Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa
File: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (raw, json)
Hash identifier: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=
Subject key identifier: AC:5B:50:E7:6B:E7:9B:E1:9F:D8:93:78:2F:AC:9B:D0:34:E2:52:0C
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 01942445940D660765DD9CDD5C582A095BBD
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa
Signing time: Wed 01 Jan 2025 23:48:47 +0000
ROA not before: Wed 01 Jan 2025 23:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60216
IP address blocks: 176.121.20.0/22 maxlen: 24
176.121.20.0/24 maxlen: 24
176.121.21.0/24 maxlen: 24
176.121.22.0/24 maxlen: 24
176.121.23.0/24 maxlen: 24
2001:67c:fb0::/48 maxlen: 48
2001:67c:18d0::/48 maxlen: 48
2001:67c:1bc0::/48 maxlen: 48
2001:67c:2390::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:94:0d:66:07:65:dd:9c:dd:5c:58:2a:09:5b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Jan 1 23:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac5b50e76be79be19fd893782fac9bd034e2520c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:03:bf:33:97:ef:20:33:b2:01:21:1f:88:
b8:e9:6b:7d:09:28:5c:ee:69:d5:a4:f3:00:8e:6d:
84:de:1a:b9:04:1c:c3:c6:41:f4:ca:94:8a:51:04:
1c:bb:cc:09:dd:c4:74:21:3d:59:94:94:29:91:75:
21:84:63:0e:ef:dd:e3:9d:6a:1e:c5:c1:57:62:ed:
d7:b1:d0:a7:95:ad:d7:da:42:a2:82:3a:72:36:4b:
4e:28:1e:f5:34:2e:ed:11:4b:01:40:f2:6c:e9:2d:
99:ee:63:57:be:8a:72:c3:15:1f:a3:27:40:00:73:
7a:9d:b6:ed:49:64:9b:11:32:e4:fc:ef:e6:4d:5b:
f2:16:36:17:a1:51:bd:f9:ce:85:14:a0:d2:9d:a1:
d4:24:c6:13:38:23:d4:4a:6d:fa:ab:02:78:2e:36:
4c:5b:0d:0e:48:f9:3a:a8:cd:7a:c5:cb:9b:5c:b3:
89:24:54:b3:c4:a6:b1:8f:94:78:16:2b:bf:eb:5f:
91:6b:e3:26:44:bf:33:b5:6d:b2:33:53:b6:49:5b:
4f:a6:7f:a7:cd:e1:f8:a7:1e:86:2a:0f:eb:b0:81:
1d:f0:ea:a7:c2:9c:88:8b:5d:19:93:50:09:82:70:
0f:e1:e1:0f:1e:77:2e:0b:79:d0:0a:d9:f6:a0:56:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:50:E7:6B:E7:9B:E1:9F:D8:93:78:2F:AC:9B:D0:34:E2:52:0C
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.20.0/22
IPv6:
2001:67c:fb0::/48
2001:67c:18d0::/48
2001:67c:1bc0::/48
2001:67c:2390::/48
Signature Algorithm: sha256WithRSAEncryption
15:be:2d:23:b6:f3:b0:cc:06:84:7f:fb:38:9f:86:6a:01:37:
fc:54:78:75:fb:08:90:db:f3:15:21:50:cb:7b:9b:94:5e:eb:
af:9e:da:cf:de:4f:e2:66:cb:d9:07:4b:15:08:85:23:f0:e7:
ef:ed:1b:c7:16:e8:f3:1c:47:05:28:5a:4a:bb:e3:58:9a:1b:
69:e4:43:e2:f7:30:83:d6:1e:28:80:6b:16:69:d2:09:1e:b8:
b9:d9:82:81:03:be:2e:43:d1:de:14:c0:c0:7a:ca:f1:3e:5d:
d3:b7:f3:ec:39:18:e0:d3:0a:3a:a1:08:63:ff:a0:4f:2f:5a:
4c:28:a4:83:5d:22:f7:c1:1d:0c:6a:b9:75:1f:fa:d1:37:96:
83:30:1f:14:9c:44:13:42:9c:e9:be:f1:6c:c3:21:54:e2:4c:
39:c2:ea:36:a6:94:ef:e2:a8:e4:0c:49:05:ef:f6:49:ed:8d:
89:a8:02:04:35:59:e3:ac:90:a4:da:3b:21:2d:d5:75:8c:1d:
2b:15:2e:4e:10:6b:01:4f:c1:e7:1a:41:f3:00:d3:33:79:23:
3c:21:ef:bd:84:72:a9:ad:e0:c7:0b:2e:61:ec:4e:98:b7:7a:
70:65:ce:fa:9e:e4:5e:dc:42:c9:f6:ed:b4:7a:c3:e3:43:a9:
f3:d7:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:04 2025 by rpki-client