Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/1_VIXcn389cDhH5pQfcOHcgm1SA.roa
File: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (raw, json)
Hash identifier: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=
Subject key identifier: D7:F5:48:5D:C9:F7:F3:D7:03:84:7E:69:41:F7:0E:1D:C8:26:D5:20
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 0194222035D1CC76D229C68197901510A7B3
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/1_VIXcn389cDhH5pQfcOHcgm1SA.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1290
IP address blocks: 146.101.0.0/16 maxlen: 24
154.8.0.0/19 maxlen: 24
154.8.32.0/20 maxlen: 24
154.32.0.0/16 maxlen: 24
193.82.96.0/19 maxlen: 24
193.82.128.0/19 maxlen: 24
193.82.192.0/19 maxlen: 24
193.117.32.0/19 maxlen: 24
195.152.0.0/15 maxlen: 15
2a02:1620::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:35:d1:cc:76:d2:29:c6:81:97:90:15:10:a7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7f5485dc9f7f3d703847e6941f70e1dc826d520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:70:a2:de:89:b6:ec:1e:89:9c:9e:bf:df:
7c:2c:33:ca:84:dc:09:fc:28:52:6b:43:6c:38:26:
5e:52:15:7d:03:e0:e2:59:a1:c2:ec:94:d4:3d:51:
0d:d6:b0:bd:1e:70:d5:81:c2:89:28:dc:84:17:a4:
c3:c2:c8:f1:f1:7b:25:23:14:4c:68:61:37:d8:ff:
0e:a8:96:72:d5:f2:e1:d0:b0:6c:cb:f0:ed:d6:ec:
02:3b:29:f3:30:e4:d6:95:8d:25:5f:a1:3b:41:d7:
22:3a:8d:f5:0b:92:6b:55:1d:3b:4f:00:f8:0d:ba:
d9:a4:6f:b4:8b:62:1c:e8:da:de:51:2b:2d:0f:df:
02:93:be:0f:97:e4:06:17:a2:6f:69:b8:8e:71:c5:
b1:fa:f0:ef:48:8d:72:26:1c:91:d2:d6:76:ad:90:
b1:96:83:55:08:a3:93:38:7d:96:0b:7a:fd:21:6a:
8e:a0:18:f2:18:58:4f:ae:79:be:44:f1:02:21:b9:
7c:b8:ef:aa:6f:c6:4a:8c:fd:d5:be:38:c7:60:e7:
86:ae:58:23:92:6d:12:9e:5d:1a:2d:47:11:29:68:
b8:20:94:be:04:81:76:c1:e8:b6:ca:df:bb:5b:b9:
1d:89:cc:e3:bf:97:ca:dc:53:3e:28:85:01:36:b4:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:48:5D:C9:F7:F3:D7:03:84:7E:69:41:F7:0E:1D:C8:26:D5:20
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/1_VIXcn389cDhH5pQfcOHcgm1SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.101.0.0/16
154.8.0.0-154.8.47.255
154.32.0.0/16
193.82.96.0-193.82.159.255
193.82.192.0/19
193.117.32.0/19
195.152.0.0/15
IPv6:
2a02:1620::/32
Signature Algorithm: sha256WithRSAEncryption
89:48:99:74:19:4c:9b:5f:b0:97:16:b1:b1:8a:57:c5:ba:12:
e4:be:d8:98:ae:64:5e:12:6b:e7:f1:41:08:c0:7b:a4:73:a8:
c0:b6:5a:19:ad:40:8e:06:50:ea:a0:c0:b6:06:51:3c:09:72:
0a:bd:00:dd:f7:8f:c3:45:37:10:a9:8a:0a:93:bb:55:28:0a:
d2:00:4d:ed:32:bd:73:f9:54:45:83:5a:80:d6:92:43:a4:d7:
4f:b5:8f:96:b4:ce:d2:d9:8f:2f:49:95:a0:dc:c1:0b:c8:18:
57:20:b1:5c:ae:ee:9c:bc:9a:76:ce:5c:57:18:1a:2e:07:64:
48:26:d2:aa:49:ef:2a:2c:3e:37:0c:80:d9:25:29:4c:3c:38:
7a:5a:45:d9:45:4a:ac:5a:76:56:aa:8c:f6:f7:c6:83:70:70:
70:57:90:f6:bf:94:b7:61:0a:03:20:e9:8e:91:ea:55:48:82:
4c:9d:d6:71:d0:d0:31:64:66:52:89:18:e9:93:23:fc:e3:97:
29:72:83:22:08:61:ee:83:1c:49:f6:f7:12:bf:de:a4:9d:b3:
0b:b2:4a:1d:4e:e4:d9:80:e7:18:62:ba:0a:ac:08:d5:f2:85:
a3:e1:2a:d3:80:b2:d0:62:69:96:ac:4d:5b:54:6c:ea:75:2d:
b4:a8:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:17 2025 by rpki-client