Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/a9e6waB73R-2gGYR6nbP9rwuh8I.roa
File: a9e6waB73R-2gGYR6nbP9rwuh8I.roa (raw, json)
Hash identifier: 1oI2gE9eJeYPxxdSHWs9WVzpaBQMrNDfnP1js7RW/p4=
Subject key identifier: 6B:D7:BA:C1:A0:7B:DD:1F:B6:80:66:11:EA:76:CF:F6:BC:2E:87:C2
Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial: 019420D5FC3A474C9AFE0FC99D15764FA98B
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/a9e6waB73R-2gGYR6nbP9rwuh8I.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2535
IP address blocks: 149.182.216.0/23 maxlen: 23
149.182.216.0/24 maxlen: 24
149.182.217.0/24 maxlen: 24
149.184.142.0/23 maxlen: 23
149.184.142.0/24 maxlen: 24
149.184.143.0/24 maxlen: 24
149.184.144.0/23 maxlen: 23
149.184.144.0/24 maxlen: 24
149.184.145.0/24 maxlen: 24
149.184.160.0/20 maxlen: 20
149.184.160.0/21 maxlen: 21
149.184.168.0/21 maxlen: 21
149.184.224.0/19 maxlen: 19
149.184.224.0/20 maxlen: 20
149.184.240.0/20 maxlen: 20
149.185.136.0/24 maxlen: 24
149.185.200.0/24 maxlen: 24
149.189.160.0/20 maxlen: 20
149.189.160.0/21 maxlen: 21
149.189.168.0/21 maxlen: 21
149.189.192.0/21 maxlen: 21
149.189.192.0/22 maxlen: 22
149.189.196.0/22 maxlen: 22
149.195.58.0/23 maxlen: 23
149.195.58.0/24 maxlen: 24
149.195.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fc:3a:47:4c:9a:fe:0f:c9:9d:15:76:4f:a9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bd7bac1a07bdd1fb6806611ea76cff6bc2e87c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:ce:5e:58:13:fb:3e:c5:12:29:fb:47:bd:
57:d2:ba:8e:05:75:fe:1d:e6:c6:4e:68:25:62:41:
62:a5:2a:e3:1e:ee:22:b4:94:17:74:cd:72:7a:06:
da:11:79:6c:92:77:fc:14:99:2e:cb:e8:75:3d:2e:
1c:10:af:ec:18:db:9d:b5:8f:e9:f3:2f:96:b8:b3:
65:f7:38:95:50:b8:a8:87:b3:28:b0:ce:9b:73:e5:
a5:97:a8:79:7f:d6:7b:5a:26:41:a8:0d:40:b2:43:
d1:b4:ab:78:43:eb:13:e6:65:45:c4:04:ec:20:33:
c2:f5:74:94:62:d1:02:79:c7:4c:02:39:20:8c:cf:
1d:84:6c:25:e1:74:96:33:bd:55:13:cf:8b:c7:d7:
f4:d6:9b:2e:0d:81:28:29:e7:fc:0a:d9:f8:24:5c:
d1:d7:59:a1:86:a9:31:98:05:d7:04:89:86:5d:4a:
73:f4:92:53:76:60:13:c8:4d:20:f2:d5:6d:2d:32:
2f:11:53:1e:da:7c:f7:ad:09:b3:ef:4f:57:e5:1d:
49:2b:bd:62:fc:f7:11:94:b5:9c:13:55:3a:72:fd:
4f:92:27:28:63:93:1a:97:62:b6:cf:7d:f8:ce:8d:
b4:46:6b:a6:c7:23:f7:df:91:02:cf:f2:f9:03:31:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D7:BA:C1:A0:7B:DD:1F:B6:80:66:11:EA:76:CF:F6:BC:2E:87:C2
X509v3 Authority Key Identifier:
keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/a9e6waB73R-2gGYR6nbP9rwuh8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.182.216.0/23
149.184.142.0-149.184.145.255
149.184.160.0/20
149.184.224.0/19
149.185.136.0/24
149.185.200.0/24
149.189.160.0/20
149.189.192.0/21
149.195.58.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:0e:12:88:0f:0e:59:c9:5d:91:a0:ea:f9:c8:51:11:2f:e6:
28:40:d8:4c:3d:79:31:ae:db:4c:ea:0b:3b:03:e6:af:df:13:
eb:a2:93:1d:3a:16:51:16:61:e4:9e:64:f6:59:9b:f4:10:d6:
c9:81:16:ab:c4:b2:79:ef:75:f4:a6:64:61:8c:56:30:4a:54:
ae:1f:03:dc:6b:70:d8:6e:c2:8b:30:bd:5d:d7:01:14:c2:82:
af:e3:18:48:81:56:76:40:a2:b1:42:b2:e8:22:c7:34:50:68:
99:b6:84:1f:c6:28:41:fc:e5:08:8f:2c:7e:c4:7f:0b:9f:87:
84:23:b4:9d:b7:28:41:7a:08:5f:a9:bb:54:84:fd:d2:f6:74:
06:99:85:fe:78:61:9c:8b:44:29:8f:2b:27:70:ea:77:42:cf:
61:7e:8c:b5:e4:5d:7e:26:99:3d:90:2f:31:04:dc:80:e4:83:
02:d4:9f:78:3b:62:0e:9e:f1:33:0b:4f:c6:ad:17:95:76:bc:
b3:89:f8:6b:0a:49:cb:e3:dc:27:7d:dc:77:8c:76:eb:f9:5c:
cb:9d:75:92:be:4d:13:32:4f:ac:ea:87:3a:c1:00:46:49:65:
ef:17:45:f4:57:bd:88:fe:52:77:d6:71:68:fb:0b:f5:43:d7:
6d:b9:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:40 2025 by rpki-client