Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/V_r_ROOdvw6x3g5Jz-742T3rIbU.roa
File: V_r_ROOdvw6x3g5Jz-742T3rIbU.roa (raw, json)
Hash identifier: S0q7P5LnXINS1vQh7LQXUQWUqtUOHV0qMrb+2gHbmYs=
Subject key identifier: 57:FA:FF:44:E3:9D:BF:0E:B1:DE:0E:49:CF:EE:F8:D9:3D:EB:21:B5
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 0194258E8C0619A65DDC966DFCD36930E66C
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/V_r_ROOdvw6x3g5Jz-742T3rIbU.roa
Signing time: Thu 02 Jan 2025 05:48:06 +0000
ROA not before: Thu 02 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 185.44.244.0/22 maxlen: 22
185.225.220.0/22 maxlen: 22
185.240.112.0/22 maxlen: 22
2a01:77e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:8c:06:19:a6:5d:dc:96:6d:fc:d3:69:30:e6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 2 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57faff44e39dbf0eb1de0e49cfeef8d93deb21b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:f6:e4:1f:bf:7b:c9:53:cd:49:f8:c7:84:
f5:dc:9b:87:58:7c:21:0e:89:e4:d7:7c:3b:8a:73:
b9:2d:85:a1:55:b5:34:01:c7:e7:1a:8c:04:c6:7e:
19:ba:76:c0:be:71:f3:67:a4:84:05:d6:51:96:c8:
64:40:21:c0:c0:6c:b9:d6:ed:e5:76:0c:3e:9a:c8:
cd:de:c1:73:0b:14:99:d6:38:1c:bc:5c:65:e9:c3:
ec:91:d5:e8:6a:3e:a7:d1:04:f3:ab:50:6b:cc:05:
5c:8b:b9:64:e8:d9:9d:71:a7:be:95:5f:38:d1:b3:
df:f9:c3:0f:49:3b:a5:3c:02:f3:19:72:ef:7f:f5:
6b:9b:6c:37:7f:fb:36:95:88:f5:00:63:72:c7:5f:
7c:76:da:16:b3:4e:2d:a0:90:44:27:c1:27:0f:31:
ca:d0:7b:f9:99:ad:3c:b8:76:39:59:0c:2b:08:0e:
97:74:f2:25:15:0d:f6:f5:45:59:ba:d5:e2:68:7d:
70:df:d2:92:e2:fe:c7:04:bc:b8:e1:f0:c3:11:99:
d1:01:33:44:24:7e:ea:7b:19:39:b2:59:94:f1:e9:
e0:e0:07:a2:66:53:3f:91:93:16:c3:3c:68:c0:07:
b9:d9:6d:be:20:c7:1a:31:14:ce:99:df:3b:04:1f:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:FF:44:E3:9D:BF:0E:B1:DE:0E:49:CF:EE:F8:D9:3D:EB:21:B5
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/V_r_ROOdvw6x3g5Jz-742T3rIbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.244.0/22
185.225.220.0/22
185.240.112.0/22
IPv6:
2a01:77e0::/32
Signature Algorithm: sha256WithRSAEncryption
1e:71:76:75:e3:c5:34:54:fd:38:20:ab:c4:af:e9:35:9b:66:
4e:98:c3:78:62:b9:ec:3f:dc:93:6d:fe:0f:c2:75:f2:f1:eb:
ee:56:9d:46:92:40:3b:20:6c:e3:72:6e:f1:81:ce:eb:25:34:
b0:ff:e4:7e:0e:33:45:c9:5b:70:b0:db:58:a7:d0:09:01:b4:
b5:a0:f3:fa:56:9e:b3:9e:e2:35:df:86:5f:e4:05:3f:94:6e:
09:a3:c4:87:a4:c7:96:27:ff:85:1e:64:09:00:93:a0:ed:ce:
d8:af:3e:5e:e6:a0:e1:c5:18:d7:85:6d:66:56:3d:fd:57:1a:
ec:3f:74:56:80:97:e0:ea:d8:ff:c2:b2:ab:c1:6b:ca:a7:76:
7e:02:54:65:9e:84:6b:c3:bf:eb:3a:ad:38:9f:b1:79:d9:88:
e2:b5:51:46:18:32:51:b1:23:66:9a:0e:b6:57:55:63:45:09:
93:ee:25:2a:5e:b1:1d:dd:5d:b5:55:27:cd:42:31:da:02:53:
96:7c:cd:40:2e:8b:29:ba:dd:78:aa:aa:12:e7:87:7c:75:a4:
41:11:48:12:e8:2c:cc:5f:03:05:48:54:c2:e3:fa:e4:a1:8d:
0a:5f:36:a4:09:6e:53:7d:2e:8b:46:b1:d1:1b:8b:ee:ef:27:
fc:42:77:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:26:08 2025 by rpki-client