Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IH4sXcqwnvhlYhYNVGkohML13P0.roa
File: IH4sXcqwnvhlYhYNVGkohML13P0.roa (raw, json)
Hash identifier: 0Ria3/AvAd2cgyor17KXSZfKr+gZyyKEPG1CmeJ0Q+Y=
Subject key identifier: 20:7E:2C:5D:CA:B0:9E:F8:65:62:16:0D:54:69:28:84:C2:F5:DC:FD
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B8F291C250080518785943FAF33A4
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IH4sXcqwnvhlYhYNVGkohML13P0.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50564
IP address blocks: 86.104.25.0/24 maxlen: 24
176.227.156.0/24 maxlen: 24
178.156.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8f:29:1c:25:00:80:51:87:85:94:3f:af:33:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=207e2c5dcab09ef86562160d54692884c2f5dcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:20:a7:3e:4c:c7:59:ea:54:cd:f5:b8:55:
c8:fe:15:86:c2:af:e4:65:90:b3:6c:a2:95:77:85:
e6:15:77:4f:58:24:6f:78:69:a0:28:ef:57:bf:54:
5c:64:6b:6f:7a:1f:89:96:70:c3:93:13:30:a7:8f:
cb:03:f7:0f:10:d1:fe:a2:73:61:4d:d6:bf:20:4f:
bb:08:b9:f6:c1:e5:af:44:11:d5:19:38:36:8b:b0:
e1:8b:4c:64:b0:a1:d5:8a:fc:ba:db:60:bc:f4:5a:
6d:2f:36:5b:a1:e1:0f:c6:9b:be:05:2c:99:54:28:
f8:ef:3a:1f:7c:14:16:e2:fb:c8:47:4b:ee:25:77:
2c:98:e7:79:16:61:3c:f5:69:0e:22:80:3b:10:66:
94:a4:a2:00:a3:f8:d1:0e:22:7e:58:c3:ac:89:70:
c8:ea:2b:a1:9d:a9:50:d7:cd:cf:8f:14:d9:ea:44:
25:4e:49:db:b2:fc:79:cd:eb:83:84:ee:ad:9f:d1:
0d:14:03:f4:15:a8:76:59:9f:a9:e6:f6:9b:3f:43:
d2:7e:41:eb:2d:4f:93:df:73:64:d2:58:b7:45:42:
b5:1e:be:3b:dc:57:1c:8d:b0:9c:66:0c:b3:b8:de:
98:91:78:b8:01:f3:46:3a:99:8d:5f:42:04:aa:4c:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7E:2C:5D:CA:B0:9E:F8:65:62:16:0D:54:69:28:84:C2:F5:DC:FD
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IH4sXcqwnvhlYhYNVGkohML13P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.25.0/24
176.227.156.0/24
178.156.77.0/24
Signature Algorithm: sha256WithRSAEncryption
20:0e:7f:17:a7:2b:e4:54:ed:b3:55:5c:70:7b:ec:cd:9f:d0:
70:98:94:74:49:d7:49:1c:b7:f4:88:ed:2a:32:66:d2:6e:29:
f9:d6:57:b6:5e:a9:c7:ab:30:7f:a7:a4:7b:3e:32:e9:38:09:
28:4b:df:4a:42:dd:42:3b:08:53:c7:8f:27:5f:8c:de:c5:38:
31:ee:03:b1:a4:76:3a:fb:43:13:5c:bd:89:6a:01:40:94:eb:
23:d8:f0:9f:fd:45:8e:d7:80:33:ae:15:b9:cb:93:18:5a:7b:
17:62:db:c4:d6:36:56:2c:56:46:8f:94:43:d1:cb:dd:ca:4c:
a7:55:d3:35:4c:d4:c9:be:44:22:88:72:9b:9e:a2:8d:63:0f:
2c:83:97:a0:c5:9f:4d:d1:d6:4e:65:cb:29:92:18:9f:ef:07:
91:27:7b:c7:2c:bc:18:fc:3e:9c:ea:70:a0:7f:bf:09:70:f9:
23:e0:92:c7:b4:13:42:2e:00:fc:1a:7c:b8:bf:78:a7:e0:7b:
47:28:56:27:c5:af:8f:1f:01:cb:fe:fb:28:0c:89:82:bd:8b:
14:59:2f:70:3d:0f:d8:c5:3b:0d:26:49:7f:d2:87:6f:be:af:
5a:98:6e:93:a8:75:3c:16:8a:1f:0c:f9:8a:99:df:e6:9b:10:
9c:35:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:25 2025 by rpki-client