Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/u3lxxc1lkavM0xc30bqZfpWxvHo.roa
File: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (raw, json)
Hash identifier: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=
Subject key identifier: BB:79:71:C5:CD:65:91:AB:CC:D3:17:37:D1:BA:99:7E:95:B1:BC:7A
Certificate issuer: /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial: 0194236A1271F3E490038C501967C9FA8935
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/u3lxxc1lkavM0xc30bqZfpWxvHo.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31127
IP address blocks: 88.80.224.0/19 maxlen: 20
92.245.192.0/19 maxlen: 20
185.22.176.0/22 maxlen: 23
217.144.16.0/20 maxlen: 21
2a01:108::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:12:71:f3:e4:90:03:8c:50:19:67:c9:fa:89:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb7971c5cd6591abccd31737d1ba997e95b1bc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:73:fa:80:b4:53:be:df:3f:94:b4:a8:c0:
a2:4a:48:a1:6b:35:2c:5f:95:28:a3:39:0a:09:46:
26:33:f2:c7:18:09:7d:f0:9d:9c:2d:f1:7b:87:f1:
d0:d0:8a:55:d0:a0:15:78:4c:f9:eb:29:a8:48:ef:
32:00:d6:b4:02:39:a9:96:86:0a:ab:ad:9b:90:b2:
29:00:36:ef:4f:aa:f2:25:2d:a2:28:86:0f:c7:be:
7d:7b:2b:83:15:1a:8b:8e:dd:0f:14:18:1e:79:b6:
01:cf:3d:0b:8e:c0:54:49:f0:d2:d1:79:79:37:ec:
46:d1:e5:4d:9a:8d:cd:19:8e:7f:75:26:7c:9b:a3:
af:80:59:b6:de:8e:e5:52:73:01:a3:d8:f8:12:f0:
bf:b7:61:8a:9a:70:ed:b2:e9:b2:67:d7:39:ae:5a:
17:54:fe:4c:0d:56:ef:21:9b:7b:e0:8f:19:db:ea:
71:bd:bc:bd:06:fe:6e:46:15:3d:b6:bf:f0:dc:20:
54:25:3f:c3:e2:7c:a9:f5:ee:1d:bf:14:d4:e1:30:
86:16:6a:f5:1a:e4:32:d3:bd:72:9e:ca:b0:87:b4:
68:f6:35:7d:54:c4:f5:c2:99:30:e8:19:1a:8e:11:
45:22:3e:9b:d4:72:a5:95:0f:da:62:92:73:42:d2:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:79:71:C5:CD:65:91:AB:CC:D3:17:37:D1:BA:99:7E:95:B1:BC:7A
X509v3 Authority Key Identifier:
keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/u3lxxc1lkavM0xc30bqZfpWxvHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.224.0/19
92.245.192.0/19
185.22.176.0/22
217.144.16.0/20
IPv6:
2a01:108::/32
Signature Algorithm: sha256WithRSAEncryption
2b:f1:d1:5f:66:de:5d:25:f4:ad:17:24:6a:fc:5a:5b:e7:7f:
91:89:b8:95:ea:b7:85:ae:5b:fe:31:7e:d8:d4:1e:7e:da:f0:
32:12:11:21:d4:ec:09:b2:cc:ae:98:d6:23:c8:50:22:17:4d:
0f:09:48:35:4c:11:01:25:79:45:b5:e6:1f:36:2b:b1:20:95:
6f:4b:62:69:41:9c:6b:f9:cf:fa:75:3a:c1:7e:7d:75:90:dc:
61:da:14:fd:b0:8e:54:8b:cf:32:9a:8f:37:3d:64:23:e8:7f:
ac:f5:03:12:1a:0f:64:c8:28:68:2a:d6:88:aa:e2:3e:ed:d7:
96:1d:ee:0b:a5:c4:0f:a3:11:35:4a:19:c3:92:8e:f7:ee:81:
52:03:0a:b1:5c:13:18:1c:60:c7:43:69:43:f2:f5:ba:a9:1e:
11:12:48:8e:6d:68:58:e9:f5:09:44:55:d9:84:33:90:66:54:
37:05:76:0f:61:f4:93:8d:2a:f0:3c:56:6c:15:40:6e:7d:cf:
53:4b:f1:fa:97:2e:b1:1f:58:11:f8:14:df:ce:af:16:b2:2e:
b5:b1:80:1b:40:9d:93:7d:65:1f:dd:38:90:c2:4c:ee:da:f6:
f2:cc:17:6f:1c:5a:cb:4f:67:42:17:d3:5d:b5:d4:2b:82:ea:
e4:33:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:34 2025 by rpki-client