Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa
File: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (raw, json)
Hash identifier: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=
Subject key identifier: FA:11:BA:9B:66:F5:FB:BE:F5:65:71:54:09:A7:7A:F9:0D:07:A9:2D
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 0194258F5489F01575B17B727A2D280C51CE
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47702
IP address blocks: 93.175.192.0/20 maxlen: 20
93.175.192.0/21 maxlen: 21
93.175.192.0/22 maxlen: 22
93.175.196.0/22 maxlen: 22
93.175.200.0/21 maxlen: 21
93.175.200.0/22 maxlen: 22
93.175.200.0/24 maxlen: 24
93.175.201.0/24 maxlen: 24
93.175.204.0/22 maxlen: 22
213.109.224.0/20 maxlen: 20
213.109.224.0/21 maxlen: 21
213.109.224.0/22 maxlen: 22
213.109.224.0/24 maxlen: 24
213.109.225.0/24 maxlen: 24
213.109.228.0/22 maxlen: 22
213.109.232.0/21 maxlen: 21
213.109.232.0/22 maxlen: 22
213.109.232.0/24 maxlen: 24
213.109.233.0/24 maxlen: 24
213.109.236.0/22 maxlen: 22
2001:67c:11d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:54:89:f0:15:75:b1:7b:72:7a:2d:28:0c:51:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa11ba9b66f5fbbef565715409a77af90d07a92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:02:a4:0f:a4:61:b5:f0:62:3f:ca:19:44:
da:75:29:19:f6:a4:55:1b:88:82:7b:24:1b:a7:9c:
82:f0:35:67:2f:b4:82:a1:29:56:0e:07:20:52:32:
0d:b3:03:62:6b:e9:7b:0e:08:e8:e4:ae:77:66:2c:
d4:de:8f:5f:25:1d:f1:74:ef:54:41:ef:1b:57:c1:
9e:0a:f5:4c:8f:b6:04:18:2d:6c:ae:5a:7d:b0:b3:
a6:b8:b9:40:b3:5c:84:e7:c4:84:f3:42:9b:13:96:
2d:b9:31:e3:13:73:b9:7a:28:c0:a4:f5:ff:6f:f8:
05:b8:de:95:11:f4:2c:74:17:e1:ef:a8:3b:9c:5d:
b7:40:97:7f:21:f4:6b:60:f7:ea:12:cd:66:f8:60:
c8:d3:3a:b8:6c:e9:df:7d:56:49:7c:b6:38:0a:c8:
e0:4f:c8:e5:4c:57:2f:1f:0e:5e:45:ad:37:52:5e:
bd:7e:40:be:29:22:ca:29:43:42:02:7f:d8:39:74:
63:16:be:d0:ec:ba:36:b2:c6:93:7f:19:ec:9b:34:
3f:70:d2:2a:d4:c5:10:fb:0a:d5:7c:43:61:dd:b6:
3b:39:43:d7:f7:b5:b3:d0:f3:ec:68:75:b1:65:b3:
ef:69:19:77:0c:9b:4d:f1:71:e0:3e:e6:63:1f:21:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:BA:9B:66:F5:FB:BE:F5:65:71:54:09:A7:7A:F9:0D:07:A9:2D
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.192.0/20
213.109.224.0/20
IPv6:
2001:67c:11d4::/48
Signature Algorithm: sha256WithRSAEncryption
9e:73:d8:93:6c:e9:3b:88:5f:9f:6a:c9:0c:88:3a:fd:e5:06:
f9:33:69:22:96:d4:ad:2d:be:fe:e6:e5:20:56:58:a5:68:b4:
39:18:a8:13:6b:00:9e:46:06:91:ff:35:3e:28:dd:35:6d:be:
1c:cb:b7:ae:ae:9e:c8:1e:56:87:ef:78:e8:7d:03:7a:6a:59:
b6:95:83:d6:4d:08:8b:64:b9:ef:44:71:e9:fa:70:ee:f8:ff:
a5:5c:a5:56:26:bf:e9:26:b5:8a:8a:4b:75:22:e2:69:f3:54:
d2:53:93:d4:ab:e9:0c:cf:0a:52:65:86:11:39:77:b8:af:4a:
fd:f5:13:4c:3b:35:28:39:28:a3:ea:6c:1a:22:8e:f0:7c:c7:
0a:af:c0:ea:09:84:7d:02:ad:0e:02:1e:f8:0c:88:ec:4b:17:
f7:88:f0:2c:4f:cf:a6:b2:2d:ae:2a:e2:ed:6c:b0:6c:a6:0f:
52:d3:53:4d:3b:6a:6b:1a:c6:c7:57:e6:10:7d:c9:a5:a4:74:
31:58:c4:aa:0b:d9:2d:bf:15:ad:a1:83:9a:ca:6c:f7:13:81:
f1:4b:a5:be:10:48:c7:fd:7b:16:d9:bc:45:c1:ba:22:04:cc:
a9:91:b6:8d:47:a5:b5:b9:0b:fc:5b:4b:87:19:9b:82:0c:29:
87:be:5c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:21 2025 by rpki-client