Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/arAVYuIUoOu5loStpOiZ4hnBkt0.roa
File: arAVYuIUoOu5loStpOiZ4hnBkt0.roa (raw, json)
Hash identifier: jd923I2d5WhItFr4NAXPIh41GmkD3Ij2jEV1qwDSc2w=
Subject key identifier: 6A:B0:15:62:E2:14:A0:EB:B9:96:84:AD:A4:E8:99:E2:19:C1:92:DD
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0186EAC865A318667D336965DE3DA85695B5
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/arAVYuIUoOu5loStpOiZ4hnBkt0.roa
Signing time: Thu 16 Mar 2023 14:17:27 +0000
ROA not before: Thu 16 Mar 2023 14:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29256
IP address blocks: 94.252.183.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
185.136.144.0/22 maxlen: 22
2a00:b800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:c8:65:a3:18:66:7d:33:69:65:de:3d:a8:56:95:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Mar 16 14:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ab01562e214a0ebb99684ada4e899e219c192dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:b5:de:20:ae:6a:07:cd:ff:fb:47:96:ce:
d0:da:c2:db:2b:c5:91:d3:0c:d1:b2:cf:95:d2:4f:
3d:22:c7:d1:ed:20:2a:55:86:8e:41:69:3e:a1:f7:
2f:7e:16:80:dc:5f:6e:71:28:f4:a7:7c:6d:64:ec:
49:cb:6d:b0:8b:02:f1:17:fa:2f:50:02:2c:4a:b9:
d3:5c:2b:df:cb:2f:b2:0d:58:07:21:4e:ee:0b:1d:
be:a4:e1:91:c9:8c:c7:6c:a1:a6:25:4a:bd:b6:99:
6f:da:7e:f5:2f:c5:07:f3:d8:fe:5f:ab:14:3f:eb:
74:75:e5:98:95:1b:8f:05:04:34:7f:a2:66:0a:f2:
33:ef:25:eb:ce:26:74:92:0c:5c:d5:39:c2:6e:5f:
bd:40:c1:30:1a:fe:4a:71:01:8c:1c:5a:c0:5d:59:
b3:81:13:d7:70:3b:12:b5:eb:d8:93:e2:aa:b2:cd:
8c:72:59:b2:3d:dc:e7:e1:a5:ae:13:4d:7f:81:95:
72:54:19:24:b7:d7:a2:98:1e:45:b9:39:c9:2a:6e:
6a:0a:74:07:30:0c:49:97:9c:47:a9:1f:36:a3:74:
ef:59:b8:b0:93:68:cd:15:3c:3e:fd:dc:9a:62:e8:
66:e0:1e:01:76:3c:8e:e7:25:4a:0d:66:c5:67:e0:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B0:15:62:E2:14:A0:EB:B9:96:84:AD:A4:E8:99:E2:19:C1:92:DD
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/arAVYuIUoOu5loStpOiZ4hnBkt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.252.183.0/24
94.252.188.0/24
185.136.144.0/22
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
58:3b:4d:80:c8:b4:1c:9f:8d:d4:29:f9:9d:27:2c:5d:d2:83:
c6:56:57:56:a7:8c:ff:29:c0:42:14:1b:aa:f5:f4:0a:97:41:
e6:24:80:cb:c7:e6:58:ed:8c:00:bd:4c:d4:fd:e0:06:d2:28:
18:c2:31:00:e2:6a:23:b6:d6:54:65:2a:ae:0b:b6:d3:42:4f:
a2:6d:a5:83:36:21:fb:42:9c:2d:4e:96:a3:28:18:00:10:37:
47:17:b8:3e:c2:f6:43:dd:9c:fd:e1:09:40:cb:51:1f:71:6c:
e3:14:a9:98:cc:6b:3e:80:a2:2c:13:66:a1:36:df:29:c1:1e:
a3:3b:66:cd:53:4c:a5:a2:3d:3c:3c:be:52:db:69:7d:8d:70:
4f:8d:0b:3e:7b:a5:8c:e9:f4:f9:7e:b7:cf:08:69:14:fc:2d:
1c:7b:fb:6e:a4:e3:1c:1d:86:a5:42:58:16:f6:42:87:bb:a3:
d9:8a:3f:84:6f:38:4c:d4:05:f7:bf:60:83:1a:ad:8a:8a:37:
58:d3:72:66:35:59:42:aa:7c:71:b0:10:c0:06:79:62:6f:f1:
b4:9d:7a:96:4f:c9:1a:2f:4e:f4:40:cc:cc:b6:28:61:07:d7:
ab:6e:38:bc:4c:ce:4f:d0:e0:bb:99:23:45:88:37:a9:14:4d:
9c:8b:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:33 2025 by rpki-client