Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa
File: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (raw, json)
Hash identifier: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=
Subject key identifier: 4F:87:A3:23:4A:35:F9:94:DF:16:25:7B:40:AB:41:F4:3E:D4:72:91
Certificate issuer: /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial: 0194258EAA83405CE9C2CAC80775FF9E2198
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa
Signing time: Thu 02 Jan 2025 05:48:14 +0000
ROA not before: Thu 02 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28792
IP address blocks: 80.82.240.0/20 maxlen: 24
185.58.176.0/22 maxlen: 24
195.46.60.0/22 maxlen: 24
195.85.245.0/24 maxlen: 24
2a01:248::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:aa:83:40:5c:e9:c2:ca:c8:07:75:ff:9e:21:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Validity
Not Before: Jan 2 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f87a3234a35f994df16257b40ab41f43ed47291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:81:85:07:ba:27:46:d8:c8:1e:92:ce:4d:
40:c2:1e:e8:24:41:05:ae:f8:33:3e:76:b9:ff:44:
ad:2f:76:c5:67:82:0c:cc:77:37:4b:7d:61:6c:c5:
ba:2b:17:7c:66:45:4b:71:54:19:a7:94:86:81:a6:
18:8b:52:be:af:c0:14:94:3e:7a:be:2f:3a:81:80:
2d:d2:56:73:68:c0:28:9d:11:b9:51:cf:ab:53:44:
f4:f3:0d:af:9a:68:22:b0:33:10:86:b8:6a:80:2f:
19:9a:ee:df:ef:a5:3a:e8:23:26:e5:6b:72:63:4a:
8e:f3:47:7b:0a:28:6b:29:4e:ed:dc:5a:88:c9:59:
34:56:c3:92:07:98:c2:2c:5e:e3:fa:2c:19:b9:a3:
f1:fe:b8:64:8c:41:cb:33:af:36:4c:cc:76:a2:4f:
28:82:08:b1:ce:7c:d1:7c:e3:ad:1f:b3:37:cd:b1:
f0:76:18:9e:a6:6a:c9:a3:89:de:9f:3b:fc:43:d9:
3f:dd:b6:73:1e:a8:b2:e7:51:b6:b0:b2:ec:2b:3a:
c2:b6:df:d4:78:53:23:05:95:53:0c:f2:b1:bf:47:
7a:e6:27:de:b5:ea:83:19:e8:55:7b:6f:aa:0d:38:
c2:03:41:12:93:62:d2:d8:5a:76:68:d3:d4:58:02:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:87:A3:23:4A:35:F9:94:DF:16:25:7B:40:AB:41:F4:3E:D4:72:91
X509v3 Authority Key Identifier:
keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.240.0/20
185.58.176.0/22
195.46.60.0/22
195.85.245.0/24
IPv6:
2a01:248::/32
Signature Algorithm: sha256WithRSAEncryption
2f:a7:94:41:ba:e3:34:d0:39:20:19:c0:37:75:a7:48:b0:0f:
d6:37:1d:c2:5a:0d:1a:12:18:56:a9:a2:31:72:2f:f5:ec:2b:
22:ba:a5:bf:6e:86:ef:ed:de:aa:05:e1:21:d3:40:cb:63:2b:
8e:7c:9e:7d:02:4b:0d:ad:a1:9c:43:be:1f:2d:c5:64:27:93:
70:a0:ec:74:7d:81:42:49:a5:27:b2:5b:c3:b7:f0:58:eb:ed:
4d:a2:df:60:e5:2b:4e:ec:37:64:69:84:9b:68:44:4d:07:c0:
5a:f0:53:04:cb:a3:6b:7b:7f:08:65:03:94:28:3f:b3:bc:2a:
04:c5:0b:74:8c:84:7a:04:8a:a7:c5:0d:5e:9b:3a:73:40:c5:
72:33:4e:3b:11:58:34:47:c3:ff:c5:22:8f:00:34:9a:0f:84:
2e:f5:4b:a8:07:5f:be:d1:e0:20:fd:f8:b6:61:22:b8:f2:e4:
42:fc:8d:96:47:48:4b:2c:b3:37:a0:89:26:8a:14:c0:65:cd:
2e:2b:22:3d:12:be:ae:55:db:29:66:4e:8e:b5:72:7d:c6:35:
ef:9f:02:13:6e:13:48:ac:68:f2:59:f3:a6:51:54:8a:16:8b:
e8:43:78:05:71:34:45:51:71:8c:b5:e3:03:9f:77:71:0f:e2:
96:f7:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:24 2025 by rpki-client