Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/s5uswa19Uff22iB-dXtqkkmV_rE.roa
File: s5uswa19Uff22iB-dXtqkkmV_rE.roa (raw, json)
Hash identifier: nIij+OFtE0vEkYeQJJWHSLDLEYsBsVEmFRZ+nuktJgA=
Subject key identifier: B3:9B:AC:C1:AD:7D:51:F7:F6:DA:20:7E:75:7B:6A:92:49:95:FE:B1
Certificate issuer: /CN=faf814df8575986dd904a98687583c138768a114
Certificate serial: 01942521DBC4B87725C23285C9A14E573B4C
Authority key identifier: FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/s5uswa19Uff22iB-dXtqkkmV_rE.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21217
IP address blocks: 80.80.224.0/21 maxlen: 24
80.80.232.0/22 maxlen: 24
80.80.236.0/23 maxlen: 24
80.80.238.0/24 maxlen: 24
185.169.92.0/22 maxlen: 24
185.169.92.0/23 maxlen: 23
185.169.94.0/24 maxlen: 24
185.169.95.0/24 maxlen: 24
185.247.8.0/22 maxlen: 24
185.254.152.0/22 maxlen: 24
185.254.152.0/24 maxlen: 24
185.254.153.0/24 maxlen: 24
185.254.154.0/24 maxlen: 24
185.254.155.0/24 maxlen: 24
2001:40c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:db:c4:b8:77:25:c2:32:85:c9:a1:4e:57:3b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf814df8575986dd904a98687583c138768a114
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b39bacc1ad7d51f7f6da207e757b6a924995feb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:46:be:46:c0:2d:31:3a:4a:2e:ac:d0:bf:
2e:4e:a4:90:02:80:e1:90:35:6a:73:93:6f:3a:e0:
da:79:55:cc:07:76:88:ba:a7:0c:36:89:20:18:63:
38:c2:8d:f0:75:1e:9d:5f:69:e5:0c:ef:0b:b6:2f:
d1:15:43:d2:12:ba:b6:b1:13:23:83:d6:0d:73:2b:
30:31:96:aa:59:71:91:76:e4:98:31:46:b2:0f:1f:
16:8c:98:55:2d:75:52:ed:ff:ee:ca:1d:f6:1b:e2:
2e:57:75:9e:bf:03:cb:47:f0:8c:30:8a:3b:46:ad:
77:08:14:6c:ba:56:6a:3c:90:41:21:0a:55:bd:ed:
ab:47:17:3c:20:d2:5c:ac:bb:f6:02:45:52:a7:4e:
93:72:7e:98:59:2c:b4:63:c9:90:d2:f2:7a:e6:7c:
b7:97:08:20:5b:69:f2:cd:d1:bb:82:1b:a6:e6:2d:
1e:d1:99:47:f6:da:7e:15:f8:62:38:b5:eb:45:26:
24:25:e5:91:8b:6f:fc:1f:68:30:39:6a:00:67:e1:
03:b3:b7:b9:08:47:99:ec:99:68:f2:9b:e5:45:81:
f7:e4:e6:aa:d6:16:6f:41:ac:09:db:dc:f8:2b:49:
e8:a5:c0:23:e7:49:bd:ba:f3:55:d7:a6:7e:30:99:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9B:AC:C1:AD:7D:51:F7:F6:DA:20:7E:75:7B:6A:92:49:95:FE:B1
X509v3 Authority Key Identifier:
keyid:FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/s5uswa19Uff22iB-dXtqkkmV_rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.224.0-80.80.238.255
185.169.92.0/22
185.247.8.0/22
185.254.152.0/22
IPv6:
2001:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
2d:c9:8e:15:21:81:e8:fd:ca:ba:3d:30:87:01:7c:d3:ff:38:
85:19:dc:d3:a1:ac:f2:47:f0:c7:b4:fa:48:88:8f:ba:03:79:
ed:6f:98:fd:66:76:46:dd:17:7e:36:9b:f2:98:d2:f4:99:64:
9e:35:d7:c0:dc:3f:68:1f:4f:f4:0c:92:66:f2:db:2e:8e:29:
de:55:42:b8:fb:4f:2c:b1:4d:75:8b:37:65:7d:62:82:dd:cb:
d8:b3:77:f3:f4:fe:4f:40:27:a0:9b:f0:fb:99:5c:bf:f6:0f:
53:12:60:f8:b5:fb:4b:06:d2:fd:33:94:4c:7a:8a:b2:de:8c:
49:81:f6:c7:90:e3:43:d2:65:66:f9:47:09:3a:fe:c1:8d:48:
e1:5b:01:60:38:a5:9b:8a:3a:b6:5a:76:c9:a9:c1:c3:e9:8d:
06:5f:d3:bf:90:58:29:6a:38:b1:9f:5d:fe:2c:57:5c:be:26:
69:d4:14:28:c2:01:ec:b5:6f:3b:1b:9c:eb:d4:5c:7b:49:0e:
dc:8d:12:03:d4:8f:4d:f7:e7:12:c4:87:39:fc:2c:89:ae:ff:
81:f4:af:35:65:2c:b6:6e:1a:2c:b2:78:07:89:0e:81:f9:9c:
08:5e:75:28:e3:e8:37:30:9e:ad:df:0c:a1:38:7c:20:8a:f2:
f0:a1:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:53 2025 by rpki-client