Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/hNQqLyWEE7IjNl59xq_ezxU6wI8.roa
File: hNQqLyWEE7IjNl59xq_ezxU6wI8.roa (raw, json)
Hash identifier: 7IEBcY81k8+22oLnd26zjkegdbsPc3HsRIQXJRu6T38=
Subject key identifier: 84:D4:2A:2F:25:84:13:B2:23:36:5E:7D:C6:AF:DE:CF:15:3A:C0:8F
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019421B1DC2EA6F0679D502D160DCB93310C
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/hNQqLyWEE7IjNl59xq_ezxU6wI8.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6886
IP address blocks: 141.98.148.0/22 maxlen: 24
185.29.252.0/22 maxlen: 24
212.66.48.0/21 maxlen: 24
2a09:10c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:dc:2e:a6:f0:67:9d:50:2d:16:0d:cb:93:31:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84d42a2f258413b223365e7dc6afdecf153ac08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:68:0d:ed:9d:27:bb:54:0d:3b:9e:00:89:
4f:39:1d:9b:fc:c6:b7:8e:a7:cf:f8:32:b9:7e:01:
e8:28:fa:a7:31:6e:fe:94:a3:f6:aa:75:38:24:de:
22:99:05:b9:e1:47:aa:68:62:8b:ab:df:4d:b0:f5:
74:10:71:c5:d8:9d:55:10:9e:c5:ec:37:bc:80:f2:
67:ab:0e:0a:2f:34:be:08:13:17:a9:d7:ac:fd:17:
2e:1e:f0:89:96:85:8c:1f:a5:ae:a5:0f:85:ff:17:
9d:27:03:09:70:97:72:60:2d:bf:2b:09:b6:46:64:
d8:23:31:4b:49:f0:ab:84:12:bd:2a:ae:74:03:28:
77:27:a3:4a:d9:93:6e:cd:04:c5:47:49:21:77:e9:
a6:3e:8f:76:d9:6b:4c:65:e6:38:0c:87:02:98:4a:
04:73:e8:bb:db:5a:12:9b:93:bb:2b:e2:c8:65:32:
6d:ae:51:0a:73:56:fd:fa:a0:c1:35:58:ae:7f:ac:
b6:cd:b6:72:81:48:3f:52:44:04:d6:08:61:90:fa:
e9:d6:11:9f:a7:22:0c:a4:b8:50:ce:b4:13:2c:6b:
ad:76:ef:61:e7:01:70:94:9a:b7:7a:4b:5a:44:b6:
3c:6a:ad:2b:08:0f:36:4d:b3:9a:5c:60:ed:64:a1:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D4:2A:2F:25:84:13:B2:23:36:5E:7D:C6:AF:DE:CF:15:3A:C0:8F
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/hNQqLyWEE7IjNl59xq_ezxU6wI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.148.0/22
185.29.252.0/22
212.66.48.0/21
IPv6:
2a09:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:c9:0b:92:04:8a:08:da:e8:18:0b:2f:60:37:34:a9:22:e6:
da:1d:4e:d4:ae:9e:c2:eb:66:32:f0:67:49:1e:7b:e7:af:4a:
71:6e:c8:f7:ca:15:23:89:55:bc:36:1b:96:6d:8e:e3:a1:00:
8c:bf:72:1b:91:24:3d:e3:6c:24:ba:d8:c8:e6:e4:55:34:a1:
f2:44:9f:d8:24:a9:b3:dc:45:fe:49:b0:f6:ab:ce:25:03:9a:
0e:24:a7:b9:2a:80:7a:7a:96:14:fc:1b:6e:3d:19:b7:4a:73:
06:ae:4e:58:d3:5d:c3:e0:dc:74:bb:9b:9d:62:87:71:48:4b:
29:c7:17:ba:31:56:9e:62:0d:ec:38:47:01:26:e7:7b:53:8d:
5c:b9:a7:a2:e5:83:06:dc:8e:24:df:66:f2:f9:2d:fd:eb:bf:
93:73:5b:06:f5:f8:e4:4d:13:2f:4b:f4:67:68:81:65:ae:19:
50:ba:3d:7b:78:3d:3b:dc:1c:85:f9:52:6f:0e:13:b6:8c:1a:
07:3f:16:47:1c:80:93:03:1d:25:a6:dd:86:71:a6:44:ef:5c:
a5:f8:60:9a:b1:e2:0e:2e:a1:6f:15:4f:6a:2a:6a:8e:18:e2:
4e:c1:44:1e:b3:4a:5b:d6:05:c1:ab:8e:7c:3a:12:3b:70:0e:
01:29:31:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:44 2025 by rpki-client