Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/1ioN5dcfVbbcvdiMUenNAJRsRF8.roa
File: 1ioN5dcfVbbcvdiMUenNAJRsRF8.roa (raw, json)
Hash identifier: LLwhiNyP/7V6w2Kt2BpGMO0L81bfKA5S/Ex0r1Yi3e4=
Subject key identifier: D6:2A:0D:E5:D7:1F:55:B6:DC:BD:D8:8C:51:E9:CD:00:94:6C:44:5F
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E1541F0FF2669D8742548277DEFD7
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/1ioN5dcfVbbcvdiMUenNAJRsRF8.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212212
IP address blocks: 91.242.48.0/23 maxlen: 23
91.242.50.0/23 maxlen: 23
151.248.70.0/23 maxlen: 23
176.108.224.0/22 maxlen: 22
185.76.52.0/23 maxlen: 23
185.76.54.0/23 maxlen: 23
194.107.122.0/24 maxlen: 24
194.213.6.0/24 maxlen: 24
195.54.54.0/24 maxlen: 24
195.54.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:15:41:f0:ff:26:69:d8:74:25:48:27:7d:ef:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d62a0de5d71f55b6dcbdd88c51e9cd00946c445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:07:a8:35:11:1a:7c:38:6b:9c:0b:46:4e:
e3:8b:2f:c5:8e:e9:27:cc:8a:74:1a:94:ee:5a:9e:
ea:8c:96:1b:5e:d7:f9:03:9c:f0:40:e1:0d:b6:ff:
6e:74:ba:01:b8:9d:75:e8:0c:b6:2c:60:6b:0c:e1:
1e:b5:ac:35:54:84:2b:e1:d4:7a:86:f0:a7:67:2b:
8f:cb:c6:d2:da:0f:77:aa:42:b8:7b:67:14:a1:c0:
dd:1b:e2:6c:35:41:a4:eb:76:28:b1:bb:85:34:66:
32:f0:be:6e:6b:5e:8e:2f:c3:b8:4d:8a:9f:c8:32:
46:e4:4c:3c:99:e7:61:cd:7d:3f:f7:ba:8c:38:0e:
2b:fa:0d:e4:ae:bd:02:0b:1c:71:9a:c7:47:74:5f:
e9:91:51:e1:4c:ca:01:ca:83:c9:e4:b6:84:13:18:
9f:7f:9e:2a:94:57:86:1e:1d:03:bd:06:65:2c:2b:
a8:0b:e3:ac:a5:67:23:64:17:46:ee:d3:91:75:c3:
f1:a9:f8:04:55:e4:94:94:c0:d4:2b:b1:a4:65:31:
a8:06:22:9d:82:5b:de:7f:fc:ff:2f:23:e9:8f:0f:
9c:fd:6f:68:90:66:92:96:d2:07:ef:91:c6:6f:38:
e2:e0:6b:aa:7f:45:07:61:88:73:50:e4:01:25:96:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2A:0D:E5:D7:1F:55:B6:DC:BD:D8:8C:51:E9:CD:00:94:6C:44:5F
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/1ioN5dcfVbbcvdiMUenNAJRsRF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.48.0/22
151.248.70.0/23
176.108.224.0/22
185.76.52.0/22
194.107.122.0/24
194.213.6.0/24
195.54.54.0/23
Signature Algorithm: sha256WithRSAEncryption
55:7d:d5:f5:3e:92:1b:40:22:ad:7c:3b:3d:77:f4:e9:94:f3:
13:80:0b:8c:45:08:2c:d7:70:d5:48:a1:14:4a:e3:04:fe:b9:
95:80:ac:ea:ed:89:66:54:7f:98:89:7c:c0:a3:05:b9:1f:22:
fa:e6:81:07:a2:9d:3b:dc:a5:12:3f:d0:a6:cf:0c:62:9b:ae:
1b:91:4e:63:ca:ac:a3:6f:c0:a4:37:cf:4b:3e:37:42:20:58:
99:ff:40:60:82:5f:d1:c7:bf:fe:50:5b:26:1c:16:c7:32:78:
bd:29:5d:b0:01:ed:ef:dd:10:bd:9e:f6:2b:9e:a3:d0:8a:0e:
ee:a0:61:b3:54:ce:52:c8:8a:41:28:e9:22:c4:74:bd:4e:c9:
36:f2:23:7e:f2:3a:35:71:3d:9b:3d:c3:1b:c9:6a:4f:3c:6e:
b8:b5:90:bd:a4:26:d3:fb:72:ba:4e:10:2c:bd:75:b7:da:5c:
4b:ba:35:3f:02:a4:a7:c5:a1:70:66:9c:b2:32:db:ed:d7:5a:
bf:5d:5b:36:15:73:1a:54:64:df:2d:30:c3:0a:79:a8:9f:46:
77:c8:b4:42:b2:e2:a1:8d:2d:b7:af:9f:b6:98:ee:b5:1a:8e:
bc:b6:3f:fe:1c:c6:0d:2c:25:47:70:de:dd:9b:f7:81:a7:06:
12:2f:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:53:40 2025 by rpki-client