Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/2_V6lJnSbHp-dXL7YMoo09f6snw.roa
File: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (raw, json)
Hash identifier: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=
Subject key identifier: DB:F5:7A:94:99:D2:6C:7A:7E:75:72:FB:60:CA:28:D3:D7:FA:B2:7C
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 019427B4A4C72985C3BA5E30731B5E6F8E21
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/2_V6lJnSbHp-dXL7YMoo09f6snw.roa
Signing time: Thu 02 Jan 2025 15:48:57 +0000
ROA not before: Thu 02 Jan 2025 15:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48417
IP address blocks: 94.247.32.0/21 maxlen: 24
185.21.162.0/23 maxlen: 23
2a02:db8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:a4:c7:29:85:c3:ba:5e:30:73:1b:5e:6f:8e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Jan 2 15:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbf57a9499d26c7a7e7572fb60ca28d3d7fab27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:15:db:ba:a0:24:11:05:c8:f8:71:f2:eb:
b7:9c:6a:84:bc:08:cc:10:45:38:89:ad:c7:be:95:
3a:cf:9f:1d:b6:43:6e:d2:2b:2d:60:99:98:4e:11:
38:2d:ab:ef:24:28:b9:c1:0c:6f:f5:46:b2:f0:eb:
55:18:6c:51:15:51:00:01:1e:ab:59:5a:22:28:b7:
77:e9:ea:8a:72:9d:2f:32:a6:a6:bf:28:41:42:4a:
af:32:0b:e1:69:8f:b5:2c:9a:5b:17:71:86:1d:b0:
b0:e7:94:70:8d:c4:77:89:79:d6:ab:29:d3:ff:a0:
71:2f:6a:e7:a5:8c:36:b4:1e:00:53:81:8d:6e:6a:
11:28:07:d8:61:c6:d2:c2:63:6b:c4:18:82:29:9d:
87:01:95:eb:8d:fe:fb:41:eb:03:4b:33:11:ca:97:
e6:52:d7:1a:0f:2d:cb:b6:90:77:cb:01:7f:91:93:
3a:a4:c5:b0:05:b7:00:77:93:1f:87:4e:e1:d9:ab:
8d:2d:2b:7f:72:f0:a8:5e:be:25:6b:34:25:a8:a9:
22:a0:e8:d8:5f:1e:a5:3b:7d:77:ca:83:2c:0a:7b:
eb:e2:66:51:44:6a:26:54:27:56:c5:cf:34:66:12:
f0:18:a0:89:b4:aa:34:fa:8f:b6:fc:e0:26:37:f2:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F5:7A:94:99:D2:6C:7A:7E:75:72:FB:60:CA:28:D3:D7:FA:B2:7C
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/2_V6lJnSbHp-dXL7YMoo09f6snw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.32.0/21
185.21.162.0/23
IPv6:
2a02:db8::/32
Signature Algorithm: sha256WithRSAEncryption
25:9b:00:70:0c:28:c1:4b:72:1f:e6:aa:26:f2:1c:d3:44:8c:
47:67:9b:b9:75:de:a6:c2:43:a5:f2:62:77:ba:f9:75:a9:08:
df:70:f1:0f:ec:03:5e:84:99:6b:39:82:d6:e6:61:38:54:41:
e2:23:00:a3:14:b9:ce:4f:0f:fb:9e:9c:56:2c:ad:29:0e:2a:
db:9f:3d:69:e1:24:29:9e:47:7f:75:9d:a4:49:e5:1f:23:ad:
4f:36:7d:cb:17:e5:8c:3c:b7:c9:49:40:ad:34:10:df:b5:bc:
0d:33:c6:3c:48:ad:a5:f8:7b:07:f9:b9:21:c5:6f:8e:72:09:
d2:58:c6:04:9c:16:81:3b:59:b6:32:46:32:5d:ed:14:46:4d:
5f:da:b3:e0:8c:ad:3f:59:c9:95:eb:77:ec:4a:2b:d4:34:19:
a6:19:19:72:62:e6:7f:c7:db:f5:5f:c3:9a:c9:68:c5:b0:22:
17:e4:ea:d2:61:34:df:50:4e:c4:b9:86:ad:4b:81:9e:38:d4:
55:a7:8e:41:de:62:23:89:b2:13:db:05:a3:0c:f0:fa:64:58:
e6:de:72:10:d6:53:05:97:d0:65:44:c5:fc:7e:fd:fd:3e:d8:
a8:2c:b0:f4:6d:e8:f9:a0:79:b8:eb:a2:d0:26:8a:57:5d:59:
bf:fd:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:34 2025 by rpki-client