ce:89:70:21:65:bc:a1:3d:93:a6:03:7f:24:
63:1a:8d:81:6c:d8:f0:eb:84:df:70:02:e4:85:9e:
0f:1f:c6:92:e9:a8:ae:c5:40:11:a4:10:24:2d:2c:
2f:0b:0a:00:1d:13:cc:7f:90:be:23:6c:63:e9:b6:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:87:DF:17:3B:17:FC:2D:17:65:56:9C:93:1C:DC:F5:34:F7:42:5D
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/foffFzsX_C0XZVackxzc9TT3Ql0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.0.0/18
83.230.80.0/20
195.82.160.0/19
212.106.128.0-212.106.175.255
213.227.64.0/20
IPv6:
2a01:1df::/32
Signature Algorithm: sha256WithRSAEncryption
78:d9:2e:94:fa:ce:1c:74:41:cc:ea:41:48:81:40:f0:a5:6d:
99:b7:9a:f8:b2:1c:82:0e:8a:30:af:d3:08:57:31:d6:c1:65:
e3:8d:1e:32:6e:f2:f1:72:81:d8:35:3f:d5:17:f8:3b:f4:34:
33:45:f3:35:07:63:9e:a9:7a:e6:b1:0e:9e:98:2e:9b:08:a8:
7f:39:8f:0f:a0:09:ef:8b:f0:5a:fe:d6:fb:55:8f:d0:91:c1:
b1:ba:f4:b7:fa:e7:5b:c8:3e:9f:86:a6:e0:01:12:f3:87:08:
28:92:fd:38:b0:fe:a2:2e:64:73:a5:54:ba:83:6a:40:9a:f5:
e3:a9:25:b2:74:4f:41:24:40:49:a4:fc:9d:55:84:f3:1f:76:
43:15:37:46:35:b1:73:04:b3:3d:7f:4a:d2:0f:55:fa:ff:51:
80:dd:e5:05:e3:9e:97:18:16:8a:89:4a:6d:b7:fe:43:f0:67:
fe:7f:1e:c8:32:b0:16:b9:bb:e4:44:3f:56:53:6f:ec:24:b0:
6e:a9:d0:2a:0b:62:f3:51:ac:5e:e1:97:4b:ee:c6:02:09:a3:
5c:6c:07:d5:6d:a7:45:b4:b8:b6:f0:ad:75:67:48:a5:d2:f8:
26:ef:f3:ad:f0:72:05:77:92:a1:e5:58:3e:ea:be:6b:46:8f:
3c:09:a2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:45 2025 by rpki-client