Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/DL_qFVZk3rxdJkKpcYlD8can1eU.roa
File: DL_qFVZk3rxdJkKpcYlD8can1eU.roa (raw, json)
Hash identifier: AXUVIl86wlErBqiXfbh2Y2jtdLSsUFK8nHnHCkxSXzA=
Subject key identifier: 0C:BF:EA:15:56:64:DE:BC:5D:26:42:A9:71:89:43:F1:C6:A7:D5:E5
Certificate issuer: /CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Certificate serial: 0194266A4A5FD009C2E75808607C680818A5
Authority key identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/DL_qFVZk3rxdJkKpcYlD8can1eU.roa
Signing time: Thu 02 Jan 2025 09:48:07 +0000
ROA not before: Thu 02 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48408
IP address blocks: 91.209.133.0/24 maxlen: 24
109.233.104.0/22 maxlen: 22
185.77.12.0/24 maxlen: 24
185.142.224.0/22 maxlen: 24
2a07:3140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:4a:5f:d0:09:c2:e7:58:08:60:7c:68:08:18:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Validity
Not Before: Jan 2 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cbfea155664debc5d2642a9718943f1c6a7d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a8:11:ab:f4:27:38:d3:dc:f6:41:74:89:ab:
f1:60:ce:aa:98:27:e6:c7:cc:4e:56:ff:85:e5:fa:
f7:5b:84:f2:64:df:65:6b:4b:e2:b0:99:b8:e5:01:
11:a3:bb:f0:75:41:30:49:8b:df:1a:a6:25:f4:49:
2f:6f:49:e1:d7:62:e0:c4:cf:b9:44:59:99:5e:d9:
8e:4f:6e:77:e1:57:33:6b:15:af:26:1b:fb:1a:62:
9d:c2:99:51:ec:f8:59:d6:25:cf:7b:78:2a:1d:0f:
26:13:15:b1:3d:19:7d:ee:f8:b0:14:16:a9:f8:4b:
50:4d:eb:89:2b:23:c7:a3:63:5b:5d:19:46:24:0b:
56:8c:75:39:5a:d8:57:46:b9:3c:08:ab:ef:97:11:
b2:b4:7e:95:0b:01:2f:dd:78:5a:d7:e0:be:03:5d:
15:54:73:1e:78:ce:f9:b0:3a:87:31:c9:31:fe:ba:
fa:ea:38:1f:fc:75:be:9b:20:67:2f:6b:04:10:81:
d4:da:a4:17:be:1c:42:6b:36:99:b2:66:0a:17:24:
94:a0:fb:9a:1b:a0:bd:3d:1f:6a:25:c4:c2:ae:70:
64:e3:45:94:91:32:e2:88:0c:5a:22:02:2e:3a:43:
30:f6:e9:25:fe:dd:bc:0d:c3:62:74:60:af:a0:fd:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:EA:15:56:64:DE:BC:5D:26:42:A9:71:89:43:F1:C6:A7:D5:E5
X509v3 Authority Key Identifier:
keyid:10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/DL_qFVZk3rxdJkKpcYlD8can1eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.133.0/24
109.233.104.0/22
185.77.12.0/24
185.142.224.0/22
IPv6:
2a07:3140::/29
Signature Algorithm: sha256WithRSAEncryption
5e:95:f0:24:d5:17:db:fe:93:76:c8:cd:15:ff:c3:a4:6e:20:
88:7a:cf:39:06:c6:07:34:59:4b:a4:c1:ab:00:44:eb:68:b7:
9e:38:d1:f2:97:d6:e7:09:0c:ab:41:52:ce:11:bb:f8:d2:25:
56:ba:f2:7b:6a:93:62:d6:84:87:0a:a9:6b:c5:70:5d:9e:3b:
cd:81:8d:3e:e8:ce:14:62:ce:9f:48:75:05:18:f4:1f:04:4c:
e2:17:34:c9:26:a1:4e:7d:ad:8e:a3:4c:6a:1f:34:42:cc:73:
8b:f6:f1:b0:2b:c4:2e:3d:78:9b:82:35:b5:6d:93:d0:3a:a5:
ee:3b:a3:c2:84:a8:d8:5b:8b:d8:d1:62:b5:75:ee:75:12:94:
2d:f2:a7:6b:30:a5:20:2c:3d:c0:93:81:77:7c:40:fc:85:3f:
c2:bf:6e:db:3a:75:87:1d:d9:3d:c8:2c:f2:c6:88:7c:a3:e4:
82:77:2d:1c:dc:de:13:94:72:19:8c:a2:2f:34:f5:ff:2e:c4:
28:a7:a0:c7:eb:33:17:56:9f:74:a1:a7:bf:a8:d2:11:db:6f:
ea:c4:40:a7:75:07:1e:6b:c4:4f:12:d3:73:ac:16:16:c7:5b:
7a:33:9e:4c:84:80:e5:68:e5:71:fb:e5:0b:b4:53:c0:4a:48:
07:3e:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:11 2025 by rpki-client