Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/2IgIKjFRZxy-bzZFKHn9K063leQ.roa
File: 2IgIKjFRZxy-bzZFKHn9K063leQ.roa (raw, json)
Hash identifier: TaUEcihPZQmLVAdKpeFJ7LvkJgT/8Wrq1d0eu+d7laE=
Subject key identifier: D8:88:08:2A:31:51:67:1C:BE:6F:36:45:28:79:FD:2B:4E:B7:95:E4
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 0194282309AF74C1BC62AEC81B684231AEE6
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/2IgIKjFRZxy-bzZFKHn9K063leQ.roa
Signing time: Thu 02 Jan 2025 17:49:32 +0000
ROA not before: Thu 02 Jan 2025 17:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 79.137.192.0/24 maxlen: 24
85.192.30.0/24 maxlen: 24
85.192.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:09:af:74:c1:bc:62:ae:c8:1b:68:42:31:ae:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Jan 2 17:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d888082a3151671cbe6f36452879fd2b4eb795e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:3c:1e:da:14:06:ed:46:4f:03:09:a9:4f:
6c:3e:83:2c:a1:3e:da:8d:c8:9a:49:2b:bd:72:4d:
85:ee:6e:31:f9:32:5f:b9:47:79:7a:d2:09:75:0c:
7d:db:fd:8d:a3:8e:67:d0:53:36:65:c4:64:0e:00:
73:fd:b5:1d:fb:3c:bd:5c:94:84:f4:e0:df:df:55:
d3:4a:dc:db:03:7c:7e:ec:5b:e8:53:b8:b2:3f:8c:
61:1c:17:13:a1:bf:5c:d0:0e:e0:93:7f:2d:6c:00:
73:d3:9e:9d:e2:b4:64:80:51:64:d4:0b:d2:0a:eb:
a2:43:73:b6:3b:5e:59:f0:08:cd:f9:17:5b:ce:db:
ef:0a:35:b5:5b:91:27:41:60:c0:9c:ed:ff:3c:44:
51:58:71:fe:2d:66:2c:8c:4c:0c:d2:21:f4:34:b4:
71:0b:fd:51:17:3d:1a:6d:f3:55:0a:b7:fb:9d:3a:
71:47:ed:77:b0:98:f5:d6:ed:8f:40:d6:c9:e7:d6:
1e:d6:79:ad:2b:58:12:17:a3:b1:38:e2:9b:05:7d:
7c:98:36:b4:f8:72:ec:cf:36:51:ec:0b:0d:01:d4:
1e:85:52:f3:66:b5:3b:63:e8:51:1b:b6:52:ac:98:
2e:91:8c:3a:c7:da:a8:ba:81:48:7d:24:4d:10:b7:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:08:2A:31:51:67:1C:BE:6F:36:45:28:79:FD:2B:4E:B7:95:E4
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/2IgIKjFRZxy-bzZFKHn9K063leQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.192.0/24
85.192.30.0/24
85.192.56.0/24
Signature Algorithm: sha256WithRSAEncryption
69:09:25:d3:5c:bb:a4:13:31:32:15:c7:6f:6f:08:2b:d4:5b:
58:00:17:7b:28:c2:26:22:77:b5:2a:ea:f2:86:f0:16:6b:10:
6d:79:9c:e9:ea:c8:b1:c8:1b:13:ad:5a:01:5c:ac:20:97:52:
7e:99:b1:05:03:68:6a:ee:35:65:9d:ec:16:47:c5:0a:d2:d7:
9b:84:8f:9e:ba:93:57:0e:ac:be:57:a3:09:a8:34:16:47:81:
b0:79:5e:4e:d6:9c:61:3d:42:d4:41:ec:3f:19:99:51:7c:19:
ae:e1:49:9e:f8:08:e3:f1:49:23:27:b4:bb:b3:5b:b5:c7:ef:
03:53:b5:0c:e8:e8:2f:f6:b7:e4:d2:b7:ea:3b:a8:e5:73:d3:
d1:dd:ba:e4:88:31:71:6f:84:43:03:1c:82:2d:b8:c6:3e:39:
26:b4:ee:b9:71:16:c6:02:9d:47:9e:06:30:c5:b3:e1:a9:0d:
83:75:a1:8a:a7:37:f8:ce:01:54:b0:41:1d:7a:65:88:b0:95:
3f:bd:b6:cf:52:35:75:d3:66:af:e2:3a:58:14:dc:20:06:dd:
6f:b6:88:c1:0b:6b:3e:00:8c:f7:01:6e:2b:56:75:83:a2:4a:
3a:cb:5b:6b:76:9f:ea:db:dc:cb:92:eb:d5:dc:81:06:70:7c:
d2:e7:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:45:40 2025 by rpki-client