Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/6vjl9U2iQ2PU377HYgeQNGNavVA.roa
File: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (raw, json)
Hash identifier: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=
Subject key identifier: EA:F8:E5:F5:4D:A2:43:63:D4:DF:BE:C7:62:07:90:34:63:5A:BD:50
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 019424457D48E340048B3BFF136E82A28834
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/6vjl9U2iQ2PU377HYgeQNGNavVA.roa
Signing time: Wed 01 Jan 2025 23:48:41 +0000
ROA not before: Wed 01 Jan 2025 23:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12581
IP address blocks: 185.27.252.0/22 maxlen: 22
212.79.160.0/19 maxlen: 19
2a00:c940::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7d:48:e3:40:04:8b:3b:ff:13:6e:82:a2:88:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf8e5f54da24363d4dfbec762079034635abd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:b6:96:b7:54:c3:62:fb:91:c7:d8:29:3d:
b9:83:01:55:84:c0:b0:04:9b:e3:57:19:ca:9b:05:
4d:84:14:8d:fe:b4:f4:54:71:d4:46:03:b4:48:af:
7c:d3:19:34:de:38:f6:0f:7e:8e:d3:a2:5a:0a:8e:
9d:cd:92:74:48:f2:55:1b:4c:ce:50:12:b6:b7:27:
95:6e:c2:eb:d3:0c:38:04:84:69:9c:e3:7a:97:bb:
f4:d2:b1:11:98:94:e8:be:e0:7a:54:52:7c:98:9e:
a1:ed:af:c1:99:91:bf:ff:42:b3:3a:f7:09:12:72:
4d:79:09:8a:6e:76:e5:37:6a:0b:a9:93:30:fd:89:
cb:56:b6:e0:3d:c5:79:6c:d5:84:2c:30:7f:10:e7:
08:6b:22:ed:66:ce:6f:e3:ac:d6:08:16:51:65:62:
0e:13:36:03:24:be:16:f0:c8:79:91:34:a5:cd:ed:
51:ea:8c:15:cb:28:36:6e:d3:56:62:11:0b:58:5f:
7b:28:a9:d9:4f:92:6d:b8:50:b8:48:bb:dc:69:a9:
75:9f:05:3a:75:43:82:3f:5d:d1:2c:c9:62:40:9f:
ba:d1:8c:24:c8:03:2f:c3:23:59:79:c2:a6:5f:df:
18:cc:bd:0d:bc:2d:16:17:23:eb:20:1e:0f:1e:b1:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:E5:F5:4D:A2:43:63:D4:DF:BE:C7:62:07:90:34:63:5A:BD:50
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/6vjl9U2iQ2PU377HYgeQNGNavVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.252.0/22
212.79.160.0/19
IPv6:
2a00:c940::/32
Signature Algorithm: sha256WithRSAEncryption
aa:29:6f:79:fa:86:40:47:19:97:60:ae:ca:d3:ea:1e:c1:f1:
d3:36:a0:df:a4:e0:a2:90:4f:e4:8e:90:ca:35:b4:62:db:9f:
f7:bd:7a:60:d6:e9:cc:e2:ed:65:b8:fe:aa:cd:4c:15:11:36:
7e:54:f1:19:05:0a:c0:a8:8c:a5:04:ff:7e:d7:e3:c1:a6:a0:
d1:43:52:01:b5:85:78:5d:d3:be:45:9a:2b:21:27:b4:b8:44:
21:84:f2:fa:5e:55:cb:2c:73:d3:f2:6d:6b:13:d7:f5:00:2a:
68:b8:cc:61:5a:c2:9f:9d:3d:8e:c7:b4:b1:f9:45:b0:f2:c6:
c5:fc:87:28:d8:c9:0c:49:ff:7b:42:9d:37:21:03:df:d9:30:
68:f1:3b:93:59:1e:62:16:44:e5:d4:67:e3:e9:f7:6f:53:79:
85:47:8b:d9:25:85:4c:73:8c:ff:4a:f3:30:a3:3c:f2:77:00:
75:81:15:54:56:72:80:6c:8b:0e:d3:dd:d2:a1:34:3a:cf:54:
6e:ca:60:c5:91:fd:3d:5c:ec:46:86:64:d9:4e:39:4f:8b:5f:
f6:7f:09:40:b4:71:23:fd:df:b4:bc:41:9a:38:cc:4b:fa:f5:
22:67:41:ce:a1:37:12:4d:1a:cd:25:5f:24:d6:bc:b6:a6:cc:
96:2d:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:09 2025 by rpki-client