Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa
File: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (raw, json)
Hash identifier: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=
Subject key identifier: 98:8E:A3:E1:46:9D:58:DE:7D:47:2F:2C:06:BE:0A:BC:1D:0A:F1:87
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 01942068765D00DFC6F0B4E4CF1631B1E4CD
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa
Signing time: Wed 01 Jan 2025 05:48:24 +0000
ROA not before: Wed 01 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59437
IP address blocks: 87.120.208.0/21 maxlen: 24
87.121.28.0/22 maxlen: 24
94.156.254.0/23 maxlen: 24
176.56.192.0/19 maxlen: 24
176.56.192.0/21 maxlen: 24
176.56.200.0/21 maxlen: 24
176.56.204.0/23 maxlen: 24
176.56.206.0/23 maxlen: 23
176.56.208.0/23 maxlen: 23
185.159.86.0/24 maxlen: 24
185.251.18.0/24 maxlen: 24
195.211.49.0/24 maxlen: 24
2a0b:d40::/29 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:76:5d:00:df:c6:f0:b4:e4:cf:16:31:b1:e4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988ea3e1469d58de7d472f2c06be0abc1d0af187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:1c:ef:dc:2d:fc:4b:3c:69:9d:1a:08:bb:
0d:c6:e7:28:11:a1:ab:24:ae:ff:12:14:e0:c7:b6:
20:1f:ff:41:f0:fc:0b:67:3b:81:b4:2e:70:6a:be:
69:19:4a:83:44:c6:ba:66:61:22:62:86:7b:89:82:
b8:d4:a6:c6:63:57:bb:20:21:e5:90:f9:3a:55:2a:
12:c3:cd:70:e8:59:bf:e6:dc:82:e9:20:2a:d0:d8:
d6:1f:05:7e:2a:c1:38:a3:5f:6a:a9:3d:7d:a0:19:
71:ee:ad:cb:9b:2f:11:80:7d:ad:ff:2f:40:d4:7b:
83:e4:80:31:4e:45:49:1c:e3:90:82:5c:18:8a:31:
c6:fb:72:8f:8e:f0:11:ae:44:34:2a:19:8f:86:2b:
a6:32:f3:a9:3e:ec:91:46:8d:e9:ba:72:92:2d:bb:
e5:46:d2:01:92:54:09:6d:84:f8:3a:8c:71:c6:70:
21:a7:3f:5e:67:06:ed:2b:6f:d1:49:60:4e:ca:da:
92:5b:fe:32:97:0e:90:fb:07:92:e0:a5:11:20:4d:
b3:03:d0:28:ae:aa:0d:5a:d3:6e:c7:3f:02:38:46:
14:5a:a5:75:ca:55:66:1d:3e:9d:e5:09:f9:7d:ef:
c7:fb:c6:3e:0d:e9:91:2c:57:20:00:64:e6:4a:39:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8E:A3:E1:46:9D:58:DE:7D:47:2F:2C:06:BE:0A:BC:1D:0A:F1:87
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.208.0/21
87.121.28.0/22
94.156.254.0/23
176.56.192.0/19
185.159.86.0/24
185.251.18.0/24
195.211.49.0/24
IPv6:
2a0b:d40::/29
Signature Algorithm: sha256WithRSAEncryption
c4:13:d1:7c:d7:bb:be:19:85:91:7b:4b:d7:f1:0e:d0:7d:4b:
94:3b:ae:7e:d0:55:5f:76:1e:0b:ee:f4:3e:68:41:89:78:f7:
61:a2:05:30:c6:9e:e7:50:d7:8f:27:e7:fb:a1:60:ed:d7:82:
75:6f:c2:13:0e:56:cf:fb:3b:1e:09:7b:de:c4:2f:88:a5:92:
89:b4:9b:9f:66:34:40:ce:00:ae:39:79:43:be:2d:ad:20:c5:
e2:5e:b2:ef:9e:19:7a:54:72:ce:79:4c:28:81:ad:21:44:d9:
bc:da:fa:41:ea:94:5f:c4:30:1a:50:64:6e:78:6b:94:00:7e:
e6:1d:12:70:9c:9b:9a:95:97:c8:65:09:b1:37:bb:a9:24:5d:
9c:45:13:c3:1f:0b:9f:45:9f:f6:82:78:7e:0e:32:f2:df:90:
23:19:25:33:ae:ba:ed:92:98:32:7d:38:61:e9:c5:4a:f3:1c:
1c:92:71:e5:c7:3b:f2:9a:a2:a7:61:97:0c:43:38:77:d8:a6:
cf:9b:b9:2c:f5:2f:c6:91:1d:41:1e:61:f1:69:73:52:03:77:
5f:78:ac:87:0b:2a:0b:61:c2:5f:92:2e:a1:13:88:4a:34:3a:
26:43:1f:f7:c9:ef:33:ec:8e:fb:99:18:43:9a:47:82:69:a4:
33:4e:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:27 2025 by rpki-client