Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/fIoweheWq1JqzVdLBCrrD-x4kK4.roa
File: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (raw, json)
Hash identifier: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=
Subject key identifier: 7C:8A:30:7A:17:96:AB:52:6A:CD:57:4B:04:2A:EB:0F:EC:78:90:AE
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 0194244578577B8E0B22D085EDD9434053DA
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/fIoweheWq1JqzVdLBCrrD-x4kK4.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34953
IP address blocks: 5.145.128.0/20 maxlen: 24
5.199.240.0/20 maxlen: 24
46.183.96.0/21 maxlen: 24
62.112.64.0/19 maxlen: 24
93.159.248.0/21 maxlen: 24
2a00:fe0::/32 maxlen: 48
2a02:23f8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:78:57:7b:8e:0b:22:d0:85:ed:d9:43:40:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c8a307a1796ab526acd574b042aeb0fec7890ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:a9:1c:b6:8b:e2:e5:52:ab:b8:2e:5a:09:
f4:45:47:61:91:30:87:cd:a7:bb:15:5b:de:f3:81:
bb:13:11:84:f9:53:5e:05:09:3a:db:c8:73:86:ae:
a8:3f:48:9c:a6:ff:65:c8:c8:3a:bc:e8:f1:ed:d0:
b0:48:85:a1:81:da:f1:21:2b:2b:fc:22:20:48:26:
87:dd:35:1e:56:95:c0:08:d8:d0:c3:cd:a0:43:ef:
3a:05:bd:de:92:db:40:55:8c:eb:75:ed:82:30:24:
95:9a:6a:9d:ac:f7:b4:cb:ab:53:58:77:be:9a:4f:
1c:a9:ca:de:41:d3:c4:49:5b:0d:c5:63:94:67:18:
c4:20:9b:0c:c9:c2:a7:50:3b:bb:b8:66:73:01:6b:
b3:a7:d8:8f:63:6c:2b:5c:56:2c:b2:18:53:a1:15:
a9:68:e7:6f:7d:9d:2e:be:1e:46:28:a7:1a:68:ec:
f9:ce:76:cf:32:ae:ae:75:ea:c9:4d:a9:85:e5:48:
df:1d:47:39:53:a6:31:c0:41:ae:98:3c:8b:7a:21:
b6:e2:09:fd:cf:8d:85:f1:e4:d5:ed:f6:f4:46:57:
bb:7e:e3:0e:6b:67:11:1b:c1:8a:04:2a:d5:30:d8:
f4:df:78:4f:32:90:bc:3e:77:1b:de:93:34:ac:c1:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8A:30:7A:17:96:AB:52:6A:CD:57:4B:04:2A:EB:0F:EC:78:90:AE
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/fIoweheWq1JqzVdLBCrrD-x4kK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.128.0/20
5.199.240.0/20
46.183.96.0/21
62.112.64.0/19
93.159.248.0/21
IPv6:
2a00:fe0::/32
2a02:23f8::/32
Signature Algorithm: sha256WithRSAEncryption
4a:1e:2a:51:50:6a:6a:e9:29:ad:8e:5b:ec:32:f3:fb:e3:0c:
a1:68:11:d6:ad:9c:6d:20:6d:5a:bd:71:de:91:fa:3c:01:42:
be:83:5a:5f:d7:e6:3f:3a:0b:5c:8b:dc:bf:47:a5:b9:ea:ee:
20:bd:06:9e:25:98:65:90:2a:43:1d:08:86:87:0f:28:e4:bd:
95:3f:5b:49:a4:7f:61:8a:1a:cb:f4:c5:57:a9:c7:d2:aa:39:
ee:32:53:d3:14:2e:01:95:cf:36:e7:55:86:39:e7:c3:df:12:
67:7b:38:b1:39:ba:0e:cc:c2:d5:cf:39:68:a9:0d:36:f0:9c:
60:80:c7:ea:52:14:1c:74:d3:87:64:9a:16:c7:1a:22:f5:43:
97:85:e4:d3:43:31:64:54:e0:b3:63:ef:af:d7:88:cf:04:84:
3f:34:59:b7:ea:83:c1:d6:e8:fa:03:5c:bf:3e:3a:74:53:e0:
79:a6:87:ac:b7:08:2d:ef:3a:62:19:7c:0f:0c:ab:a1:fa:7f:
30:25:b1:86:29:be:7c:d0:56:75:88:a1:cc:1c:57:82:ef:8c:
be:3b:9c:0c:bb:70:b8:70:fc:31:9b:cd:dc:48:69:29:3e:4f:
ba:c6:f5:3b:41:ba:73:d6:a3:bb:b8:ca:56:99:49:6f:58:9d:
16:6d:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:07 2025 by rpki-client