Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/1-K85qD4oivLUF1xQTVdq9r6NP7E.roa
File: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (raw, json)
Hash identifier: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=
Subject key identifier: F8:AF:39:A8:3E:28:8A:F2:D4:17:5C:50:4D:57:6A:F6:BE:8D:3F:B1
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 019420D5CE2AF09A2345347C08FB7AB38C9A
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/1-K85qD4oivLUF1xQTVdq9r6NP7E.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12824
IP address blocks: 46.41.128.0/18 maxlen: 24
46.242.128.0/17 maxlen: 24
62.129.192.0/18 maxlen: 24
79.96.0.0/16 maxlen: 24
89.161.128.0/17 maxlen: 24
188.128.128.0/17 maxlen: 24
212.85.96.0/19 maxlen: 24
2a02:25a8::/29 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ce:2a:f0:9a:23:45:34:7c:08:fb:7a:b3:8c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8af39a83e288af2d4175c504d576af6be8d3fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:b7:75:10:50:68:b4:3f:f2:53:84:93:1f:
10:fe:48:15:83:60:8b:56:d2:49:ae:32:ed:7b:ad:
54:94:f3:ae:f3:f0:6a:c4:24:4c:89:3b:d6:b6:ee:
c4:fa:d7:bd:48:d0:cd:4a:a6:d6:c1:62:ed:7b:93:
aa:cc:90:56:1d:ad:9f:17:a5:1e:dc:ff:a6:e0:7b:
5e:34:07:e4:b7:de:0d:19:0e:7c:91:b1:46:d5:77:
c9:be:a4:15:5b:e6:1b:62:b8:20:81:27:33:9a:2d:
9e:29:6f:a6:98:8d:81:79:b2:f1:e4:68:1c:03:8c:
e4:2f:17:79:9a:a2:62:12:23:eb:7b:ac:c7:3f:7a:
43:d8:60:69:bc:c9:87:bd:03:00:60:49:af:22:2e:
eb:cb:e6:5e:4b:5f:fc:9c:47:dc:5b:6e:8c:a9:31:
3b:c6:82:3a:e8:66:aa:66:90:9e:46:dd:37:f6:63:
23:bb:78:6b:09:99:47:c4:1a:53:9d:88:04:4f:f9:
a3:8d:98:15:10:cb:0c:95:cb:6e:36:fb:4e:8d:4f:
99:94:6a:68:ee:39:84:fe:67:bc:24:d0:cc:8d:53:
b3:01:85:bc:96:7e:2d:81:c9:b1:ee:09:3a:6a:12:
82:c6:00:80:7b:fa:3c:e6:55:c2:5e:46:99:88:0a:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:39:A8:3E:28:8A:F2:D4:17:5C:50:4D:57:6A:F6:BE:8D:3F:B1
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/1-K85qD4oivLUF1xQTVdq9r6NP7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.41.128.0/18
46.242.128.0/17
62.129.192.0/18
79.96.0.0/16
89.161.128.0/17
188.128.128.0/17
212.85.96.0/19
IPv6:
2a02:25a8::/29
Signature Algorithm: sha256WithRSAEncryption
ab:35:c8:eb:d6:ee:44:97:c2:f4:10:ec:e4:97:c0:60:24:b3:
50:6a:29:f6:34:a0:80:46:d3:3f:e1:ea:1c:49:b8:2b:eb:b3:
fd:5e:a7:b0:17:4a:e4:eb:3f:06:24:c5:3a:c1:d3:d3:77:5b:
fd:9e:23:4e:ef:f8:0f:9f:5a:8b:d9:30:13:39:a8:8a:89:11:
c1:a3:8f:e6:45:1a:f5:71:68:a8:92:13:fb:65:cf:eb:ed:7b:
bd:b6:9b:bd:ea:b6:66:29:00:fd:2b:52:a4:aa:51:14:3d:01:
b4:b4:19:90:7f:f2:dc:ae:5c:59:60:f1:4c:f6:eb:5f:15:9c:
cc:4d:c0:78:b0:46:4e:87:03:3b:44:bf:dc:21:23:2a:0a:0c:
b3:5f:41:61:70:7d:f4:69:44:90:95:ba:c3:87:07:09:a5:79:
1b:9d:51:04:85:95:bc:6a:5f:54:ed:b0:26:91:62:30:de:5e:
e6:4e:a1:c1:5c:91:fd:cc:87:2f:27:b1:37:96:c8:35:28:cd:
e2:1f:28:d8:96:e9:9a:56:96:17:97:1d:e4:38:da:0c:1b:2c:
af:15:68:69:d8:d7:fb:17:0b:90:1a:2c:2f:1a:54:ca:2f:e2:
04:fb:fe:60:89:16:ce:77:e7:40:86:6c:b4:6f:65:29:b3:91:
cc:81:98:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:45 2025 by rpki-client