Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa
File: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (raw, json)
Hash identifier: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=
Subject key identifier: 39:B6:73:FF:40:05:EB:5C:55:C0:96:75:7A:78:72:D2:09:D1:80:24
Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial: 019421B18E8A12562F4B9497D2954CE51CE8
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa
Signing time: Wed 01 Jan 2025 11:47:52 +0000
ROA not before: Wed 01 Jan 2025 11:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21466
IP address blocks: 185.166.80.0/22 maxlen: 24
213.202.32.0/19 maxlen: 24
213.202.32.0/21 maxlen: 24
213.202.40.0/21 maxlen: 24
213.202.48.0/20 maxlen: 24
213.230.32.0/20 maxlen: 24
213.230.40.0/21 maxlen: 24
2a06:3f40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8e:8a:12:56:2f:4b:94:97:d2:95:4c:e5:1c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39b673ff4005eb5c55c096757a7872d209d18024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:ea:42:23:84:2c:2d:b2:d0:99:39:69:e1:
02:17:97:b3:25:2a:1a:51:a7:35:9a:fe:93:a0:3d:
49:27:ba:b9:12:76:06:f5:01:06:9b:1a:14:41:3f:
5f:23:67:fc:b4:dc:ee:b9:41:54:70:6e:12:1d:06:
b7:13:94:60:e4:a0:95:33:b0:f3:5d:44:3c:f2:11:
d0:8e:a9:36:ce:1c:82:db:d8:77:63:de:6c:ce:8b:
53:76:ad:28:49:63:13:a5:47:3a:e8:4e:69:2e:c4:
dc:98:69:41:01:f6:d4:c5:0c:c6:b0:81:b4:21:be:
fa:38:45:d8:8b:bc:a4:5a:ad:f2:a7:0c:cf:56:d6:
b4:81:4b:76:7e:23:fa:7f:0a:6d:36:1d:60:f4:28:
18:7f:9b:94:58:d0:92:5f:7a:ed:1c:f7:58:b8:8d:
96:88:ba:46:9b:34:6a:f3:b9:3d:9c:ef:c1:36:a3:
49:2c:c4:de:45:a8:ec:2c:b9:6d:9a:4d:59:76:69:
eb:16:1f:61:3d:0b:55:9c:a7:ea:d4:21:cc:52:d8:
ed:e5:b7:41:59:ce:85:38:4b:15:77:97:87:7c:49:
87:e1:e0:8a:2e:12:4b:14:33:6f:87:4c:f2:4a:9c:
cc:4d:8d:15:01:55:13:6a:80:73:0e:89:27:4b:f6:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B6:73:FF:40:05:EB:5C:55:C0:96:75:7A:78:72:D2:09:D1:80:24
X509v3 Authority Key Identifier:
keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.80.0/22
213.202.32.0/19
213.230.32.0/20
IPv6:
2a06:3f40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:9d:39:50:2f:66:9c:0a:35:78:6c:ea:89:2b:b3:a1:29:39:
bf:af:ec:ea:bb:17:ba:05:a5:d8:78:35:87:b0:a1:72:0a:3b:
54:5d:37:d8:ef:f9:e2:1e:82:4e:70:c5:31:2a:94:02:3c:fa:
f8:35:4e:90:1a:4c:8f:40:3b:04:71:f4:e3:28:bd:9c:2a:ca:
e3:32:82:a4:d5:2b:1c:cf:62:ff:5d:56:81:ba:c7:c3:29:a8:
90:30:fc:ae:30:a6:ba:97:46:c0:77:6c:48:4c:b5:dd:15:ba:
b2:c0:94:33:b8:87:ad:14:fd:19:a8:9d:7b:ec:b9:53:7c:a2:
c3:5d:1e:bf:1c:08:6e:e1:e7:a6:17:63:28:b4:1b:26:c6:35:
ad:93:68:74:35:d7:3b:82:b7:42:25:62:e1:a3:ee:85:b3:c2:
30:b1:7c:8b:68:77:89:bf:c2:11:48:e8:0a:e3:a0:d9:27:80:
da:e8:ad:dd:4b:41:c8:8e:9e:dd:71:09:b0:71:2e:ac:47:2f:
b2:50:72:0b:62:36:36:29:af:d1:8b:69:0b:60:c3:f2:f3:73:
32:69:cf:ce:81:26:ab:74:e9:78:64:0b:1b:94:91:27:37:9f:
38:ec:80:db:f2:ea:26:bf:73:7a:fb:51:a7:a5:25:ec:06:6c:
94:e9:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:33 2025 by rpki-client