Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Tt9cDnLqp2SOeeoElhH21A1JSmo.roa
File: Tt9cDnLqp2SOeeoElhH21A1JSmo.roa (raw, json)
Hash identifier: g7FEq0smlg0TkkjLfygzTEzTD8KkWT+7GvQHUxPqdJo=
Subject key identifier: 4E:DF:5C:0E:72:EA:A7:64:8E:79:EA:04:96:11:F6:D4:0D:49:4A:6A
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 019421B17DD2B66C4B59FBB0A9B31CC74262
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Tt9cDnLqp2SOeeoElhH21A1JSmo.roa
Signing time: Wed 01 Jan 2025 11:47:47 +0000
ROA not before: Wed 01 Jan 2025 11:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 95.175.64.0/19 maxlen: 32
185.247.228.0/22 maxlen: 32
185.251.44.0/22 maxlen: 32
185.251.248.0/22 maxlen: 32
195.66.216.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:7d:d2:b6:6c:4b:59:fb:b0:a9:b3:1c:c7:42:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Jan 1 11:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4edf5c0e72eaa7648e79ea049611f6d40d494a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:24:fe:77:72:2a:f2:a2:0d:52:5b:12:c8:
88:9a:2d:28:bc:f2:4c:1e:46:f8:14:9b:cf:85:90:
01:d1:dc:70:d2:06:bf:cb:bb:09:3b:8c:0c:a7:cb:
86:88:7a:38:6a:75:74:15:02:11:57:42:9d:11:7a:
7a:ed:6c:a5:91:98:73:5f:c1:bb:b0:16:07:79:fc:
65:5e:a3:f2:43:85:f1:96:35:30:fb:0c:f1:c9:79:
40:f6:95:2a:dc:aa:0a:49:64:a8:d0:41:37:ac:0f:
7a:17:05:a9:44:b4:3a:1a:df:2b:aa:c1:d5:ea:dd:
e2:1e:c9:66:13:64:21:ee:b8:ac:35:10:4c:a1:8a:
07:3f:53:f8:44:88:7b:f8:a6:01:5f:24:74:9f:4a:
d8:27:20:ab:32:46:f0:92:8e:a8:1e:2b:39:de:ff:
32:3e:ff:58:2e:1c:79:e0:dc:0d:2e:4b:c0:ca:7b:
11:38:0d:b1:27:59:ab:c4:5e:c4:ee:f5:cf:a6:f8:
82:01:5a:2d:d5:e2:7e:46:92:15:24:ea:9c:f5:75:
bc:d9:33:0a:a8:28:c1:fe:0f:eb:a6:25:05:49:c4:
07:cd:f9:e5:0c:16:89:40:26:81:ad:2f:c9:5c:1f:
45:70:65:3d:83:b5:c2:c2:8f:78:92:82:fe:da:a2:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DF:5C:0E:72:EA:A7:64:8E:79:EA:04:96:11:F6:D4:0D:49:4A:6A
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Tt9cDnLqp2SOeeoElhH21A1JSmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.175.64.0/19
185.247.228.0/22
185.251.44.0/22
185.251.248.0/22
195.66.216.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:da:12:31:60:b2:23:bc:3c:ea:3f:82:bc:6a:e4:a5:f5:d1:
ec:34:1b:b8:8d:fc:bf:e8:1a:9c:28:6a:63:90:f1:50:eb:f0:
e9:0f:32:1a:e4:04:23:50:6f:de:8f:cc:50:60:c6:45:8c:b8:
d4:51:75:2d:54:b0:23:3c:a5:8b:00:8f:9b:b4:9e:cf:21:ac:
bb:20:90:2a:55:78:d6:21:f1:ae:1b:eb:19:64:26:60:d0:88:
b8:79:db:7e:10:33:c5:ba:0a:93:ec:94:9a:6b:ad:7e:99:e5:
25:74:7e:26:da:91:c9:59:0b:ad:b2:7c:ed:af:fc:c0:0f:98:
fe:de:3b:09:6e:96:06:af:7f:ae:ed:9a:ac:85:b5:95:19:d5:
9d:fb:86:15:9f:6a:22:3c:b4:4c:04:7b:fa:6f:25:d6:b7:e9:
9e:9b:77:7b:7d:d3:54:dd:f1:ed:48:23:b7:cc:d5:01:78:20:
fa:47:22:df:a7:3c:bb:df:a0:f4:a2:b7:53:12:ec:6e:13:f4:
6a:f8:7b:c4:16:04:fc:b5:5a:14:b6:a6:bb:02:79:79:a1:df:
75:6d:89:e5:8f:0e:ff:bb:4b:0e:e7:11:44:92:a7:b6:10:14:
d9:5b:d9:54:ad:89:48:73:f3:c1:c9:b8:10:00:44:86:7f:d5:
36:7e:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:13 2025 by rpki-client