Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/rVWQvLYGP2S2DxwegJIuD9LE0zc.roa
File: rVWQvLYGP2S2DxwegJIuD9LE0zc.roa (raw, json)
Hash identifier: YYoqsH7NIJbf4ECO6jy2JznJQ6ZNNE1bY9thHu8to+8=
Subject key identifier: AD:55:90:BC:B6:06:3F:64:B6:0F:1C:1E:80:92:2E:0F:D2:C4:D3:37
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 0194715B263FFA5FC6AC2E6A1CC3B38D4DD9
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/rVWQvLYGP2S2DxwegJIuD9LE0zc.roa
Signing time: Thu 16 Jan 2025 23:03:06 +0000
ROA not before: Thu 16 Jan 2025 23:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24953
IP address blocks: 80.64.140.0/22 maxlen: 22
83.216.192.0/20 maxlen: 20
89.185.96.0/19 maxlen: 19
91.220.239.0/24 maxlen: 24
185.34.196.0/22 maxlen: 22
185.167.240.0/22 maxlen: 24
185.213.124.0/22 maxlen: 22
185.224.120.0/22 maxlen: 22
195.95.163.0/24 maxlen: 24
2001:1ad0::/32 maxlen: 32
2001:1ad0:c4fc::/46 maxlen: 48
2a0b:c200::/29 maxlen: 32
2a0b:c200:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:71:5b:26:3f:fa:5f:c6:ac:2e:6a:1c:c3:b3:8d:4d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jan 16 23:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad5590bcb6063f64b60f1c1e80922e0fd2c4d337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:bd:11:b8:07:3b:6c:81:58:cb:64:62:38:
fb:a1:f0:b9:37:ba:35:34:2a:c3:ce:d0:82:5a:2f:
1b:7f:bc:4a:3d:9b:94:12:a9:ed:1e:15:67:43:9a:
8d:f8:c0:e9:23:c2:c2:08:c2:a7:e5:9f:fd:d4:9b:
1f:47:93:b9:5e:99:47:62:2a:b9:39:4f:cd:5c:77:
6e:f4:fb:93:96:22:6f:35:8f:e7:71:15:6f:8e:42:
dd:5e:7a:a8:e5:59:e9:fe:16:58:52:d7:62:41:ce:
90:e7:2e:bb:7c:f7:02:29:68:87:5c:44:e6:aa:42:
45:da:05:60:46:d2:d4:02:03:00:d3:6c:7a:1c:f8:
c9:f6:52:71:b2:6f:5d:2b:66:24:ee:f6:73:97:ce:
be:e7:7f:e5:42:00:bd:79:c3:59:55:65:2f:63:f6:
59:dd:a2:bd:40:08:68:2c:16:e7:ba:9e:34:d6:e0:
71:ea:af:27:69:eb:85:d3:4a:e6:5c:27:c5:30:eb:
ab:ed:fd:ef:b9:e3:9f:10:38:d9:04:bd:f0:ce:b7:
8b:25:6b:f3:a9:3f:36:3e:9a:8e:22:71:6a:8b:0b:
ae:7a:51:fb:f7:dc:85:26:32:63:dc:1c:d0:5a:91:
18:b4:c2:bf:dd:7e:89:7b:31:8e:5f:6c:55:5f:62:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:90:BC:B6:06:3F:64:B6:0F:1C:1E:80:92:2E:0F:D2:C4:D3:37
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/rVWQvLYGP2S2DxwegJIuD9LE0zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.140.0/22
83.216.192.0/20
89.185.96.0/19
91.220.239.0/24
185.34.196.0/22
185.167.240.0/22
185.213.124.0/22
185.224.120.0/22
195.95.163.0/24
IPv6:
2001:1ad0::/32
2a0b:c200::/29
Signature Algorithm: sha256WithRSAEncryption
85:02:b6:57:66:72:01:39:44:91:57:06:5f:89:7a:88:81:49:
d6:35:d0:10:31:c5:44:e0:33:e7:5c:b4:d1:03:60:43:27:ed:
52:0f:7b:a2:74:d5:28:9d:42:12:d0:20:8b:23:a5:2c:ea:09:
9b:7d:8a:99:18:aa:3d:3a:df:41:92:87:09:0c:5f:22:87:b1:
da:de:b1:8b:bb:7c:7c:74:37:af:24:55:5c:da:f3:0a:08:a1:
5f:92:a4:f2:72:c0:12:1e:c6:6c:50:b5:7f:d9:46:e4:c2:f5:
cc:69:77:38:d1:fa:d9:fa:c6:f4:ab:7c:1a:64:f7:a3:2c:f6:
4f:e8:7c:c6:a8:d8:9b:d0:58:70:34:30:43:a7:de:d5:15:d7:
d9:7a:ec:2e:c1:c1:e8:72:23:93:b6:71:50:e6:07:43:42:f6:
6d:af:d1:ea:13:ee:9d:58:0d:42:c0:5a:2c:a1:72:a9:ed:18:
8d:61:13:fc:d3:08:f7:ac:f3:1f:14:81:ad:b5:dc:a0:fc:43:
1d:12:ed:b1:bd:83:c4:05:51:1a:90:4f:48:d8:d0:7e:46:42:
56:5a:99:cc:b6:35:36:08:47:b0:15:b5:4a:9a:e7:fc:31:bd:
c8:a7:14:83:61:98:51:d2:dd:99:a3:7c:2e:7e:0b:7f:56:e3:
9c:e6:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:31 2025 by rpki-client