Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/M6HhHlPpshdNz9eD4RpZo054CNI.roa
File: M6HhHlPpshdNz9eD4RpZo054CNI.roa (raw, json)
Hash identifier: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=
Subject key identifier: 33:A1:E1:1E:53:E9:B2:17:4D:CF:D7:83:E1:1A:59:A3:4E:78:08:D2
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 01942826180A323D056704926BF29D09F1A5
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/M6HhHlPpshdNz9eD4RpZo054CNI.roa
Signing time: Thu 02 Jan 2025 17:52:52 +0000
ROA not before: Thu 02 Jan 2025 17:52:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3226
IP address blocks: 87.250.0.0/19 maxlen: 19
91.146.0.0/18 maxlen: 18
92.55.0.0/18 maxlen: 18
92.241.224.0/19 maxlen: 19
217.14.192.0/20 maxlen: 20
217.29.176.0/20 maxlen: 20
217.114.144.0/20 maxlen: 20
2a00:4580::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:18:0a:32:3d:05:67:04:92:6b:f2:9d:09:f1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: Jan 2 17:52:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33a1e11e53e9b2174dcfd783e11a59a34e7808d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:f6:05:8b:f1:31:0c:85:d5:bd:eb:0d:2a:
bc:a5:94:d4:be:68:39:42:49:cc:8d:8f:1b:9a:58:
8f:58:79:19:6c:a1:66:e0:9d:66:47:2d:68:79:97:
71:1e:de:3e:f0:77:e0:e0:af:3b:08:64:31:10:e1:
a9:bc:04:b7:f3:3f:1a:45:b9:20:0e:1d:a4:eb:d7:
92:e6:d1:13:34:34:6c:62:81:7a:b6:7f:e2:d9:84:
eb:2e:01:ae:89:fb:a5:58:72:0d:69:1d:96:00:bb:
38:bd:93:44:56:96:7d:e3:3b:7b:03:ef:51:51:ea:
bf:bc:b5:16:e4:55:6c:5f:33:00:8e:32:ae:d1:06:
ee:cd:a7:a5:34:bb:3a:30:89:3d:40:e9:b3:e8:6c:
7c:01:5c:29:20:c7:4d:e6:f5:63:b3:7b:a1:eb:8b:
36:dc:dd:7d:55:ab:96:5d:dc:4d:da:86:42:31:90:
77:6c:7f:35:c4:50:45:ee:1a:a9:40:8e:72:4c:b2:
97:ee:d6:83:ef:d3:da:c3:e0:81:3c:1a:70:cc:ba:
06:46:04:bd:4a:e0:49:72:0d:33:18:05:5d:86:ea:
a1:fc:c0:0e:8f:84:13:30:38:03:56:d8:65:c0:f2:
99:06:fa:31:85:a6:9d:c0:24:48:12:61:d1:b5:41:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A1:E1:1E:53:E9:B2:17:4D:CF:D7:83:E1:1A:59:A3:4E:78:08:D2
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/M6HhHlPpshdNz9eD4RpZo054CNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.250.0.0/19
91.146.0.0/18
92.55.0.0/18
92.241.224.0/19
217.14.192.0/20
217.29.176.0/20
217.114.144.0/20
IPv6:
2a00:4580::/30
Signature Algorithm: sha256WithRSAEncryption
69:4b:72:be:6e:44:de:59:10:3a:e6:e5:85:68:41:04:ef:5b:
ab:69:26:fc:6e:3b:28:17:04:3f:cf:63:d1:fd:cf:b8:b5:d2:
42:9c:fc:da:51:f3:30:3b:ab:8b:af:af:46:c3:ca:5b:05:46:
67:81:5b:5a:a6:49:09:ef:fc:32:27:23:80:93:c5:63:6a:c4:
60:c4:ce:ff:bb:65:11:9d:b4:2d:3f:ac:e8:e0:5e:ac:9c:d4:
ac:12:29:95:24:ff:c1:98:a7:9b:d9:5e:5d:0c:f7:32:3d:f3:
ae:96:25:68:59:52:d0:06:bb:ca:42:2b:22:0c:11:dc:48:96:
f3:2e:5d:42:7d:25:4e:ff:48:40:a1:ae:81:62:f7:30:bb:39:
de:d2:3d:e9:ce:11:2e:c1:5f:7a:56:0d:0a:f3:af:33:c3:72:
ed:b4:96:69:41:65:e3:6d:13:47:b4:23:8c:67:2a:a6:22:32:
8e:f0:9a:02:de:7d:fd:ed:c5:9b:37:57:2b:e5:c1:9e:8e:6f:
f1:f9:7c:8d:9e:44:a9:eb:1f:c4:9d:5d:be:77:00:c4:73:57:
f1:fd:bd:2a:70:41:fb:3d:1b:98:4c:0a:ae:12:5f:47:6f:80:
27:6a:ea:2b:c4:21:2f:95:b2:69:dd:23:78:21:66:f6:8f:63:
11:ae:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:03 2025 by rpki-client