Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/2A_3tfsfLBfsIjkj25Wq_P7GURU.roa
File: 2A_3tfsfLBfsIjkj25Wq_P7GURU.roa (raw, json)
Hash identifier: 4w2SNRAXRMcEZVSqmqD0dMjfx/4HpwrZYp/R521drvc=
Subject key identifier: D8:0F:F7:B5:FB:1F:2C:17:EC:22:39:23:DB:95:AA:FC:FE:C6:51:15
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 019426D9E6071B91065C435A79F4E7598EB4
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/2A_3tfsfLBfsIjkj25Wq_P7GURU.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 83.219.112.0/20 maxlen: 24
185.74.140.0/22 maxlen: 22
2a00:d2e0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e6:07:1b:91:06:5c:43:5a:79:f4:e7:59:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d80ff7b5fb1f2c17ec223923db95aafcfec65115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:13:9a:10:d0:86:c5:5c:94:74:43:5c:26:
8d:f2:bb:3b:b8:6c:bc:e8:ea:a3:4e:d6:33:d3:31:
49:1f:ed:e7:fe:be:6d:f5:c4:ea:26:9f:ba:d1:f3:
ed:e2:ac:a2:1f:d2:12:ac:97:e5:86:b8:a3:17:58:
ff:ac:60:38:48:ef:12:80:92:cb:9f:85:78:ef:b1:
89:60:eb:de:2f:8a:81:3c:a8:52:ce:09:33:75:9a:
de:81:2f:ad:95:d6:b2:b3:40:d2:9b:6e:5b:15:86:
7f:fc:41:38:26:5a:2f:50:0a:59:66:5e:75:bd:5e:
b2:7e:d5:8d:c8:25:f0:52:cc:35:a1:2a:9a:27:b8:
0a:bc:07:90:28:7e:67:b3:09:b3:56:37:d5:4e:3e:
21:59:39:b1:2c:af:d4:3d:0c:11:00:f0:9a:75:ce:
06:f2:bf:d4:38:c4:a9:fc:74:5f:dc:cf:3f:d5:42:
8a:50:12:71:f3:8a:36:51:db:4f:cf:5b:b3:4f:3a:
93:8b:1d:3c:3f:93:4c:88:48:34:16:5c:c6:67:5a:
44:20:c1:13:71:ca:d7:74:bc:c1:7c:0c:7b:a3:2a:
de:d2:3c:f2:29:f9:b5:a0:7e:c4:9b:46:29:25:7c:
e0:e3:9e:30:3a:02:62:89:01:f3:f6:e5:3b:eb:1a:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:F7:B5:FB:1F:2C:17:EC:22:39:23:DB:95:AA:FC:FE:C6:51:15
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/2A_3tfsfLBfsIjkj25Wq_P7GURU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.112.0/20
185.74.140.0/22
IPv6:
2a00:d2e0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:34:2c:3b:ab:2d:ff:29:3b:0c:24:35:b9:6d:f9:ad:e3:99:
fe:05:e9:29:28:88:a7:de:01:e5:61:e3:af:c4:f6:92:2a:91:
c4:ce:ef:d0:d0:3b:ba:77:2c:8f:90:cc:cb:dc:e1:a2:0c:d1:
2f:ee:f3:d5:17:2b:e4:06:ff:7e:47:d9:08:84:bd:ce:2b:5e:
d7:cd:e1:ac:c7:21:12:05:e7:4a:ff:a9:a6:b8:bf:bd:c8:64:
32:39:d4:5f:3f:9a:5e:bf:f2:15:04:db:8d:68:a6:75:3f:fc:
d3:8f:51:6b:2b:63:d8:40:54:e6:94:0f:b3:da:51:2d:77:0f:
aa:0b:2c:72:17:90:85:29:c3:11:5c:b7:d3:66:61:c9:6d:b5:
ca:d4:db:6a:d6:80:5d:7c:d9:10:1d:07:e6:ff:6b:35:6c:50:
1e:87:50:94:81:44:f3:63:f7:87:c9:31:53:2b:6d:df:2f:d2:
4a:0e:6f:e8:d2:c5:fe:59:f8:72:77:fc:b1:a4:6c:9c:c0:40:
ee:ae:a5:8e:80:90:6f:0a:10:76:07:34:19:ee:e9:2e:88:d9:
46:df:c3:4d:07:1f:2a:7b:68:47:ae:18:04:0c:cf:32:54:8b:
f5:f1:3e:52:67:4a:1b:ff:6f:c7:9b:e7:4f:b2:d1:9a:74:47:
9a:25:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:54 2025 by rpki-client