Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qaT5w2b7ivGpc7DfJd9a4XIHtfE.roa
File: qaT5w2b7ivGpc7DfJd9a4XIHtfE.roa (raw, json)
Hash identifier: iYhQrIfqHQl82vF1xesiak2RmpTZjC3ie8ygmXQxbMo=
Subject key identifier: A9:A4:F9:C3:66:FB:8A:F1:A9:73:B0:DF:25:DF:5A:E1:72:07:B5:F1
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 1AF7EBA9
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qaT5w2b7ivGpc7DfJd9a4XIHtfE.roa
Signing time: Sat 01 Jan 2022 13:05:40 +0000
ROA not before: Sat 01 Jan 2022 13:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9003
IP address blocks: 195.7.96.0/19 maxlen: 19
80.70.32.0/20 maxlen: 20
91.151.112.0/20 maxlen: 20
141.170.216.0/21 maxlen: 21
213.144.192.0/19 maxlen: 19
212.39.128.0/19 maxlen: 19
84.55.128.0/18 maxlen: 18
79.174.192.0/18 maxlen: 18
46.35.0.0/19 maxlen: 19
78.155.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452455337 (0x1af7eba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 13:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9a4f9c366fb8af1a973b0df25df5ae17207b5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:a4:49:1c:23:82:dc:3d:4e:14:dd:9b:7d:
36:5c:4b:25:c3:2f:f3:75:9f:c4:7d:6c:be:26:58:
3c:47:b5:1a:c0:c7:3d:7e:71:17:5a:ea:41:df:60:
71:46:78:6d:ba:86:fb:51:31:b5:43:c5:81:ba:fc:
5e:cf:b1:7a:93:07:74:5e:e0:08:07:5d:27:ea:3d:
1f:6e:47:94:f4:af:25:33:31:79:ee:99:42:d5:6e:
08:b7:a2:b6:e1:fd:10:91:ab:40:6a:ff:3e:5e:33:
84:93:5c:f8:e2:bc:e7:89:05:c7:30:07:ef:36:85:
b1:b1:e7:a4:5b:39:42:d2:fa:35:f5:2c:99:53:76:
0e:32:0c:d3:24:b1:17:9d:08:a7:8f:15:20:67:9e:
be:65:73:bd:0b:e5:9e:d0:05:4d:86:d4:f1:87:a6:
a2:24:cd:a1:c2:99:13:b0:3d:7f:b4:b1:2d:48:ca:
07:85:2f:ff:f7:87:4f:4e:b5:4b:e8:0f:bd:e5:2b:
38:49:3f:84:ce:70:d3:f5:23:80:9d:c6:6b:0c:b5:
cb:6d:2f:96:8a:36:42:be:7e:7e:e2:07:de:eb:c3:
2a:15:84:10:c4:72:31:1d:30:7f:1d:1a:f1:07:21:
21:1f:a0:fc:86:ab:59:ff:fa:ec:72:55:02:d3:55:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:F9:C3:66:FB:8A:F1:A9:73:B0:DF:25:DF:5A:E1:72:07:B5:F1
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qaT5w2b7ivGpc7DfJd9a4XIHtfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.0.0/19
78.155.128.0/19
79.174.192.0/18
80.70.32.0/20
84.55.128.0/18
91.151.112.0/20
141.170.216.0/21
195.7.96.0/19
212.39.128.0/19
213.144.192.0/19
Signature Algorithm: sha256WithRSAEncryption
85:ae:ea:9f:4d:69:73:20:af:6d:1f:b3:24:3a:33:ce:fd:67:
bb:d3:95:82:c0:a2:e3:53:79:bc:fc:c6:9e:91:5b:0b:0e:d2:
81:bd:89:c2:8a:32:f7:64:e4:a2:a5:1c:7f:d5:ec:4c:4a:db:
a9:e8:ce:a2:b6:75:12:0d:7b:44:24:11:f7:0c:75:f7:7e:e2:
6a:60:00:2c:bb:c0:88:56:b3:dc:33:8a:78:23:39:83:e7:69:
08:ba:fa:bd:1f:c7:67:e8:57:c6:02:79:72:33:19:70:a9:b2:
39:1a:43:21:cb:de:0a:c0:aa:f6:d8:08:40:22:aa:9a:dc:fa:
05:06:5e:7d:a3:d7:0d:2a:f8:8a:b2:65:e0:4e:95:25:bb:fb:
4a:70:14:4a:93:cc:8d:8c:ab:4e:ab:e6:90:ad:82:80:53:e8:
8f:c5:c6:9a:47:93:ec:ee:e2:bc:13:ed:ee:25:3f:d7:32:32:
e1:e2:6b:8e:cd:48:d9:bc:d3:ec:c0:e0:d3:33:80:e1:b8:a6:
47:2f:36:c7:ac:75:0b:cc:cb:2d:3c:d7:6a:3d:40:bd:f3:44:
46:b5:ba:45:48:8e:98:1c:fe:5c:58:32:e4:a6:c4:35:98:b5:
12:12:9a:5d:23:62:2c:aa:4b:7f:1b:73:c1:e6:1a:2b:22:05:
b1:cc:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:18 2025 by rpki-client