Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/s4BqNapwmXilT71OYAf_1FRui4w.roa
File: s4BqNapwmXilT71OYAf_1FRui4w.roa (raw, json)
Hash identifier: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=
Subject key identifier: B3:80:6A:35:AA:70:99:78:A5:4F:BD:4E:60:07:FF:D4:54:6E:8B:8C
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 019427B61670E4C431C56C84F0B3E36ED3D9
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/s4BqNapwmXilT71OYAf_1FRui4w.roa
Signing time: Thu 02 Jan 2025 15:50:32 +0000
ROA not before: Thu 02 Jan 2025 15:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 786
IP address blocks: 136.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:16:70:e4:c4:31:c5:6c:84:f0:b3:e3:6e:d3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3806a35aa709978a54fbd4e6007ffd4546e8b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:4e:55:07:07:8f:1b:7b:df:3e:83:7d:f1:
e8:fc:b9:aa:db:8e:75:d5:f7:ff:4e:f0:22:92:18:
00:af:5f:2b:d1:b8:e0:6b:91:1c:07:36:b2:99:57:
e6:21:6f:b2:fb:b2:60:0a:ac:66:20:b6:5f:c7:e9:
dc:cc:8e:79:1e:cd:46:b7:3e:f6:4f:ba:9c:d2:de:
95:5c:09:68:0c:4f:2b:3f:e0:6b:aa:03:0c:38:b4:
00:af:63:fb:c0:36:62:fb:02:ab:f8:44:87:c0:14:
a3:5d:b1:da:bc:3b:1e:54:ff:36:12:56:ba:1d:b1:
3e:42:2b:f4:0c:98:1e:a1:f2:5c:d6:ab:0a:a7:52:
79:be:c2:7b:df:bc:35:7e:1e:fb:20:eb:df:dc:d2:
b7:44:b8:de:6e:72:e4:fb:cb:1f:5e:27:23:ec:77:
5f:9d:cb:24:ed:12:40:bd:0e:aa:06:10:f0:3e:7b:
ec:50:ee:b5:9e:62:6f:ec:23:d5:23:26:de:64:39:
85:5c:cc:b7:84:e1:3a:8d:24:e2:36:e8:0e:af:b2:
52:92:d6:b6:f9:34:e0:76:fb:ee:97:21:94:07:05:
b1:93:f2:99:bb:ad:0f:ae:b4:b9:c5:93:f0:f5:a8:
4f:21:44:4c:a4:ba:fe:57:e6:60:96:ee:5b:b3:ad:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:6A:35:AA:70:99:78:A5:4F:BD:4E:60:07:FF:D4:54:6E:8B:8C
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/s4BqNapwmXilT71OYAf_1FRui4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:88:0a:96:e5:9e:c2:98:80:a7:9e:9e:0f:b2:0b:d1:c0:af:
46:10:76:a5:b8:32:c6:14:38:cb:e0:f2:b2:7e:81:9e:cb:9b:
4e:e9:ec:bd:6d:63:a3:fe:a7:1b:5d:ac:3b:e3:5c:ca:03:66:
56:72:52:6d:dc:50:39:ae:75:79:13:3f:50:fc:d6:73:86:12:
d9:23:f8:fa:51:cd:b8:2b:9b:54:06:c2:be:c8:6d:03:41:c4:
fd:e1:d2:85:4b:f1:cb:04:3b:ca:35:91:4c:97:d1:13:5f:8b:
38:bc:58:a4:48:e8:f2:fe:82:0c:08:c5:ca:22:a8:b0:e6:49:
22:e3:4b:c7:cf:9a:d4:db:bf:ce:e9:c9:a1:9d:98:e0:ea:39:
b5:02:7d:12:e8:42:ac:8c:b4:b1:98:e0:4e:77:71:15:dd:0c:
a8:3f:0a:f3:95:2e:43:70:df:69:c6:68:ca:a6:9c:3a:ab:89:
e3:6d:b0:34:1d:06:cb:24:c9:a8:77:b0:8a:56:c7:9e:c5:2f:
6f:9d:18:49:d3:f4:5d:21:13:2d:3e:03:2d:0e:3f:39:2e:36:
5f:fe:e4:50:e1:21:7d:05:f6:49:73:82:9e:99:08:3c:b8:66:
11:2b:db:9f:b5:a6:68:5a:94:91:92:b4:33:5d:cb:f3:19:00:
f5:a9:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:03:44 2025 by rpki-client