Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/PIvjtjk0bcL1uBI75s2x-HEScf0.roa
File: PIvjtjk0bcL1uBI75s2x-HEScf0.roa (raw, json)
Hash identifier: zVKNd6h1T8gwJhJ85/3bttBRHKLXvm4f0amj7KVDyew=
Subject key identifier: 3C:8B:E3:B6:39:34:6D:C2:F5:B8:12:3B:E6:CD:B1:F8:71:12:71:FD
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 0194252212916E4A688285D3A0C151169940
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/PIvjtjk0bcL1uBI75s2x-HEScf0.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21351
IP address blocks: 5.187.96.0/19 maxlen: 24
46.238.128.0/18 maxlen: 24
93.121.128.0/17 maxlen: 24
95.138.0.0/17 maxlen: 24
185.29.48.0/22 maxlen: 24
213.16.0.0/19 maxlen: 24
213.188.160.0/19 maxlen: 24
2a02:1390::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:12:91:6e:4a:68:82:85:d3:a0:c1:51:16:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c8be3b639346dc2f5b8123be6cdb1f8711271fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:b0:09:52:2a:7a:13:c9:f7:bc:ea:cd:a6:
a1:d9:00:d4:ba:34:d9:5e:4d:6b:17:fc:8e:55:af:
51:28:0f:51:d9:61:63:77:c5:31:1c:14:38:5d:d2:
72:3d:93:05:4a:59:06:9d:99:79:73:bc:6a:8b:91:
94:82:cb:2a:ac:24:51:07:07:a8:6f:34:41:cc:19:
7a:7c:78:48:25:78:9f:4d:d7:74:73:98:3a:50:30:
1e:4d:04:07:73:ec:11:2b:de:3c:d9:57:1b:8b:c8:
e9:cf:c2:07:1a:0d:27:03:bf:57:14:53:90:6d:5f:
19:1e:c8:4d:57:a4:17:d7:db:b4:9f:c7:50:f7:59:
94:da:64:90:9a:48:4d:83:a2:3a:e4:f4:b5:b9:35:
33:06:c7:4f:a9:12:b3:86:67:97:82:ec:4e:b0:a1:
17:b0:1e:40:1c:f1:6b:5f:1a:26:5c:38:61:ed:65:
ba:aa:5b:32:22:d1:53:99:13:1c:b9:57:c2:fa:7b:
51:d2:7b:f3:07:e9:ee:55:04:64:08:29:9a:30:4c:
ac:54:3f:ad:da:b0:7d:d5:c0:c8:65:bc:ae:ed:1f:
cb:83:80:26:0e:27:5a:82:50:0a:33:8f:c7:d9:a1:
83:f3:be:98:96:0f:41:8e:f9:60:fe:33:c5:50:66:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:E3:B6:39:34:6D:C2:F5:B8:12:3B:E6:CD:B1:F8:71:12:71:FD
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/PIvjtjk0bcL1uBI75s2x-HEScf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.96.0/19
46.238.128.0/18
93.121.128.0/17
95.138.0.0/17
185.29.48.0/22
213.16.0.0/19
213.188.160.0/19
IPv6:
2a02:1390::/29
Signature Algorithm: sha256WithRSAEncryption
67:b8:53:ac:e2:75:76:54:96:3f:3c:65:6f:cf:31:d9:6d:7c:
bc:94:8a:92:0c:e2:d2:06:cb:2e:b2:ec:0a:b6:02:74:f1:50:
da:26:fd:07:bf:a7:36:8d:fb:a7:d3:14:9a:5e:be:4b:8d:e5:
c5:fc:fa:86:10:94:21:ab:49:87:98:9c:fb:ff:92:06:1f:42:
6a:3a:79:6a:8a:5a:9f:2c:4f:62:9c:2e:b5:69:95:cd:9f:2a:
e7:61:c4:97:82:26:4f:4b:aa:75:8d:f2:7e:a1:d4:ef:ec:44:
b8:4e:6e:c2:ce:38:cb:e6:c1:d9:c3:f5:48:58:02:0e:0d:73:
b8:8d:67:87:73:28:e6:cf:24:e6:e5:a4:60:db:1e:c9:c1:b9:
d3:22:f6:9b:44:2c:9b:ec:20:64:a8:32:ad:24:be:0f:39:5e:
1f:b4:0c:09:ee:bc:48:ce:d5:82:75:2b:96:dd:50:54:77:ca:
c6:7d:16:a7:7e:2b:f2:e0:7b:dd:8b:b5:11:12:2d:7f:2b:1e:
99:76:18:7d:58:76:9c:d2:76:81:a8:bd:da:6b:74:af:2c:af:
f9:e3:0e:29:89:f9:56:30:b7:ea:9d:19:e9:bf:7f:d9:8f:c8:
68:75:a7:3c:f7:6b:91:de:bc:76:63:14:03:0d:b9:3e:66:27:
f4:29:b5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:43 2025 by rpki-client