Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/atQq239lyy1_USnx5HxIvR_xCQ0.roa
File: atQq239lyy1_USnx5HxIvR_xCQ0.roa (raw, json)
Hash identifier: 2VBlcsxe+dkdGVdmp9n4L26XGB1hz2kRzV8Tog1oGdY=
Subject key identifier: 6A:D4:2A:DB:7F:65:CB:2D:7F:51:29:F1:E4:7C:48:BD:1F:F1:09:0D
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 01942369BED4F3170F064003835BB5470EE5
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/atQq239lyy1_USnx5HxIvR_xCQ0.roa
Signing time: Wed 01 Jan 2025 19:48:40 +0000
ROA not before: Wed 01 Jan 2025 19:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44700
IP address blocks: 81.27.224.0/22 maxlen: 24
88.151.64.0/21 maxlen: 24
93.89.0.0/22 maxlen: 24
95.129.208.0/21 maxlen: 24
185.6.68.0/22 maxlen: 24
185.59.12.0/22 maxlen: 24
2a02:17f8::/32 maxlen: 48
2a02:21e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:be:d4:f3:17:0f:06:40:03:83:5b:b5:47:0e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Jan 1 19:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ad42adb7f65cb2d7f5129f1e47c48bd1ff1090d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:44:79:7f:90:b9:8f:f8:a2:6c:a2:34:d0:37:
d2:2a:d2:81:10:65:0e:00:90:72:16:b0:57:da:07:
ea:54:0f:68:1c:c7:7a:25:6e:36:ea:15:08:6e:a8:
d4:81:5a:92:f8:ad:2a:8a:f3:26:2b:0b:da:d0:95:
1d:54:6a:68:ca:15:48:c8:96:7f:1d:20:49:73:fd:
38:18:e2:b2:22:b7:81:fc:e7:81:8a:bb:06:6f:a2:
d5:47:70:71:ba:4f:a6:46:e7:8e:e4:f3:5b:e6:3f:
3b:97:8d:0d:6a:be:8d:5a:08:9b:4b:c1:06:7d:0c:
b6:90:4b:d9:8a:46:11:a4:5e:47:45:93:35:5c:3a:
be:47:ef:44:af:ac:d6:e8:cb:79:13:27:cc:62:fd:
38:d9:a4:75:16:1a:ac:86:c1:3c:66:f9:38:8c:c9:
a6:15:bb:6f:4d:78:ba:9d:6d:ed:34:93:a3:a4:5f:
fa:cd:b3:1c:65:b6:ee:e2:4b:ca:7b:97:c5:5d:aa:
c5:1e:28:b4:f3:51:49:b8:92:9a:e1:54:36:70:71:
ae:1d:48:2e:42:cf:76:c7:75:8c:c8:e8:a1:2a:1e:
7c:cc:07:9d:0d:f2:25:cf:99:3e:64:e2:3c:71:7c:
53:46:75:00:5b:47:c5:2a:2a:01:eb:81:3a:fa:dc:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D4:2A:DB:7F:65:CB:2D:7F:51:29:F1:E4:7C:48:BD:1F:F1:09:0D
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/atQq239lyy1_USnx5HxIvR_xCQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.224.0/22
88.151.64.0/21
93.89.0.0/22
95.129.208.0/21
185.6.68.0/22
185.59.12.0/22
IPv6:
2a02:17f8::/32
2a02:21e0::/32
Signature Algorithm: sha256WithRSAEncryption
84:2f:21:08:9d:15:9d:3b:39:c4:ab:64:23:d8:11:cb:bf:62:
13:b5:0f:fe:3e:38:76:04:43:d5:9e:58:be:a0:be:c5:d9:6b:
73:47:93:5a:9a:58:04:78:bd:1c:93:0a:b4:96:cc:93:6a:4e:
bc:30:42:17:c8:4e:bd:60:78:b7:25:53:8b:cd:97:c0:1d:b1:
d9:36:eb:db:0d:a0:e6:b6:cb:f9:80:0a:54:98:1a:c0:12:d0:
f4:f9:01:f4:86:41:38:ea:05:b2:f0:0c:fd:4b:e7:a3:14:81:
10:69:e1:fa:ba:de:da:83:cb:df:7e:82:33:03:d7:41:3b:12:
1c:24:fa:75:46:95:35:a6:39:4a:07:a4:43:af:74:73:61:8c:
08:4c:1c:da:13:6c:ea:eb:fe:4b:68:4b:67:31:ae:49:64:0e:
8f:e0:53:90:29:ac:df:c8:43:27:58:29:b2:42:74:37:b1:b1:
2e:36:b5:27:43:ee:59:22:6a:10:c0:8c:71:6c:01:68:1c:28:
10:78:83:a8:e2:f4:85:d4:cd:7a:eb:c1:da:21:d6:e0:e6:c2:
57:da:3e:09:c8:27:5c:d9:07:6f:6f:a1:e0:1e:1a:43:7c:77:
bb:0b:01:c6:d7:62:44:df:a2:d3:a9:d5:69:c2:37:14:eb:3c:
09:8f:3e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:47 2025 by rpki-client