Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/irXjb7CbWugP3w5JDOFWDswYhlc.roa
File: irXjb7CbWugP3w5JDOFWDswYhlc.roa (raw, json)
Hash identifier: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=
Subject key identifier: 8A:B5:E3:6F:B0:9B:5A:E8:0F:DF:0E:49:0C:E1:56:0E:CC:18:86:57
Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial: 019421B1F5E5F9871E8FA142BEB1C4B768BB
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/irXjb7CbWugP3w5JDOFWDswYhlc.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50289
IP address blocks: 37.123.216.0/21 maxlen: 24
62.78.32.0/19 maxlen: 24
185.142.64.0/22 maxlen: 24
2a03:a400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f5:e5:f9:87:1e:8f:a1:42:be:b1:c4:b7:68:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ab5e36fb09b5ae80fdf0e490ce1560ecc188657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:c7:b1:99:78:16:e4:fc:e6:b3:06:60:89:
49:82:d1:29:5b:c6:06:49:5d:4b:2a:cd:e7:a8:14:
3b:e5:d7:c5:a8:43:dc:09:78:07:9b:41:8a:bc:f8:
4f:c4:27:03:53:ae:a9:fd:fb:ea:d3:b2:c6:83:fc:
80:95:70:e1:e3:07:cf:e8:c4:51:7b:15:bf:13:e1:
05:9c:b3:9c:e7:bb:6c:d1:83:82:f6:bf:4e:eb:75:
3c:9d:db:8d:b3:30:f0:e9:08:4c:cd:ac:82:08:0b:
11:23:3f:f7:5b:8a:46:9a:e5:2f:9a:13:e4:82:a7:
03:8a:c6:d1:2b:41:4e:bb:ab:43:59:6a:ad:76:fe:
c9:6b:d6:f4:11:ee:cc:fe:70:53:b3:38:a6:e9:14:
30:4b:6f:d3:8b:a2:87:db:28:1d:e7:b3:3f:eb:80:
2c:f1:b4:a7:fb:ee:a8:6c:63:d7:0e:85:32:0b:02:
35:e7:08:09:6f:03:d6:9e:6f:6c:f2:2f:6e:42:90:
43:e6:20:bc:d0:17:6e:e5:a5:ec:b9:41:fa:f7:1c:
92:77:9b:61:b7:23:72:b8:fb:20:cb:88:09:c5:3a:
a5:d6:70:15:f8:7c:d6:76:ab:f3:f0:dd:5c:ca:c5:
91:e7:a2:0a:6f:c8:66:fa:3e:23:2e:71:ae:58:6e:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B5:E3:6F:B0:9B:5A:E8:0F:DF:0E:49:0C:E1:56:0E:CC:18:86:57
X509v3 Authority Key Identifier:
keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/irXjb7CbWugP3w5JDOFWDswYhlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.216.0/21
62.78.32.0/19
185.142.64.0/22
IPv6:
2a03:a400::/32
Signature Algorithm: sha256WithRSAEncryption
0e:83:17:ec:34:58:c8:5e:3f:5f:45:88:31:79:6c:90:4a:45:
36:74:76:10:4b:7a:6c:a5:e7:a1:b6:2f:b9:c4:80:2f:22:cd:
19:0a:53:2d:74:b6:b1:11:ad:9d:d9:0a:e0:7c:b1:6b:55:72:
28:82:47:19:e7:7c:ed:35:67:04:c3:39:32:b1:54:f1:26:35:
28:5f:a0:75:2a:a0:c0:8a:c3:20:d1:3c:6b:ed:19:c5:be:27:
ef:b8:c3:f5:48:59:c1:f0:e7:38:c5:06:49:66:43:2c:ea:ce:
be:53:0e:2b:21:57:78:d5:3b:22:1d:35:83:7e:a1:2b:a4:e1:
3c:2a:02:1c:41:68:b5:b8:67:3a:bf:91:f0:15:51:eb:18:c0:
2a:fe:91:d4:38:2d:a2:65:97:6c:22:81:3c:6a:c9:8d:11:82:
09:ad:c1:c0:b2:2c:d9:a5:66:9a:f6:74:c6:15:9c:fd:76:35:
08:d4:44:b2:6f:2d:99:cc:9a:ca:16:35:24:72:13:31:ad:b4:
73:0b:0b:b9:3e:4c:56:cd:bf:86:c6:2b:90:c4:eb:06:d1:ec:
af:9b:d6:96:08:5e:c4:a4:9d:e3:73:3e:55:ce:25:82:d1:2a:
4a:b7:ff:c5:83:9a:6c:68:df:5e:b3:0a:77:b0:cd:b5:e2:98:
8f:72:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:50:43 2025 by rpki-client