Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/_x206HZGagtA6dAvfxStsmKc3n4.roa
File: _x206HZGagtA6dAvfxStsmKc3n4.roa (raw, json)
Hash identifier: b78aj5rvx2Xy9g+pAEN4tSwQJDBl/+csOAL8uop4FGI=
Subject key identifier: FF:1D:B4:E8:76:46:6A:0B:40:E9:D0:2F:7F:14:AD:B2:62:9C:DE:7E
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 01941F8C25F0517D9935D0F855428E8C95F9
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/_x206HZGagtA6dAvfxStsmKc3n4.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50837
IP address blocks: 31.171.240.0/20 maxlen: 24
45.88.24.0/22 maxlen: 24
91.92.71.0/24 maxlen: 24
93.123.14.0/23 maxlen: 24
93.123.82.0/23 maxlen: 24
94.156.200.0/22 maxlen: 24
178.22.64.0/21 maxlen: 24
185.12.4.0/22 maxlen: 24
2a01:9980::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:25:f0:51:7d:99:35:d0:f8:55:42:8e:8c:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff1db4e876466a0b40e9d02f7f14adb2629cde7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:2f:a5:0b:4a:ed:75:f8:f1:c7:a4:dd:9e:
c9:3b:50:b8:c5:17:cf:74:60:b4:29:b7:47:b6:93:
0a:79:24:10:d5:a7:38:dc:f9:10:04:a5:e0:23:1a:
7e:e6:6c:af:39:4a:3b:2a:cc:8d:1a:1d:26:80:93:
05:85:73:ce:e0:54:a4:17:ef:31:1d:00:19:e4:8e:
75:0e:b5:3c:c1:2c:56:b5:ef:df:00:9f:89:81:c5:
da:dc:e9:da:62:12:7d:5f:06:d5:48:8d:83:a3:11:
fa:a5:66:4d:ae:de:5d:88:2a:84:e2:1d:4f:b0:ed:
d3:22:03:e4:8e:9c:bd:80:4f:26:9e:d8:15:c2:f6:
95:c7:ab:bd:29:b0:c2:e9:8d:84:f6:04:21:04:5c:
f2:a3:d7:af:65:3a:43:6b:e1:10:40:06:69:e6:30:
9a:29:3b:c6:9b:35:82:9a:d7:de:72:8d:bd:57:9c:
f7:23:9e:9c:ff:0f:c0:c4:da:39:bb:8f:a5:f2:38:
8b:90:f7:fe:ba:e1:a6:bf:79:75:13:a0:96:bf:c3:
28:7f:fe:fe:58:ed:7d:1e:6f:5a:07:e4:55:72:a3:
5b:97:a9:78:f3:6c:9c:be:cd:36:18:8d:ba:b2:99:
c8:f0:47:fa:04:72:c3:e6:b2:8f:6b:d8:a8:b8:b3:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1D:B4:E8:76:46:6A:0B:40:E9:D0:2F:7F:14:AD:B2:62:9C:DE:7E
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/_x206HZGagtA6dAvfxStsmKc3n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.240.0/20
45.88.24.0/22
91.92.71.0/24
93.123.14.0/23
93.123.82.0/23
94.156.200.0/22
178.22.64.0/21
185.12.4.0/22
IPv6:
2a01:9980::/32
Signature Algorithm: sha256WithRSAEncryption
4d:0d:a6:b2:d8:5d:da:bd:ef:e6:96:2c:c2:33:c1:a9:06:33:
e5:52:de:8b:7f:5d:8b:86:d6:85:0f:a1:b3:0e:cc:8b:6c:bb:
71:f0:e2:d5:8d:fa:68:a9:72:49:6b:d7:a8:3f:62:02:a8:3d:
e6:2d:8f:4b:7f:53:ea:ee:9a:d0:cd:2b:fd:75:1b:07:a0:b5:
8b:06:bd:0f:b6:7c:25:99:8a:d0:cd:f9:72:24:ae:14:de:27:
79:e0:99:15:ff:5e:f7:12:78:47:81:bd:8c:b3:3a:f6:16:ee:
63:c0:82:2d:3b:e3:d3:41:b6:07:b0:cc:62:25:17:b4:e6:91:
93:54:4b:12:54:0b:5a:15:c0:36:b6:89:d5:98:76:5c:24:24:
b2:01:53:1a:59:bd:35:6f:80:7c:a7:04:b1:e6:dd:33:6b:55:
d8:5f:d6:a6:96:cb:31:3c:f4:4d:54:b2:4b:e1:c9:e2:58:51:
7f:b3:d6:4f:31:a8:73:d8:b7:88:9b:8b:de:d4:54:28:87:cf:
28:fd:26:a1:9b:99:4b:3d:28:7e:d7:7c:be:58:98:cf:a5:7b:
68:40:63:58:ca:c5:54:91:26:ed:8b:b2:e6:50:a4:4f:b0:83:
e0:23:9b:ee:ff:88:6d:2e:53:1d:0a:e3:d7:8b:bf:af:f0:51:
f7:25:1d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:04 2025 by rpki-client