Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/unsmmkYBpbXrCubGO7XS6N7I7QM.roa
File: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (raw, json)
Hash identifier: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=
Subject key identifier: BA:7B:26:9A:46:01:A5:B5:EB:0A:E6:C6:3B:B5:D2:E8:DE:C8:ED:03
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F38DE38D4CF31FA4B7153CF66BA20
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/unsmmkYBpbXrCubGO7XS6N7I7QM.roa
Signing time: Wed 01 Jan 2025 13:47:38 +0000
ROA not before: Wed 01 Jan 2025 13:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13046
IP address blocks: 89.164.0.0/16 maxlen: 24
141.136.128.0/17 maxlen: 24
141.138.0.0/18 maxlen: 24
213.191.128.0/19 maxlen: 24
213.202.64.0/18 maxlen: 24
2001:1af0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:38:de:38:d4:cf:31:fa:4b:71:53:cf:66:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba7b269a4601a5b5eb0ae6c63bb5d2e8dec8ed03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:e9:98:43:86:53:83:23:e5:a4:72:49:15:
81:bc:7d:87:60:1f:14:d2:89:7d:ef:9e:0d:c4:e7:
63:60:30:c0:32:52:f3:e2:61:09:25:c8:01:26:6a:
1b:6a:aa:52:0e:b6:26:0f:48:2d:26:2c:88:73:b2:
62:87:57:21:d3:95:db:4d:37:f4:ea:cf:66:60:c1:
96:09:7e:27:bb:8a:da:6b:9d:8c:c4:e4:c3:77:3a:
c7:00:cf:67:4d:2c:ea:0b:7a:6b:a1:55:bd:0c:b3:
5f:f5:74:be:12:e8:49:f2:56:8c:6c:6f:0f:21:0e:
b8:31:1f:ab:0a:ad:68:64:f6:b1:6e:7d:4a:1d:05:
4e:7d:30:fa:51:68:31:2f:b5:4c:31:8c:00:a3:21:
10:7f:0e:75:63:df:71:25:15:da:77:82:bb:47:e5:
d9:bb:eb:50:87:f0:bd:28:61:91:fa:98:69:ac:3a:
e2:a0:55:bf:f3:b3:ea:d9:a4:78:4a:d7:3e:3c:1a:
7b:80:e9:32:c8:80:b5:41:e9:30:e3:69:71:0d:a6:
41:5b:45:b4:4f:76:11:3c:12:e2:ef:38:02:d6:6f:
d4:bd:f0:b7:bb:15:e3:91:be:23:f9:3f:f1:70:91:
5c:b3:9d:49:88:d0:4c:69:c4:9b:4a:f2:6d:89:7e:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7B:26:9A:46:01:A5:B5:EB:0A:E6:C6:3B:B5:D2:E8:DE:C8:ED:03
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/unsmmkYBpbXrCubGO7XS6N7I7QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.164.0.0/16
141.136.128.0/17
141.138.0.0/18
213.191.128.0/19
213.202.64.0/18
IPv6:
2001:1af0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:00:ee:89:11:1b:96:c3:99:b9:bd:3b:67:22:d2:b4:cd:91:
61:89:62:09:6e:3d:89:5f:41:c0:80:8b:a1:28:3c:c5:42:b1:
52:73:20:f6:91:95:e8:ce:ec:df:63:17:32:59:81:7c:f5:91:
2a:76:44:b8:43:25:07:13:01:c0:68:db:a8:16:e5:cc:1c:f5:
b2:59:eb:63:03:e4:ea:61:d5:1e:3d:34:1e:29:c0:80:61:57:
58:ab:a0:a8:ed:ab:89:85:f4:8f:ba:24:1a:df:8b:5e:4d:a9:
4a:f8:d2:95:9f:91:7b:27:a8:14:b0:bd:ed:32:96:1f:fe:08:
f9:a1:bc:f0:1a:2d:38:e4:6b:4c:2c:15:b9:c6:a4:52:09:6a:
af:77:a1:b8:aa:a6:4a:e7:0e:3f:13:59:7e:77:37:89:42:3f:
bf:da:5a:80:2d:7b:ef:ba:68:14:56:b4:42:44:a4:94:2f:ef:
23:a6:54:4d:c5:83:9a:ef:93:d0:b5:bc:7c:78:5f:e1:3c:12:
05:71:df:1d:c5:74:cf:d0:67:ed:e8:2b:68:5c:45:33:9d:5e:
cf:e3:ca:7f:30:eb:08:a9:2b:63:91:47:f6:7c:f9:9c:cb:b0:
f8:bd:a7:97:6f:6d:b8:c8:b0:aa:77:bd:a2:53:b7:04:fa:d7:
55:18:9b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:17 2025 by rpki-client