Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/A7usbHESo1FYcxNM9dXNFtL_RpU.roa
File: A7usbHESo1FYcxNM9dXNFtL_RpU.roa (raw, json)
Hash identifier: NhIvj0089vzjiOGJA4keoIIpBsnDHHjGbNdr4P9oq0A=
Subject key identifier: 03:BB:AC:6C:71:12:A3:51:58:73:13:4C:F5:D5:CD:16:D2:FF:46:95
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 019426D903E1E003B22014461382E25317F6
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/A7usbHESo1FYcxNM9dXNFtL_RpU.roa
Signing time: Thu 02 Jan 2025 11:49:03 +0000
ROA not before: Thu 02 Jan 2025 11:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31480
IP address blocks: 91.196.32.0/22 maxlen: 22
185.59.136.0/24 maxlen: 24
193.151.108.0/22 maxlen: 22
193.151.108.0/24 maxlen: 24
193.151.110.0/24 maxlen: 24
2a0c:1d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:03:e1:e0:03:b2:20:14:46:13:82:e2:53:17:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Jan 2 11:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03bbac6c7112a3515873134cf5d5cd16d2ff4695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:07:4b:74:2f:23:c3:b3:d8:27:51:d7:cb:
15:8d:2a:14:20:f9:c2:b5:08:b0:b0:1a:8b:0a:66:
d2:d3:6c:42:34:04:25:2b:87:bd:3c:27:e1:49:3d:
34:6d:6c:23:9b:b5:96:c7:f9:f8:17:af:72:5a:56:
bf:7b:14:fb:3b:c1:0f:eb:e5:0e:46:3e:ca:70:5e:
c5:92:73:55:e0:7f:9a:ef:e5:a2:7a:fc:79:fc:7d:
3e:9d:40:b5:87:87:ce:71:1d:ec:4c:cc:63:8d:72:
4b:3e:77:10:7d:31:bf:b5:5e:c8:e8:6a:be:04:68:
21:93:bf:94:e1:9b:b0:eb:1d:90:ac:f3:90:dc:b3:
86:eb:f8:88:e6:c9:a9:52:6c:2f:1d:38:6b:f0:be:
f0:41:83:18:97:fc:d4:3f:ca:7f:fa:c0:a0:92:f0:
9f:fe:f9:62:8c:24:74:3f:84:3d:c3:be:4a:53:9e:
d8:59:00:cf:30:74:bf:27:d7:7b:f0:6a:50:19:dd:
54:37:2e:84:9e:63:1c:a5:7f:27:3c:72:be:ff:32:
78:3f:79:6d:c2:10:8f:0a:27:46:f4:35:90:d2:d2:
2a:5e:2d:f8:71:55:8a:f5:72:38:79:98:db:9c:66:
2a:ff:6d:b4:ac:c9:bd:b4:bf:0a:08:cd:07:1f:81:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BB:AC:6C:71:12:A3:51:58:73:13:4C:F5:D5:CD:16:D2:FF:46:95
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/A7usbHESo1FYcxNM9dXNFtL_RpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.32.0/22
185.59.136.0/24
193.151.108.0/22
IPv6:
2a0c:1d80::/29
Signature Algorithm: sha256WithRSAEncryption
96:79:14:56:fa:1a:99:c2:88:49:66:0c:10:a3:2a:f7:7a:9a:
4b:48:0d:a3:d6:bb:71:c8:72:8c:c9:5f:f2:11:ff:b5:f5:3d:
84:7d:ca:0f:36:aa:7a:4b:08:5c:56:00:44:c1:b2:0c:e5:13:
69:c0:e0:de:23:55:43:4a:c2:f0:0e:4b:cc:2b:3c:36:81:ba:
ad:ed:fc:26:e0:a2:0d:03:47:13:9e:ac:bc:29:f0:7f:24:68:
30:0c:07:b3:25:f4:b0:c0:50:2f:39:30:60:48:1b:d3:4e:7b:
03:ed:a8:0f:87:2e:e4:da:0d:3c:1b:07:00:67:79:10:e1:96:
e4:4c:bd:7c:0d:d7:cc:3d:23:7a:91:d8:46:78:55:c7:91:71:
33:74:01:ee:1e:3c:47:71:93:ff:a9:69:ef:9f:1b:1f:fd:1b:
eb:fa:d5:03:52:b6:0c:eb:3a:06:aa:58:44:e1:83:e5:ac:85:
5c:55:fb:08:73:7a:a0:36:d9:f3:a6:71:f1:44:c6:05:fc:4b:
88:81:ac:cd:24:b0:49:3f:2a:98:09:0a:0e:27:df:c7:f2:cc:
7f:7c:26:b2:40:ea:0a:2a:8a:9f:72:65:d2:e1:f5:a1:65:82:
ea:dd:56:b3:ad:16:3d:5e:1e:0a:0c:7d:40:6e:f1:5c:40:59:
0d:ac:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:30 2025 by rpki-client