Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa
File: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (raw, json)
Hash identifier: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=
Subject key identifier: E6:FB:D9:2C:5B:95:CE:B9:5F:54:48:E0:59:54:92:BC:3C:D6:CD:87
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 01941FFA6FB2ABC9AAE15DEE9D25883E865B
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29240
IP address blocks: 185.77.244.0/22 maxlen: 22
185.217.236.0/22 maxlen: 22
185.244.244.0/22 maxlen: 22
193.142.16.0/23 maxlen: 23
213.255.160.0/19 maxlen: 19
2a01:18::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6f:b2:ab:c9:aa:e1:5d:ee:9d:25:88:3e:86:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6fbd92c5b95ceb95f5448e0595492bc3cd6cd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:4c:3d:89:74:8e:23:49:c3:53:26:cb:df:
5a:e0:e6:72:14:3e:48:75:2d:03:b2:a3:58:23:76:
69:6c:99:af:c3:40:ea:7b:70:5a:1e:ef:5d:f1:91:
ba:75:d3:d3:53:2f:8f:c8:da:33:a2:32:e5:ba:ca:
23:d4:52:47:f5:74:bc:eb:bb:f8:c5:aa:fb:c3:31:
3e:cb:fe:8a:08:6d:34:86:af:47:3b:a1:66:f1:c4:
ba:4e:9c:3b:63:57:a1:e0:72:ff:20:47:40:bf:2e:
e7:2d:94:1a:d1:b5:50:5b:b4:1c:46:78:1a:51:a4:
07:90:69:39:a7:e2:f4:a7:c9:5d:19:e1:c8:b1:1d:
9a:15:7f:ea:84:ed:96:5b:86:19:ca:6f:be:6c:36:
23:da:a9:8c:f4:02:7c:65:91:58:58:44:25:9a:f8:
7f:7d:71:fc:bc:03:d3:3a:05:33:74:01:f2:3f:b0:
3f:bb:b8:b6:db:cf:89:1f:4f:e1:e0:73:a9:07:cd:
08:3f:c6:12:28:8a:a3:07:2f:9e:8d:23:f3:55:5d:
b1:e3:34:75:66:1e:3e:ce:8d:f4:67:56:ac:c0:fc:
dd:e6:8d:56:0e:85:03:ae:a4:1e:38:48:b4:1f:5c:
2b:89:7e:8f:29:5b:b1:dd:28:b9:49:b7:ef:d1:4d:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FB:D9:2C:5B:95:CE:B9:5F:54:48:E0:59:54:92:BC:3C:D6:CD:87
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.244.0/22
185.217.236.0/22
185.244.244.0/22
193.142.16.0/23
213.255.160.0/19
IPv6:
2a01:18::/32
Signature Algorithm: sha256WithRSAEncryption
74:9c:c0:29:2b:d3:20:14:4c:98:6f:cb:95:cc:6a:62:ec:0f:
a5:1f:66:d3:c2:0c:73:f2:3e:f4:0f:88:70:e9:62:a0:3f:59:
09:09:3a:2c:f5:6c:9c:8c:d0:0e:02:19:ac:a7:06:a1:1c:09:
0b:36:cd:8b:d8:a0:af:fe:12:15:06:f5:2d:05:54:09:10:8b:
c0:83:e3:b2:6e:d3:f3:2b:1d:e2:62:b3:bf:e9:f4:fb:01:d6:
d4:f3:70:14:fa:47:9e:5d:cc:63:ab:44:c8:ad:3f:5b:da:7f:
3e:d9:18:7e:ac:02:27:f2:b5:4b:82:1f:e5:a3:6f:24:78:81:
cb:1c:d0:9d:db:4c:48:d5:30:f9:a9:75:dd:01:54:29:41:e3:
f6:c9:a9:d7:99:59:5e:a4:1f:74:0c:7a:53:18:7c:ef:8b:39:
8d:55:80:6a:4a:9f:9c:c6:ab:25:3a:52:eb:bb:3d:f5:4f:8b:
9a:74:0f:04:07:4c:ec:de:d3:d2:6c:e7:af:95:f8:24:c5:0a:
cc:4e:87:bd:78:b9:d7:4c:23:a0:10:29:4d:9d:6c:1f:34:d5:
f4:7a:24:86:d8:ff:ad:89:b9:63:1c:16:7b:62:3b:bf:38:32:
4c:1d:f7:7a:42:23:6c:82:63:e3:da:6b:2c:64:d5:45:e5:bd:
34:50:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:37 2025 by rpki-client