Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/uR1ciNLiC41HyQnLFmxXdlFLi4c.roa
File: uR1ciNLiC41HyQnLFmxXdlFLi4c.roa (raw, json)
Hash identifier: DjsKRDrWt/FFBB561o4tq8q/9xsxFnlJ8tTN6CI64L0=
Subject key identifier: B9:1D:5C:88:D2:E2:0B:8D:47:C9:09:CB:16:6C:57:76:51:4B:8B:87
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 019426D95A7634972AAC4954C3728FC77051
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/uR1ciNLiC41HyQnLFmxXdlFLi4c.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 80.254.236.0/22 maxlen: 24
185.220.28.0/22 maxlen: 24
193.187.168.0/22 maxlen: 24
194.39.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5a:76:34:97:2a:ac:49:54:c3:72:8f:c7:70:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b91d5c88d2e20b8d47c909cb166c5776514b8b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:85:7f:05:9b:28:ea:4c:7b:84:d3:cf:13:28:
8a:c1:15:50:77:cf:ba:cd:ad:12:33:d7:01:b4:1c:
05:65:02:35:aa:0c:dd:2b:f7:24:7e:2d:c1:c3:cd:
a2:7d:c2:bf:75:d3:85:af:b7:6a:9f:66:a2:aa:b7:
b5:3f:c4:79:9b:9a:d4:b6:26:5f:35:c9:8a:fb:09:
d7:c6:99:09:5e:c3:4a:a4:9c:c7:f6:fd:d9:b2:d7:
ce:5a:c8:76:87:5f:88:7f:f9:89:44:8b:51:02:7c:
70:25:a2:03:a1:16:df:2c:ee:83:b8:b8:34:c0:d7:
06:4a:fd:10:c5:56:d1:58:0f:94:27:0c:ee:8b:4d:
c7:38:1f:d6:78:ee:76:0e:85:12:05:80:2d:26:ea:
b8:4f:1a:8a:29:91:f6:67:f7:c5:0a:90:8c:b2:fc:
bf:e1:d3:f5:f4:bb:b3:47:fc:5d:4f:18:37:4e:a8:
3e:40:94:01:af:74:df:2a:06:49:32:cd:a4:71:16:
85:8e:9e:75:9e:29:ca:f7:da:65:11:09:09:5f:bb:
47:6f:0c:5e:9b:c8:fb:93:9a:d2:c5:fb:79:84:02:
6c:14:91:9b:da:bd:f1:3c:85:ac:19:78:eb:47:6d:
b1:9d:d6:18:5d:9c:bb:6a:e6:b0:57:70:08:87:5a:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1D:5C:88:D2:E2:0B:8D:47:C9:09:CB:16:6C:57:76:51:4B:8B:87
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/uR1ciNLiC41HyQnLFmxXdlFLi4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.236.0/22
185.220.28.0/22
193.187.168.0/22
194.39.68.0/22
Signature Algorithm: sha256WithRSAEncryption
17:1e:d7:39:60:b7:31:8b:11:f2:1a:40:e2:11:a8:81:4e:2f:
5c:a0:aa:a6:a0:63:5c:02:d2:c5:94:59:ea:72:fd:64:fa:e2:
94:89:a1:8a:b8:a9:3e:b8:ea:2f:a2:e3:9c:b6:b6:74:b3:27:
3e:5b:ec:1b:77:80:d6:07:a2:52:8b:cc:2a:25:90:54:82:08:
03:49:02:2a:e6:90:0a:ea:cd:45:07:31:5a:73:66:5a:17:70:
1d:ad:b6:ae:41:80:44:85:85:bd:e0:cc:c8:35:1a:98:85:1e:
d1:cc:22:a7:4b:44:49:05:3e:2a:d1:c2:19:02:48:fe:98:2f:
1c:fd:82:93:70:b2:68:f7:e0:16:9e:2a:ae:66:9e:d0:92:06:
3b:0b:9f:bf:95:ab:07:c8:6a:c8:d8:96:35:ac:e2:9b:1b:fe:
9f:36:d5:ee:8a:a5:96:5a:bf:51:62:f4:c3:1c:40:3c:f2:c8:
bc:ca:f6:03:43:c6:47:b2:80:93:de:22:f7:2f:26:7b:77:c1:
3b:ef:e1:74:ae:c7:9a:5d:4f:b1:cb:dc:75:c6:87:f8:0f:69:
c1:5c:30:8f:3a:90:f9:bc:1d:02:50:b2:2a:81:03:9a:4a:56:
57:b4:05:40:6b:82:c6:32:b6:06:7c:ba:61:f6:d7:84:09:55:
2a:69:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:33 2025 by rpki-client