Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/7Vf5R0kVboHfQe1HmwZydUmPy3w.roa
File: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (raw, json)
Hash identifier: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=
Subject key identifier: ED:57:F9:47:49:15:6E:81:DF:41:ED:47:9B:06:72:75:49:8F:CB:7C
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 019421B1D7D44148120CC1EE99B8D39A1834
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/7Vf5R0kVboHfQe1HmwZydUmPy3w.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41789
IP address blocks: 46.16.8.0/24 maxlen: 24
46.16.9.0/24 maxlen: 24
46.16.10.0/24 maxlen: 24
46.16.11.0/24 maxlen: 24
46.227.24.0/24 maxlen: 24
46.227.25.0/24 maxlen: 24
46.227.26.0/24 maxlen: 24
46.227.27.0/24 maxlen: 24
46.227.28.0/24 maxlen: 24
46.227.29.0/24 maxlen: 24
46.227.30.0/24 maxlen: 24
46.227.31.0/24 maxlen: 24
91.142.144.0/24 maxlen: 24
91.142.145.0/24 maxlen: 24
91.142.146.0/24 maxlen: 24
91.142.147.0/24 maxlen: 24
91.142.148.0/24 maxlen: 24
91.142.149.0/24 maxlen: 24
91.142.150.0/24 maxlen: 24
91.142.151.0/24 maxlen: 24
91.142.152.0/21 maxlen: 21
91.142.158.0/24 maxlen: 24
159.255.0.0/20 maxlen: 20
159.255.16.0/24 maxlen: 24
159.255.17.0/24 maxlen: 24
159.255.18.0/24 maxlen: 24
159.255.19.0/24 maxlen: 24
159.255.20.0/24 maxlen: 24
159.255.21.0/24 maxlen: 24
159.255.22.0/24 maxlen: 24
159.255.23.0/24 maxlen: 24
159.255.28.0/24 maxlen: 24
159.255.29.0/24 maxlen: 24
159.255.30.0/24 maxlen: 24
159.255.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d7:d4:41:48:12:0c:c1:ee:99:b8:d3:9a:18:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed57f94749156e81df41ed479b067275498fcb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:5d:5e:6c:28:c1:c0:57:72:25:26:7d:45:
17:9a:42:f8:f8:9a:66:cb:2e:ce:93:84:18:44:bf:
38:62:95:c2:43:dd:6b:f4:56:6f:2d:e8:b9:f9:2b:
24:99:9d:97:89:f3:5c:7d:be:71:b8:a9:81:c6:44:
41:bb:90:78:99:9f:b3:03:7c:8e:f2:9a:d4:7c:f3:
04:a5:c3:a4:74:8a:f8:89:5f:61:38:2f:fb:46:78:
33:67:90:e3:4c:b5:9a:87:26:fa:d1:d7:1d:e4:6c:
09:57:a8:cb:c2:c6:40:6a:80:6c:98:24:fe:63:f5:
15:61:29:8e:83:95:9a:50:88:0c:ec:df:9c:2e:cb:
df:97:0b:79:3d:fd:11:ed:73:18:e8:11:ff:0a:95:
e7:34:2b:0f:79:02:87:65:21:4a:8d:7a:e9:c2:b9:
6f:73:6e:65:4c:24:ac:b7:8d:7f:da:ed:81:17:54:
65:8b:c6:8f:2f:ec:df:76:f2:1d:2c:16:d4:f5:c8:
68:8a:dc:0f:f3:85:0b:64:1d:52:e3:11:56:ae:92:
2e:0b:98:a2:cf:1c:f8:3e:b8:ef:4a:82:bb:d9:7e:
68:24:58:89:10:43:07:83:ea:b7:3d:72:c8:3d:62:
51:18:34:31:5d:f4:e4:af:87:1d:8c:44:9b:7f:f9:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:F9:47:49:15:6E:81:DF:41:ED:47:9B:06:72:75:49:8F:CB:7C
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/7Vf5R0kVboHfQe1HmwZydUmPy3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.8.0/22
46.227.24.0/21
91.142.144.0/20
159.255.0.0-159.255.23.255
159.255.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:17:45:84:c2:1d:45:e2:1d:b7:1a:52:ca:47:f9:64:29:b7:
c4:2c:ce:6d:72:c7:85:be:00:3d:14:0a:5d:83:15:61:bf:2b:
c6:2b:5e:e0:72:47:0f:de:60:6c:e0:c0:a3:f8:28:db:8a:fe:
2c:99:ee:43:87:23:bb:37:f8:c4:81:2f:75:c2:1f:9a:e8:0e:
8a:8c:26:d8:22:4d:c3:16:66:ad:ff:29:8e:80:95:10:47:cd:
52:17:64:94:bd:01:88:79:f5:cd:74:42:55:74:e8:f0:41:2a:
df:78:af:a4:dd:a5:32:b0:88:c3:98:07:81:8d:d2:7b:51:b9:
0f:b8:62:c8:6d:51:c2:22:c7:a1:ca:e3:5a:ab:cc:2b:d6:56:
f1:8f:80:0c:1d:83:a4:57:3b:f9:cb:3e:d4:9e:2b:df:e6:0e:
d7:96:11:0d:76:ef:8d:ac:f5:6c:a0:04:9e:c0:0f:1d:44:ee:
48:45:c7:ae:c2:04:95:e7:2b:95:32:2f:a3:2d:8c:d5:cd:fc:
85:54:51:a7:15:9c:8a:53:18:0d:bf:d1:8d:3c:fb:c7:57:29:
27:cb:fe:6d:74:1b:8e:68:50:a5:fa:94:eb:f4:be:cc:07:fb:
56:40:eb:08:00:f5:cf:eb:15:90:6c:c9:1c:80:fa:e5:7a:8f:
14:73:c0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:39 2025 by rpki-client