Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/i-OzQF2bcpPJxDcOX5kIL87LKyE.roa
File: i-OzQF2bcpPJxDcOX5kIL87LKyE.roa (raw, json)
Hash identifier: y62UPCmvVteCyYBr7OynuTmwVuaAEnPLTcqTccWvdJo=
Subject key identifier: 8B:E3:B3:40:5D:9B:72:93:C9:C4:37:0E:5F:99:08:2F:CE:CB:2B:21
Certificate issuer: /CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Certificate serial: 0194221F67C4F10D4F3CB617CCED799949D3
Authority key identifier: 92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/i-OzQF2bcpPJxDcOX5kIL87LKyE.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41268
IP address blocks: 37.235.128.0/17 maxlen: 24
93.186.96.0/20 maxlen: 24
185.140.160.0/22 maxlen: 22
193.203.60.0/22 maxlen: 24
2a03:2c00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:67:c4:f1:0d:4f:3c:b6:17:cc:ed:79:99:49:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8be3b3405d9b7293c9c4370e5f99082fcecb2b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:64:70:3e:0a:99:27:19:8b:d1:83:de:4f:
b9:86:f2:3d:97:21:0d:b9:85:ae:6e:49:eb:4a:88:
2e:56:62:d4:60:0d:b8:f3:8f:3c:62:54:32:4f:ad:
03:08:5a:dc:98:ac:9e:86:5a:b5:7a:e6:24:0b:e3:
41:20:c2:66:85:e5:e2:9e:19:0e:56:e9:f0:c4:74:
fd:66:5a:8e:fb:f5:32:16:de:11:f1:a6:82:1e:a0:
00:51:e8:0e:76:2d:8d:28:49:2a:89:a0:e5:fb:00:
8f:73:71:b6:bc:bb:fc:92:12:a6:19:1a:07:40:ee:
bc:47:42:07:da:d2:17:f6:a2:d1:60:25:62:d1:28:
75:cb:75:b9:a3:a9:17:c0:f5:01:72:f3:12:1c:68:
d8:95:b7:d8:74:2d:11:db:f7:f1:61:e0:2c:50:b6:
7c:5f:4a:30:b0:62:de:3f:54:bd:f6:ce:e4:a5:b9:
d0:ef:8e:16:d2:aa:fd:24:ea:6d:8f:43:41:a8:ad:
c4:3e:30:e5:72:d1:f6:fd:e6:66:28:0f:ed:72:36:
94:89:bf:b8:09:58:20:c2:01:db:da:9b:25:b0:42:
06:15:ac:1e:ab:aa:8f:00:5a:16:8b:82:00:f5:06:
e2:9c:1e:1b:37:5d:92:e7:35:ad:7f:fc:74:0a:94:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E3:B3:40:5D:9B:72:93:C9:C4:37:0E:5F:99:08:2F:CE:CB:2B:21
X509v3 Authority Key Identifier:
keyid:92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/i-OzQF2bcpPJxDcOX5kIL87LKyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.128.0/17
93.186.96.0/20
185.140.160.0/22
193.203.60.0/22
IPv6:
2a03:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
29:3a:d1:21:dd:0a:5c:6d:5c:da:79:d3:a8:5b:86:e4:ee:d8:
32:77:b4:f6:77:9d:35:30:cf:9c:9a:0a:eb:6b:5c:32:44:36:
51:88:43:40:2f:ee:30:73:8f:9e:bc:11:43:61:30:24:6c:bd:
74:b9:6b:a8:69:0e:5a:04:fd:a3:1d:24:5b:e4:44:0c:27:f8:
31:97:4c:05:03:76:80:94:b7:bc:1f:bd:92:8e:22:3b:97:5e:
80:8a:4b:37:54:c0:10:68:cc:3b:dc:87:51:2a:11:33:37:8e:
f1:6e:cc:b9:21:2b:5b:81:e8:44:b6:41:9a:7a:9d:f8:1d:31:
a5:34:c8:ce:f8:a8:05:a9:22:70:2f:bf:67:99:d2:c6:51:bc:
50:b0:ae:3e:99:7a:d4:08:8a:23:80:30:dc:d3:dc:6b:7d:bf:
88:3e:7f:93:99:e3:ac:6e:6c:b6:5e:33:5f:7d:6c:94:46:95:
24:e0:9c:2d:f4:b2:91:8d:8a:8a:1e:18:c6:30:dc:b4:5e:e8:
a7:9a:ce:d9:b4:95:0f:ca:62:bb:3f:30:a4:79:e0:1a:a8:2b:
82:6b:9f:cc:12:65:32:39:71:a3:df:38:85:8e:b7:a4:5a:6c:
5d:87:d8:bc:1a:ff:3e:0a:29:2e:c5:ad:fc:45:c1:b9:48:91:
b8:9a:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:34 2025 by rpki-client