Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa
File: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (raw, json)
Hash identifier: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=
Subject key identifier: B0:C5:42:BB:ED:1B:25:F2:AA:CA:F4:D9:1C:5B:D2:9A:F1:5D:5F:21
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019424458C6431E32BAC81ECDEB6502ED129
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39729
IP address blocks: 81.88.48.0/20 maxlen: 24
185.2.4.0/22 maxlen: 24
2a01:8100::/29 maxlen: 48
2a01:8100:2000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8c:64:31:e3:2b:ac:81:ec:de:b6:50:2e:d1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0c542bbed1b25f2aacaf4d91c5bd29af15d5f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:aa:de:03:98:21:d1:c2:1c:61:8d:9c:a4:
25:65:6f:9f:fb:09:a8:a1:28:0c:a7:e8:d7:d5:87:
67:f2:aa:f1:3d:7b:8d:32:48:21:7b:98:ea:ee:2b:
e0:0a:c3:79:f3:15:57:bb:22:3b:d6:e9:8e:3b:4e:
c4:3b:8f:63:91:ed:ed:5c:20:b9:41:31:37:65:cf:
7d:f9:0b:8c:78:3a:7d:cd:3d:52:e5:cd:2f:76:24:
30:3e:28:e1:9f:08:08:b0:7b:1c:b2:d8:75:26:b0:
0e:36:7d:d6:bc:63:f8:12:48:8f:e7:e8:3a:55:6d:
57:88:5d:6c:4d:9e:b8:9b:a3:4f:3a:7e:05:17:af:
ce:08:f5:cd:f8:5d:41:43:05:b7:a4:3a:5a:32:d0:
dc:1c:a9:fd:16:03:44:15:1a:32:24:ff:ec:58:7c:
2a:49:fe:83:8e:c7:71:a4:c2:5e:af:b5:9c:65:fd:
cb:33:4a:64:c3:fa:66:06:9a:1a:02:e8:db:2e:30:
09:5f:a4:c8:b6:5c:40:69:6a:48:65:a1:41:86:e6:
8a:1b:f5:d8:81:b2:70:8b:76:db:e7:03:24:ce:33:
40:41:e7:a5:56:11:80:7d:2e:f8:29:a6:49:7b:c3:
91:c9:0e:5f:e1:b7:0a:14:a8:3d:64:70:3b:ac:63:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C5:42:BB:ED:1B:25:F2:AA:CA:F4:D9:1C:5B:D2:9A:F1:5D:5F:21
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.48.0/20
185.2.4.0/22
IPv6:
2a01:8100::/29
Signature Algorithm: sha256WithRSAEncryption
9e:41:99:07:74:cc:78:ef:68:68:62:b7:20:2a:f5:d9:1f:6c:
13:fa:b4:7d:4f:16:e6:f7:eb:01:38:a3:b9:ae:ac:c5:c5:5e:
02:10:33:e9:1c:c9:f3:11:68:27:ae:73:f7:52:b7:1e:c0:7c:
34:51:e0:cf:66:58:ad:89:66:10:89:41:28:2d:e0:db:2a:01:
9a:5b:0c:68:e0:f3:73:eb:84:01:7b:a3:b7:39:68:97:90:dc:
c3:bd:d0:32:c3:0f:75:1f:11:bb:62:e9:51:0e:42:a6:6a:24:
1b:a2:61:2a:2f:51:d5:23:cf:64:9c:f2:54:d0:8a:20:95:91:
38:c7:a8:8c:1c:a4:27:8e:b9:d6:d9:8d:ee:09:4b:c6:74:21:
b7:15:89:77:50:f7:aa:36:b5:2f:ad:c2:23:f6:84:64:a9:9a:
5e:c7:6e:1a:95:be:96:2b:30:26:ce:2b:77:f6:4a:01:84:4b:
12:24:b0:5c:3f:7d:36:f3:4c:46:47:c6:77:be:a9:f1:e9:e3:
37:03:6c:95:c6:ca:20:30:27:a9:f5:56:34:23:c8:87:45:f2:
26:ec:b4:75:fa:da:2a:ac:99:c8:1c:a3:d7:52:6e:a8:a6:e6:
86:e9:3d:74:c9:ed:64:8d:4a:2e:8d:4f:e9:3b:af:0e:2e:3e:
e2:6f:54:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:28 2025 by rpki-client