Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa
File: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (raw, json)
Hash identifier: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=
Subject key identifier: 0A:57:1F:CA:27:22:64:CB:5D:82:90:C1:1D:2C:4D:67:CF:D9:17:D7
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 019425FDB6AD99599B9A2CF10134688AA5FE
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41714
IP address blocks: 93.157.80.0/21 maxlen: 24
146.185.56.0/21 maxlen: 24
185.163.148.0/22 maxlen: 24
185.163.148.0/23 maxlen: 24
185.225.172.0/22 maxlen: 24
193.37.128.0/23 maxlen: 24
193.37.130.0/24 maxlen: 24
2a06:e300::/29 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b6:ad:99:59:9b:9a:2c:f1:01:34:68:8a:a5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a571fca272264cb5d8290c11d2c4d67cfd917d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:1e:8f:15:22:c1:f7:e4:cc:53:a3:ec:dd:
bb:f7:06:ac:c6:74:4d:a7:6f:00:98:aa:dd:0a:58:
cc:90:13:6f:56:12:32:e6:5a:02:5b:3f:19:b6:1d:
e4:1e:de:b6:2a:10:c9:da:eb:3b:bd:7c:4f:9a:53:
08:d3:f3:64:ac:ef:0d:aa:77:c3:47:0b:da:93:ad:
db:c3:df:30:6a:55:6e:82:64:2c:37:06:7c:e0:b0:
52:20:f7:21:14:40:bb:65:95:d7:88:75:30:b5:12:
c4:db:cf:06:15:33:45:d3:f3:cc:f0:6f:2a:9a:6e:
67:c8:c5:7b:a4:6f:f0:a9:f4:5b:c6:9e:74:96:b4:
bc:b7:ec:21:98:7a:09:4d:4a:65:86:58:91:d7:19:
f4:a1:7c:23:55:53:52:54:ef:e6:c1:6c:98:3f:c3:
c1:b9:27:d7:12:bf:ad:e3:6b:d8:bc:bf:b3:0f:aa:
83:61:54:fd:7c:75:cf:6b:df:b1:29:fa:a3:3e:dd:
c3:1a:de:95:5c:a5:9a:56:0f:03:da:be:f6:07:f4:
b9:c5:99:cb:5b:2b:ad:b7:d1:a9:1e:bd:f4:8b:fc:
87:2b:34:b1:32:fa:bf:b7:b5:24:20:31:86:7c:1e:
5d:7c:e6:e0:6c:0a:43:48:eb:44:d8:6e:60:b9:ef:
e4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:1F:CA:27:22:64:CB:5D:82:90:C1:1D:2C:4D:67:CF:D9:17:D7
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.80.0/21
146.185.56.0/21
185.163.148.0/22
185.225.172.0/22
193.37.128.0-193.37.130.255
IPv6:
2a06:e300::/29
Signature Algorithm: sha256WithRSAEncryption
05:2f:0e:8f:4d:28:48:7d:c2:63:f7:fd:f4:d6:b7:6d:04:a2:
a4:15:06:c1:72:5d:7f:ac:ed:77:b7:bd:94:2d:72:46:9b:b2:
28:6d:cc:62:c8:f0:cc:00:54:21:24:91:c4:8d:45:85:6d:9f:
e8:99:3d:9e:8e:31:0e:d5:09:f9:37:26:0a:18:b3:e9:c0:13:
f1:85:49:a1:bb:6e:c6:16:15:17:10:75:92:22:da:fa:79:05:
37:61:08:6c:6a:4c:ae:59:f0:8e:53:7c:f3:18:b0:67:ee:a6:
20:28:47:41:78:ec:b0:5a:f6:11:82:8d:52:6a:c8:77:7c:73:
5c:64:75:60:9b:d3:c4:e3:d0:ca:82:1a:52:4b:1c:92:77:bb:
39:01:fc:b3:61:77:88:c9:0f:65:59:2e:c3:40:09:d5:56:e6:
5c:4a:88:df:1f:87:35:8f:b4:37:29:c6:c1:c8:5f:02:39:c5:
97:c9:28:76:1f:2e:3e:64:1a:6d:5f:af:88:af:54:bc:c6:70:
d5:83:2c:80:fe:1d:1f:ff:9b:6e:66:c1:9e:46:b1:1c:de:ef:
0c:ec:d4:dd:ea:85:d1:ac:d3:f3:8c:ee:cb:7b:3a:fe:39:4a:
0c:5b:d6:72:18:82:b1:36:83:bf:91:c8:64:60:12:0a:07:ed:
5b:16:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:23 2025 by rpki-client