Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa
File: u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa (raw, json)
Hash identifier: rQgLckSzeaLo6eafpSN7kpYx8Hw/jY/LMChw/HsMXX8=
Subject key identifier: BB:9B:86:76:FE:DA:84:C3:78:55:37:5A:32:06:DB:A4:B4:57:DE:01
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019425FC7A319A241CCF6BD4D1685C8256A2
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa
Signing time: Thu 02 Jan 2025 07:48:10 +0000
ROA not before: Thu 02 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12312
IP address blocks: 62.26.0.0/15 maxlen: 23
62.144.0.0/16 maxlen: 16
62.246.0.0/16 maxlen: 16
79.140.176.0/20 maxlen: 20
80.83.96.0/20 maxlen: 20
185.210.52.0/23 maxlen: 23
194.112.16.0/20 maxlen: 20
195.52.0.0/16 maxlen: 23
195.63.0.0/16 maxlen: 16
195.78.160.0/19 maxlen: 19
195.185.0.0/16 maxlen: 16
212.172.0.0/16 maxlen: 16
2001:4090::/32 maxlen: 32
2001:4091::/32 maxlen: 32
2a01:5c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7a:31:9a:24:1c:cf:6b:d4:d1:68:5c:82:56:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Jan 2 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb9b8676feda84c37855375a3206dba4b457de01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:05:8b:18:f3:39:bf:80:92:f8:c5:7a:44:
d2:3e:61:65:d3:f3:58:06:c3:90:35:b5:1e:8e:13:
6e:a2:e9:3b:85:92:83:82:f9:92:b8:97:26:fe:52:
05:24:ed:58:c2:f5:59:45:87:05:64:cf:0f:70:2f:
22:c1:91:e4:df:c5:af:65:34:10:4e:12:f5:22:8b:
53:a0:49:6d:8b:45:ee:01:f5:38:46:6d:5e:f7:53:
a3:c3:e5:31:26:a4:14:2a:82:1c:49:c6:1f:0f:43:
e2:47:0f:28:2e:77:4c:71:c5:26:00:e2:27:6e:72:
80:12:af:e3:fb:dc:df:bd:3c:ed:43:18:05:47:0c:
0b:a9:fd:f3:f4:7b:21:00:6b:83:da:b8:3e:49:cc:
b5:8d:01:be:c4:41:22:04:d6:c9:ff:20:9b:b1:ad:
0b:79:a7:d3:bd:82:51:79:03:ad:df:55:2a:c4:8a:
58:f9:47:44:b1:5e:07:44:78:dc:2f:9b:3e:f7:92:
15:a3:28:58:ca:dc:3e:01:2a:8d:64:b7:dd:6f:11:
b0:a8:0b:4b:01:e3:57:fa:d6:2f:5d:89:52:af:90:
91:3e:51:ef:7a:97:4e:5d:fe:11:32:27:ff:16:2c:
c9:e7:2c:91:bd:8c:3e:c0:1a:37:a5:d2:49:27:55:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9B:86:76:FE:DA:84:C3:78:55:37:5A:32:06:DB:A4:B4:57:DE:01
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.26.0.0/15
62.144.0.0/16
62.246.0.0/16
79.140.176.0/20
80.83.96.0/20
185.210.52.0/23
194.112.16.0/20
195.52.0.0/16
195.63.0.0/16
195.78.160.0/19
195.185.0.0/16
212.172.0.0/16
IPv6:
2001:4090::/31
2a01:5c8::/32
Signature Algorithm: sha256WithRSAEncryption
4b:b0:ed:94:35:81:ce:32:32:63:b0:e4:6e:f0:83:22:3f:b6:
db:21:ee:4f:c6:a0:7e:80:d1:b3:74:7d:18:3b:b2:49:6a:01:
48:f7:78:70:0f:68:86:bb:a5:66:df:38:48:c3:a6:e9:56:fe:
53:45:f9:d7:e1:1c:0c:df:2a:c3:22:dc:aa:e5:2b:ee:ef:ab:
62:41:a9:b1:77:cd:cd:ff:5d:c4:1e:09:32:1d:5f:90:17:24:
8d:d2:72:ee:ee:32:24:fd:1d:db:0b:47:3c:17:f0:54:a7:56:
76:0e:16:8b:5a:8c:33:71:7a:d4:a3:62:50:0a:48:63:3b:af:
4c:ce:f7:a6:0a:15:06:30:2a:41:0b:a1:63:c1:da:d8:81:ce:
13:8d:36:b1:a9:f8:32:2b:f5:13:fe:73:f0:52:2c:c9:fb:ef:
55:aa:70:c8:18:e2:25:d5:29:b6:12:73:b3:0e:fc:03:91:6f:
5d:36:e4:4a:49:12:35:c2:2c:50:5b:b9:2d:af:9d:d0:92:be:
fb:d0:89:ef:28:71:8a:77:c4:74:4c:a3:e8:8d:20:e9:13:74:
6f:ee:2f:d6:f2:6c:cd:a8:c5:77:31:86:59:31:ea:01:bd:e6:
1c:51:ba:fe:d8:5e:16:de:7d:b8:0c:3a:50:16:f8:ad:25:d7:
e5:36:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:00:41 2025 by rpki-client