Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/_2GPXm0W5pqTGfOSlDVI1ePI1QE.roa
File: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (raw, json)
Hash identifier: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=
Subject key identifier: FF:61:8F:5E:6D:16:E6:9A:93:19:F3:92:94:35:48:D5:E3:C8:D5:01
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 0194228DB14611C724A1A183564DFCDA85A2
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/_2GPXm0W5pqTGfOSlDVI1ePI1QE.roa
Signing time: Wed 01 Jan 2025 15:48:18 +0000
ROA not before: Wed 01 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42755
IP address blocks: 46.21.160.0/20 maxlen: 24
46.21.164.0/24 maxlen: 24
46.21.165.0/24 maxlen: 24
91.195.200.0/23 maxlen: 24
91.195.200.0/24 maxlen: 24
91.195.201.0/24 maxlen: 24
91.196.168.0/22 maxlen: 24
91.198.27.0/24 maxlen: 24
91.199.206.0/24 maxlen: 24
185.138.208.0/22 maxlen: 24
195.184.64.0/23 maxlen: 24
195.184.64.0/24 maxlen: 24
195.184.65.0/24 maxlen: 24
2a02:27f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b1:46:11:c7:24:a1:a1:83:56:4d:fc:da:85:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Jan 1 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff618f5e6d16e69a9319f392943548d5e3c8d501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:c6:43:40:83:88:94:10:4d:55:47:d1:0e:
2d:d6:a4:a5:59:5d:19:a9:d0:98:9d:0c:0e:13:ee:
0b:92:a5:c6:f4:87:fe:fa:81:7a:ce:68:71:61:ad:
60:3f:89:2f:4a:c7:42:58:b0:b6:c5:ff:82:ba:1d:
ce:d1:5b:4f:60:ef:3c:65:00:69:55:e7:94:75:cc:
ef:d7:c0:56:e9:78:5a:ae:42:00:1f:5a:97:e8:db:
1f:ab:1f:00:d9:74:3b:f1:d7:55:5f:74:73:f3:ab:
67:bd:11:bf:ad:56:7d:25:c1:d3:41:9f:d6:a0:18:
42:0c:87:7e:4b:a9:28:bb:d1:5e:bd:12:d4:7c:68:
64:b5:03:13:8d:67:bc:43:3f:02:66:d1:5f:74:89:
19:a0:ba:ef:f6:c9:97:69:a6:d4:c0:00:28:48:54:
cc:30:63:09:e2:f7:27:b5:42:92:af:05:a8:78:35:
62:f5:2a:4a:f8:a2:a4:24:6d:96:7f:49:58:35:e5:
2c:d7:93:f6:f0:d3:1c:c8:0e:39:5a:23:83:65:5a:
aa:4f:b8:a0:86:af:32:7f:60:ba:77:f4:c6:9c:02:
8e:cb:6f:60:0c:93:f5:63:b7:09:24:98:b5:2c:d7:
ee:15:c4:66:f6:e2:7c:37:ae:24:61:be:ec:96:49:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:61:8F:5E:6D:16:E6:9A:93:19:F3:92:94:35:48:D5:E3:C8:D5:01
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/_2GPXm0W5pqTGfOSlDVI1ePI1QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.160.0/20
91.195.200.0/23
91.196.168.0/22
91.198.27.0/24
91.199.206.0/24
185.138.208.0/22
195.184.64.0/23
IPv6:
2a02:27f8::/32
Signature Algorithm: sha256WithRSAEncryption
24:00:83:1d:a6:57:d0:dd:8b:a8:0e:ba:4e:72:57:41:c1:41:
d4:d6:6f:be:26:f8:f7:75:25:33:da:20:e6:45:bc:1b:91:08:
74:9e:3c:69:0c:d2:3a:22:5d:cd:a8:e1:e1:c0:2e:76:96:08:
ba:43:75:ed:66:89:4c:e5:2a:50:a8:7d:ad:bd:b5:25:a8:45:
ca:61:09:97:55:4b:7a:ee:a0:04:df:ef:3d:16:42:08:2a:ac:
2d:a0:28:70:4f:4f:48:05:7d:fa:fe:7a:f9:ba:44:b5:5f:29:
51:20:17:a8:2b:d0:ce:18:9e:10:ea:8f:8c:e1:58:38:6a:88:
b3:55:98:4c:3e:85:c0:16:ef:56:31:da:03:e5:e8:66:9b:33:
e1:7b:99:d4:8c:27:9b:f9:27:dc:77:3e:d1:b7:68:0c:18:65:
20:08:aa:fa:63:8c:7a:ca:73:cf:2b:69:86:a0:7c:1c:d4:bf:
1b:18:f3:5c:44:97:ca:5b:58:c1:20:fb:86:dc:14:ee:94:de:
00:89:e3:dc:b6:01:a2:66:76:8b:2f:4b:67:b2:91:f9:f4:fc:
c4:e2:c7:88:a1:fe:04:dc:0c:da:e1:c3:79:1d:e9:b0:1d:7a:
78:15:18:41:3e:0d:8f:c5:20:bc:5d:b1:bf:01:0c:0b:17:66:
73:9e:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:00:32 2025 by rpki-client