Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/1rz_9CUxf9DVS-YE4VuUc49q_EU.roa
File: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (raw, json)
Hash identifier: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=
Subject key identifier: D6:BC:FF:F4:25:31:7F:D0:D5:4B:E6:04:E1:5B:94:73:8F:6A:FC:45
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 01942067CA44639F02FBA876C96BC9BC8A4D
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/1rz_9CUxf9DVS-YE4VuUc49q_EU.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203427
IP address blocks: 185.135.52.0/24 maxlen: 24
185.135.53.0/24 maxlen: 24
185.135.54.0/24 maxlen: 24
2a02:faa0::/48 maxlen: 48
2a02:faa0:1::/48 maxlen: 48
2a02:faa0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ca:44:63:9f:02:fb:a8:76:c9:6b:c9:bc:8a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6bcfff425317fd0d54be604e15b94738f6afc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:9b:e2:cc:83:bd:0d:76:90:aa:26:97:83:
28:27:8c:fe:de:c2:fd:aa:db:24:00:7d:d5:8e:af:
70:10:4c:14:1c:36:9f:ac:a9:ad:66:45:6f:ed:fa:
25:7d:13:47:4f:4b:a7:db:8f:99:d2:80:56:64:b8:
09:b1:dc:3c:00:6f:da:53:df:80:a3:0b:79:fa:6d:
73:df:ad:2c:82:c2:27:86:6a:62:86:d8:84:50:20:
7d:df:c9:e0:86:eb:b5:55:17:24:9e:19:cb:58:9f:
8a:8d:9f:d5:d0:7b:22:02:c5:d4:5a:f6:4a:21:32:
1d:ae:19:8a:1d:71:b6:5d:78:f9:f6:d1:3c:fc:61:
98:d8:c4:7e:30:51:64:5a:6f:ca:a1:aa:53:5f:8f:
a7:08:49:81:c8:b6:c0:19:a3:ac:08:a1:3d:bb:fe:
00:87:d0:46:6c:4e:55:45:ab:15:2b:56:eb:dd:4f:
74:02:b1:63:8f:2a:47:da:b2:35:79:03:bd:7d:99:
77:2c:fc:ac:29:05:0e:fe:1b:77:fa:58:d3:c4:6d:
ec:d1:23:65:31:4d:0c:c3:9d:8c:49:76:a9:33:d6:
d9:9e:a4:ce:5a:e6:19:61:69:23:e0:14:5d:c9:e2:
4a:7b:07:c1:10:be:d3:46:e8:2c:f5:31:76:8a:ac:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:FF:F4:25:31:7F:D0:D5:4B:E6:04:E1:5B:94:73:8F:6A:FC:45
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/1rz_9CUxf9DVS-YE4VuUc49q_EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.52.0-185.135.54.255
IPv6:
2a02:faa0::-2a02:faa0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
39:75:13:8c:15:6a:54:58:0e:fa:49:58:8e:51:01:02:34:73:
cf:14:af:3b:93:ca:a2:a6:ec:45:d1:73:7d:c8:02:ec:4b:b1:
93:01:26:ba:8a:95:3d:a1:92:84:7e:ce:46:e5:20:cc:78:a9:
3a:90:f0:8f:e8:0e:21:e3:e4:8f:52:44:86:a0:2b:33:64:69:
7e:d6:f8:ce:90:d0:5f:5d:e5:52:13:8a:6c:e6:f0:f9:51:e9:
5b:24:10:9e:70:64:02:40:16:86:2c:2f:f8:5a:99:b5:cf:df:
6f:c9:86:17:0c:3d:60:10:a5:ab:e4:a2:28:88:9f:8e:d2:0d:
cc:59:c9:30:3d:c1:f5:a1:f5:be:a4:64:e3:fa:4e:db:65:f1:
54:65:5a:3e:b8:eb:ee:60:b5:8e:b1:52:ef:02:0c:17:6f:77:
ea:c8:8b:be:de:8b:ad:61:ff:d4:72:38:a8:7e:c3:60:91:68:
d7:0a:86:17:64:ff:3b:ad:48:9d:05:a5:7b:03:8b:f5:16:95:
3b:28:b1:3f:9c:b0:c9:df:d8:69:f5:7e:be:6b:8d:fe:d0:cc:
9f:7b:22:a1:b1:c6:e4:af:3a:10:a6:5e:a8:23:86:5e:77:ca:
63:d1:bc:e7:7b:23:92:2d:f0:4d:eb:6c:33:d3:87:7f:b5:a9:
6e:96:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:00 2025 by rpki-client