Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/PYVxYCtWGVed2qDgQ_L-BlmjTnw.roa
File: PYVxYCtWGVed2qDgQ_L-BlmjTnw.roa (raw, json)
Hash identifier: Qb4Nh1JQYnf3fOpN9QhZn8yVWXFe+8nLnjlfqNnZckY=
Subject key identifier: 3D:85:71:60:2B:56:19:57:9D:DA:A0:E0:43:F2:FE:06:59:A3:4E:7C
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9B9ECB03009F0137448DD718F75ED
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/PYVxYCtWGVed2qDgQ_L-BlmjTnw.roa
Signing time: Thu 02 Jan 2025 11:49:50 +0000
ROA not before: Thu 02 Jan 2025 11:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60490
IP address blocks: 176.109.64.0/23 maxlen: 23
176.109.64.0/24 maxlen: 24
176.109.65.0/24 maxlen: 24
176.109.67.0/24 maxlen: 24
176.109.70.0/24 maxlen: 24
194.150.88.0/24 maxlen: 24
194.150.89.0/24 maxlen: 24
194.150.90.0/24 maxlen: 24
194.150.91.0/24 maxlen: 24
2a02:28:7::/48 maxlen: 48
2a02:2a:1000::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b9:ec:b0:30:09:f0:13:74:48:dd:71:8f:75:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d8571602b5619579ddaa0e043f2fe0659a34e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:64:82:51:97:ea:72:4a:77:da:2a:7d:f9:
cb:e2:51:b7:ce:4e:c2:92:f1:5f:75:90:aa:4f:9b:
6b:84:67:68:67:71:b9:b0:56:7b:30:76:9b:c1:4e:
06:e5:32:30:34:9f:f3:ec:31:f6:d0:14:d1:63:d2:
b7:5e:1f:86:15:9c:9d:a2:c7:39:63:03:d0:f2:0c:
d5:fe:5c:c4:59:05:05:24:8a:5b:5b:6a:13:4a:0d:
dc:f8:31:3a:3c:13:24:7f:5d:ea:cd:17:66:fb:82:
20:e4:83:f0:06:e0:5f:60:ab:39:8c:69:78:ef:80:
63:83:a8:c0:cf:c5:9b:9c:9b:25:82:53:07:ce:b0:
66:01:05:23:40:84:1f:87:71:01:e6:ba:24:8b:1b:
01:cf:a6:e1:f0:04:b6:ea:d6:49:78:79:cc:bd:16:
8d:b3:e2:c8:3f:98:04:10:db:6e:be:b2:2e:9a:9a:
e7:be:a1:37:30:ea:e8:ca:5d:11:70:dd:e7:c0:7b:
99:30:41:1c:1e:16:be:29:d3:90:77:2b:e5:2b:8a:
d4:d5:d7:c2:f1:99:c5:c7:b7:eb:98:5a:2b:d1:8f:
fe:f6:53:db:2f:88:8d:0a:2a:e9:12:8b:fc:1e:18:
bb:27:09:e4:ff:89:73:5c:0c:e4:75:a4:71:20:58:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:85:71:60:2B:56:19:57:9D:DA:A0:E0:43:F2:FE:06:59:A3:4E:7C
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/PYVxYCtWGVed2qDgQ_L-BlmjTnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.109.64.0/23
176.109.67.0/24
176.109.70.0/24
194.150.88.0/22
IPv6:
2a02:28:7::/48
2a02:2a:1000::/41
Signature Algorithm: sha256WithRSAEncryption
22:ea:ad:a7:db:77:b0:e5:f9:a0:68:8c:95:07:02:f7:f6:5a:
0e:3e:78:2b:61:69:f9:a9:12:0a:85:76:28:c4:26:71:c8:bb:
5a:91:a8:81:22:ef:54:a3:a7:11:46:78:df:63:80:d0:20:d4:
bd:39:0a:71:c9:41:ec:ec:5c:58:7e:5a:16:62:19:0f:4a:e3:
90:a8:75:17:27:ce:13:53:56:df:e3:28:87:9f:f0:d8:c2:23:
36:4d:9c:e5:55:47:40:9a:d3:fb:42:85:0f:6e:a5:33:06:37:
52:21:94:08:3c:72:c5:ef:dc:c1:c0:e5:51:2f:dd:86:ef:5b:
9f:24:91:d6:b4:eb:6a:69:a9:c6:ef:33:76:62:d3:9a:c4:f2:
fd:f2:b2:d2:70:e8:62:e7:10:74:90:60:4e:33:fd:2f:b5:da:
1f:d4:15:ec:b2:a9:cd:2b:a2:aa:67:dd:b4:9c:c0:b1:6d:9e:
69:fb:40:1c:a9:22:b9:c6:97:32:d9:1d:46:9a:5e:23:e4:b9:
17:c0:6a:6b:23:08:68:34:d2:30:fa:42:bf:7d:0e:3a:c3:da:
74:89:9c:e2:88:4c:77:8a:04:9c:88:01:4d:d6:20:f6:54:fc:
98:5a:09:08:c8:fa:1f:fb:09:36:c5:e3:97:4d:59:ec:e8:7b:
4f:e1:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:29 2025 by rpki-client