Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa
File: o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa (raw, json)
Hash identifier: VPAIrOk53hiaGWh79TqFrzeWPMAWo/gbrSaxlcrP+GI=
Subject key identifier: A3:47:DD:14:FF:0B:E9:94:3D:CF:5F:29:87:CA:80:95:9A:01:13:3A
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 01942828479009519EE19FCD168569176E6D
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa
Signing time: Thu 02 Jan 2025 17:55:15 +0000
ROA not before: Thu 02 Jan 2025 17:55:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201494
IP address blocks: 185.73.40.0/22 maxlen: 24
2a05:3f80::/29 maxlen: 29
2a05:3f80:41::/48 maxlen: 48
2a05:3f80:42::/48 maxlen: 48
2a05:3f80:43::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:47:90:09:51:9e:e1:9f:cd:16:85:69:17:6e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: Jan 2 17:55:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a347dd14ff0be9943dcf5f2987ca80959a01133a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:7f:6b:c3:e5:af:6d:3e:5d:70:e3:0b:f2:
70:13:93:f5:9e:52:54:c8:14:3d:5c:c6:d6:06:da:
2d:3d:86:3d:18:c5:32:65:89:e8:9d:8b:67:d9:a0:
44:87:fc:33:3e:39:eb:55:1c:b9:f8:de:a0:ba:d3:
2c:4e:33:4e:10:11:b1:ed:d0:6a:f7:d3:27:ca:e7:
67:a3:8d:1c:51:7d:cd:82:93:8c:75:aa:7f:d9:31:
a8:0c:83:d0:6c:36:b0:fa:b5:4e:d9:c7:1b:7d:d8:
c3:f7:6a:10:5a:6c:f2:09:fc:85:59:d4:bd:1b:9f:
4a:aa:59:f2:82:2a:5d:1e:ed:42:4e:91:98:08:0b:
e7:cb:2e:84:03:1c:eb:76:d8:43:44:12:4c:85:c5:
8c:ce:61:bc:d3:53:fa:35:a8:b5:e8:62:90:4c:b2:
d6:d1:4c:94:df:22:7e:c2:21:4f:49:f4:26:27:a9:
00:c3:db:14:ff:4d:25:86:0f:93:f9:79:4a:61:0f:
3f:d6:00:33:4d:60:b9:2d:f9:57:ca:05:af:c7:c5:
59:bd:c2:31:64:3f:ad:41:78:ee:7d:0c:c8:e1:57:
3a:93:8f:c8:4f:06:1b:61:b8:9d:de:78:b4:ff:31:
d5:86:ad:31:eb:9b:69:28:a7:93:be:e6:03:22:81:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:47:DD:14:FF:0B:E9:94:3D:CF:5F:29:87:CA:80:95:9A:01:13:3A
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.40.0/22
IPv6:
2a05:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
0f:78:0f:9f:a9:a4:eb:10:ba:45:c6:9e:9d:c3:71:23:0c:19:
49:b9:ee:a1:d8:e7:f3:e6:f3:89:2a:f7:cb:2c:89:05:ba:d9:
d9:ae:7a:3b:db:f9:6c:98:54:a8:3f:99:db:e9:f1:22:e2:c1:
04:11:4f:a0:9e:42:93:9a:1f:a7:58:76:5a:d9:01:d7:aa:0a:
4b:fc:95:f8:3c:ca:22:83:57:49:06:cd:96:c3:a7:8a:0a:f3:
23:f8:ee:5e:e7:af:11:5a:63:e4:47:32:d5:49:1d:19:97:ba:
4c:bb:9d:f0:dc:6a:5a:4f:4a:76:d1:a2:00:9e:32:85:42:52:
4c:4d:35:ff:b6:a8:25:66:2a:1b:1c:be:b2:57:67:bb:d2:f9:
21:44:88:fb:4d:5d:6f:81:50:a3:5d:d4:3f:69:33:15:99:b1:
89:66:96:a3:ad:b4:96:e2:5f:eb:1a:46:4e:b3:3c:7d:82:9a:
16:ac:6d:d6:52:02:5e:16:64:f4:df:da:0c:d0:e6:72:f1:2f:
ad:dc:13:db:68:0a:32:fb:bb:38:ca:ba:e2:87:0d:69:55:ff:
20:18:07:fd:19:36:53:07:7b:fb:b1:4b:8e:48:9c:f3:c8:63:
50:3d:8f:51:7d:1a:ff:3e:e3:21:4d:b2:3a:93:30:03:32:c3:
b4:75:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:06 2025 by rpki-client