Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/V6KVY7G6GgYfsN-YsqV35GGJJzk.roa
File: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (raw, json)
Hash identifier: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=
Subject key identifier: 57:A2:95:63:B1:BA:1A:06:1F:B0:DF:98:B2:A5:77:E4:61:89:27:39
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 01942067F9EBF66CE6AEDD3A54762E19F35D
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/V6KVY7G6GgYfsN-YsqV35GGJJzk.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48689
IP address blocks: 185.65.220.0/22 maxlen: 24
195.181.248.0/22 maxlen: 24
212.57.32.0/21 maxlen: 24
2a00:1e40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f9:eb:f6:6c:e6:ae:dd:3a:54:76:2e:19:f3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57a29563b1ba1a061fb0df98b2a577e461892739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:b0:9b:42:a7:17:99:d9:38:64:8f:cf:6c:
a0:13:b0:be:af:e4:be:b7:12:03:dc:8d:ce:7a:d9:
07:0e:9f:7d:6d:56:37:40:7f:68:6d:cc:79:2f:ff:
3e:ec:6c:0f:45:ac:8d:d4:5a:d1:a4:43:b3:70:69:
9c:c0:a5:b5:c2:f9:02:11:f1:41:08:53:80:b4:b9:
73:a8:64:99:37:cc:1e:46:b5:5f:67:97:0f:94:39:
a6:bb:87:a9:f2:ff:59:4a:c4:2d:18:0f:c3:d8:79:
6b:bd:91:ef:b4:30:9f:58:60:87:a1:ec:53:a3:e6:
f5:f6:93:a3:5f:53:bb:73:f1:72:60:0b:3c:ac:88:
0e:62:08:7a:40:4f:13:b2:d2:11:48:c1:6c:b5:6e:
20:a1:1a:71:73:f7:d9:fa:d4:de:eb:53:2d:10:da:
cf:76:55:53:8b:ec:09:5a:10:a6:5e:5f:2a:85:74:
e6:b8:f3:d0:8f:8a:da:c0:ef:da:89:bd:99:c1:e0:
e0:94:fe:a7:57:31:2c:9f:6d:ef:b6:cb:e5:28:ca:
44:19:db:f7:de:34:b6:e8:bf:cd:ec:b8:7d:5f:8c:
16:08:19:bd:26:aa:43:82:f8:09:e2:b7:9a:36:bd:
58:b5:e9:b8:3e:c7:a9:8c:82:1a:67:ce:c7:0d:2c:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A2:95:63:B1:BA:1A:06:1F:B0:DF:98:B2:A5:77:E4:61:89:27:39
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/V6KVY7G6GgYfsN-YsqV35GGJJzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.220.0/22
195.181.248.0/22
212.57.32.0/21
IPv6:
2a00:1e40::/32
Signature Algorithm: sha256WithRSAEncryption
98:d8:f2:58:85:29:e7:e9:98:89:29:ac:c9:55:de:12:11:a4:
e0:ab:2f:73:11:7e:3a:fb:bb:b7:ca:7c:b8:56:07:71:7e:2f:
f1:8c:1d:be:0b:bb:da:af:bf:58:9a:61:8c:2e:6a:e2:46:26:
11:f2:7e:12:30:c3:e1:b3:b7:b0:19:0b:90:64:06:56:53:47:
0a:a7:3c:fe:fb:ac:63:d5:0e:7d:d8:dd:80:47:51:c8:b7:41:
20:36:10:ca:aa:93:83:cb:d1:24:0f:c9:de:35:74:94:5e:3b:
b8:33:25:07:92:67:05:14:dd:00:28:de:1f:96:6e:c5:36:be:
d5:13:77:f0:49:46:48:a7:d0:eb:67:96:2c:e1:38:cb:07:e7:
71:45:73:bc:07:00:d6:ab:29:54:43:c9:1b:53:a0:0b:70:66:
f8:8e:85:80:1e:16:16:6e:9b:56:51:82:9d:69:f7:a7:f9:05:
13:b5:bf:55:90:ad:ff:ea:22:9d:72:99:e2:e9:03:21:29:43:
18:d7:a9:18:3d:76:7a:ef:ce:9d:a6:e4:55:d5:2e:20:51:a9:
fd:19:41:26:12:10:da:db:83:5b:72:b1:ae:6d:ce:cf:e5:11:
1f:03:87:5c:86:ed:4a:45:ef:0a:59:03:1e:92:d4:4a:e3:e7:
57:13:82:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:23 2025 by rpki-client