Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/aU9nU6J43VKML7pOttC9ZY6jQ98.roa
File: aU9nU6J43VKML7pOttC9ZY6jQ98.roa (raw, json)
Hash identifier: FbRy0Mzafv2hiOEuNsxPoMw70K3GoSJZXHuz7LnmQeE=
Subject key identifier: 69:4F:67:53:A2:78:DD:52:8C:2F:BA:4E:B6:D0:BD:65:8E:A3:43:DF
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 01942444E6DBDB09E77F536D1363615E955A
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/aU9nU6J43VKML7pOttC9ZY6jQ98.roa
Signing time: Wed 01 Jan 2025 23:48:02 +0000
ROA not before: Wed 01 Jan 2025 23:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58309
IP address blocks: 176.120.32.0/19 maxlen: 19
185.46.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e6:db:db:09:e7:7f:53:6d:13:63:61:5e:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Jan 1 23:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=694f6753a278dd528c2fba4eb6d0bd658ea343df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:9e:74:35:58:ae:c5:0f:a4:cb:11:ab:b9:
0d:3d:19:6a:92:4a:6f:c8:a6:e6:ce:a3:ca:59:64:
14:a5:42:64:6e:21:fa:bb:87:9c:5a:66:ac:d2:65:
f6:3f:ad:6a:93:e2:fa:48:05:c2:a8:0c:31:8d:16:
e0:84:fc:f1:e8:1d:1b:97:7b:84:a0:82:1c:07:7f:
24:20:c5:7c:e4:87:d0:90:1a:39:95:1a:0c:1a:16:
3d:bd:c9:e3:be:1b:c1:35:30:64:46:aa:44:01:bf:
46:bc:1f:98:04:4a:c3:cc:3c:ca:83:e9:30:0c:37:
a5:47:e2:5b:b1:9d:a0:f9:76:bf:1d:70:68:e8:89:
87:46:23:ac:52:15:34:4a:a1:5f:f7:2f:d5:8e:8d:
86:71:87:4c:f3:78:33:88:82:35:71:cd:3b:67:6d:
26:b3:a4:e9:b3:a4:0a:d2:c1:f9:5b:27:1e:69:94:
2b:bd:4c:80:d9:ad:e3:2a:f5:e1:51:aa:f3:0d:14:
34:fe:85:c5:94:0c:4b:37:d4:a0:58:9e:85:1e:22:
8a:9e:07:81:bf:f3:20:7f:4a:82:df:97:cc:2a:41:
50:50:78:d9:da:6e:87:1d:d1:11:7c:f6:c9:45:38:
1e:c3:a3:46:ea:7c:f0:2e:d6:7a:6a:6a:ee:9e:b8:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4F:67:53:A2:78:DD:52:8C:2F:BA:4E:B6:D0:BD:65:8E:A3:43:DF
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/aU9nU6J43VKML7pOttC9ZY6jQ98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.32.0/19
185.46.188.0/22
Signature Algorithm: sha256WithRSAEncryption
79:18:a9:f2:61:6d:79:87:bb:36:f0:29:b2:6a:e8:ed:0f:34:
09:f1:50:d2:11:f9:ba:d7:06:49:23:b5:e9:28:55:1b:3c:19:
3a:47:be:12:cf:ba:d2:00:43:b7:4f:57:3e:58:68:2a:e7:a3:
c1:8a:45:ac:f0:a4:16:c0:7a:94:df:72:bb:51:d3:f2:09:56:
e0:da:10:a8:e4:a9:51:72:3f:5a:5f:a2:7d:59:6e:1b:63:3f:
05:4e:cb:63:c7:b7:26:e0:75:32:83:56:1a:7f:b2:16:bd:e8:
98:ca:41:a7:69:07:c5:e9:b2:26:86:43:7a:04:b8:a9:bd:6b:
f5:fe:77:ef:ba:ce:bb:e4:da:2e:2a:df:2a:37:a5:24:e3:46:
91:7c:24:15:d9:98:6a:36:30:a0:ff:93:16:e9:cd:94:1f:ed:
2e:c4:a9:fe:31:8e:9a:74:da:f8:14:40:dc:44:6c:20:15:fa:
47:b3:3b:bf:93:d7:8a:7f:10:3f:3a:ea:b1:b5:a4:41:7a:20:
35:18:32:a1:f4:a7:34:67:ad:b8:dc:f8:83:43:03:a1:83:c3:
a5:dc:e4:8b:55:cc:99:0e:15:e9:8a:65:fe:d8:cb:3f:7a:d3:
c9:73:7c:86:09:2c:f3:68:10:ad:27:9a:69:95:a5:6b:56:7a:
49:ef:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:34 2025 by rpki-client