Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/d-A9abVhzoyR77GP5fjse5opquk.roa
File: d-A9abVhzoyR77GP5fjse5opquk.roa (raw, json)
Hash identifier: SH9taC665HXJXvPloMTs2WsTRMUAVA4wBqAM/eu3n6o=
Subject key identifier: 77:E0:3D:69:B5:61:CE:8C:91:EF:B1:8F:E5:F8:EC:7B:9A:29:AA:E9
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019420D618562A07844EAD940FB43121B573
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/d-A9abVhzoyR77GP5fjse5opquk.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43848
IP address blocks: 85.255.144.0/20 maxlen: 20
85.255.156.0/24 maxlen: 24
85.255.157.0/24 maxlen: 24
185.135.16.0/24 maxlen: 24
185.135.17.0/24 maxlen: 24
193.188.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:18:56:2a:07:84:4e:ad:94:0f:b4:31:21:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77e03d69b561ce8c91efb18fe5f8ec7b9a29aae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:27:03:ae:49:a2:6e:61:e8:b2:8d:f0:d4:
95:88:62:4e:f9:b7:97:bd:73:17:b4:ba:d5:d4:50:
0c:5a:43:6f:5d:83:ba:f1:b0:9a:1f:9d:4c:96:17:
6c:41:9e:f2:d6:55:36:ec:88:4d:4e:75:e2:63:90:
fb:ec:68:4d:ca:2d:b7:f7:42:d6:86:b9:11:b4:c3:
bb:04:36:e6:4d:02:bf:48:f0:6f:e6:2e:69:a7:e2:
d1:65:7c:a4:c8:bd:ed:21:1d:f9:d4:1d:2d:70:b1:
f4:92:9f:0d:15:ab:a0:02:43:b7:87:e1:aa:93:d0:
44:72:d7:78:a7:26:1b:51:18:fb:5f:a4:1b:55:89:
eb:48:3e:b7:a2:d4:0e:02:9a:81:9a:6d:c0:32:27:
28:63:8d:d1:3e:68:0a:1d:6b:7e:c3:79:09:53:7f:
90:9c:60:33:6f:ed:11:38:0f:41:6b:ba:df:aa:76:
6a:98:2b:5f:04:90:95:89:72:9d:d7:01:cc:91:0e:
27:0e:c1:a8:a6:f8:df:74:11:6c:b9:21:8e:05:c4:
76:aa:47:e9:09:5d:0c:60:4a:94:6f:7f:a5:69:12:
40:18:82:5d:c2:ac:d8:4f:b6:ba:59:e3:2b:d6:4b:
a2:3f:40:76:d7:dc:bc:23:d9:1f:0c:40:80:2d:01:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E0:3D:69:B5:61:CE:8C:91:EF:B1:8F:E5:F8:EC:7B:9A:29:AA:E9
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/d-A9abVhzoyR77GP5fjse5opquk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.144.0/20
185.135.16.0/23
193.188.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:2f:0f:fb:a9:1d:53:c3:60:63:9f:37:eb:8d:8d:cc:24:1f:
55:b8:3a:7f:b6:fd:9c:e4:a1:6d:11:c9:0d:84:aa:5e:a6:04:
9a:a6:19:bd:51:17:97:9e:69:df:d3:47:99:67:f3:ba:f6:b1:
d3:9b:3f:d8:e8:89:85:d7:c3:fc:ae:15:31:9c:8f:9e:54:18:
1a:24:63:1a:ba:3b:61:53:4f:0e:90:1a:88:32:6c:d2:64:c3:
f1:3d:87:d9:ad:e2:26:9b:d1:c9:85:dc:74:07:6a:35:97:a4:
a6:42:a0:f0:ca:8b:6f:a5:bf:63:46:e7:88:e0:ed:ba:33:3c:
63:41:90:f8:ca:38:6f:f9:f6:ef:c9:77:8f:9c:0f:ce:c0:da:
23:1d:4a:b5:d0:d9:8c:49:39:11:2a:49:31:9d:29:d3:7b:ae:
2e:2e:88:23:39:8a:50:8d:03:c2:10:b5:8b:11:aa:d6:fe:01:
e8:b7:52:ae:ff:97:58:d7:da:b1:e9:28:0d:46:00:00:a5:5e:
a8:2f:2c:92:50:59:45:f7:8e:08:9d:c9:f0:78:4f:86:df:91:
ac:df:5f:33:53:6b:32:7c:05:a2:cd:6a:08:31:cd:87:7b:1d:
71:e6:f6:2b:c5:08:a2:c2:64:22:71:ae:e8:63:fd:65:09:c0:
c1:b5:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:28 2025 by rpki-client