Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/eqTVj9wBVjWfWVyIqINChZYGn2Q.roa
File: eqTVj9wBVjWfWVyIqINChZYGn2Q.roa (raw, json)
Hash identifier: bVGob5PZUgXsPTY4CPYtcGkh9jRJXp9hAVFd8OHsbtY=
Subject key identifier: 7A:A4:D5:8F:DC:01:56:35:9F:59:5C:88:A8:83:42:85:96:06:9F:64
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019424B3D702637C65A54EB5C58862C587BF
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/eqTVj9wBVjWfWVyIqINChZYGn2Q.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31586
IP address blocks: 81.21.136.0/21 maxlen: 24
141.255.180.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
217.21.241.0/24 maxlen: 24
2a05:2500::/32 maxlen: 32
2a05:a282::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d7:02:63:7c:65:a5:4e:b5:c5:88:62:c5:87:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aa4d58fdc0156359f595c88a883428596069f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:05:20:55:da:8b:dc:85:81:ba:7f:93:5b:
33:4d:ab:7f:12:98:27:f4:45:16:38:fe:12:c0:a6:
db:98:e5:9d:30:8e:66:ed:47:d9:9d:bb:01:82:50:
3f:71:a0:aa:ce:ef:82:65:c7:63:68:49:fb:fb:20:
7b:ff:a2:e9:46:03:84:59:ee:13:f6:4a:43:ef:49:
26:6b:1c:84:f9:dc:a7:a4:df:9c:23:30:b4:16:b0:
a3:6f:8c:cd:a6:1e:cd:a0:95:d0:f3:6d:1c:1f:98:
62:e5:7d:9e:20:7c:61:88:5f:2c:29:17:67:bb:f8:
f2:aa:c2:c0:8c:0b:36:ed:ec:a3:9e:3a:1c:a4:25:
42:0f:02:e8:60:8f:17:50:be:26:69:13:30:93:06:
8b:b9:4f:e3:0f:26:f2:1d:d0:e5:e7:30:48:df:48:
9b:ea:6c:48:51:33:ad:e1:0b:03:80:a5:c1:72:46:
16:ec:79:c8:e7:7a:fa:70:1a:57:b3:cf:35:89:78:
77:2b:ff:b7:bd:28:52:de:6e:b7:1c:8d:9c:ee:50:
a8:3e:df:82:c2:f6:c9:f2:7d:c2:33:c4:da:3b:9a:
0f:b4:b1:a8:f6:4c:f5:5d:ba:6b:0a:c4:ad:02:f9:
78:2d:df:44:74:0c:62:c0:7b:ce:2e:66:c1:db:1e:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A4:D5:8F:DC:01:56:35:9F:59:5C:88:A8:83:42:85:96:06:9F:64
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/eqTVj9wBVjWfWVyIqINChZYGn2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.136.0/21
141.255.180.0/22
185.69.232.0/22
185.84.72.0/22
185.105.204.0/22
185.105.216.0/22
217.21.241.0/24
IPv6:
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
06:cf:15:72:23:fb:56:f3:8d:8f:22:c3:92:c1:ef:5d:36:fd:
83:e4:02:97:f2:0c:0c:8b:7d:0b:6a:71:48:74:90:dd:e6:59:
2c:d5:07:1e:23:9d:30:3b:ba:14:45:db:e0:9d:e8:3f:c9:4b:
01:d7:6f:bb:2c:89:f7:8b:cb:6d:a2:f1:a6:0a:79:d4:14:87:
74:fa:9c:25:a6:d1:74:45:72:1f:27:3d:c7:70:6d:54:56:ca:
8a:1b:5b:fe:a9:26:76:17:73:69:31:a2:e3:93:15:27:c9:2c:
ab:1e:11:d2:f9:f8:54:66:87:15:ff:78:81:b7:e9:43:c8:0e:
cc:92:24:77:80:41:34:3c:6b:c4:20:7a:43:00:8c:9c:f6:44:
4e:0d:86:66:84:ab:8f:fd:fc:00:b3:2b:7d:f3:d0:2a:54:4d:
77:e4:ec:51:c7:f7:ba:8c:88:a2:1b:cd:f6:58:d6:ce:29:dd:
13:55:51:e2:2f:36:c8:a0:74:e4:7b:c3:c9:89:5f:b1:9f:8a:
2e:fc:f9:43:00:4a:6b:35:41:2e:9a:27:d8:86:d7:15:41:b7:
1f:fe:50:33:18:fd:5f:8f:5c:06:fc:31:ae:f2:73:ee:bf:1d:
22:58:78:5c:86:38:37:24:7b:bd:f6:21:01:1a:a7:94:fc:59:
c1:ff:b2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:57 2025 by rpki-client