Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/_9h5ZKwqdSKkErlK3fCYBbj_WJI.roa
File: _9h5ZKwqdSKkErlK3fCYBbj_WJI.roa (raw, json)
Hash identifier: UW9SDNl7M71q4Lr8IwhlaiOjT1v+Jp+baAjrn4Vs/Lo=
Subject key identifier: FF:D8:79:64:AC:2A:75:22:A4:12:B9:4A:DD:F0:98:05:B8:FF:58:92
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 0194221FF482A5F22FE72552CE2D505B44DB
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/_9h5ZKwqdSKkErlK3fCYBbj_WJI.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13157
IP address blocks: 62.112.32.0/19 maxlen: 19
185.244.56.0/22 maxlen: 22
185.244.56.0/24 maxlen: 24
193.29.250.0/24 maxlen: 24
2a04:ce40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f4:82:a5:f2:2f:e7:25:52:ce:2d:50:5b:44:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffd87964ac2a7522a412b94addf09805b8ff5892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:a0:1d:55:79:c7:28:47:ca:fa:33:22:1f:
56:e4:26:13:61:73:69:38:d4:dd:17:6c:6c:6c:bd:
66:4a:74:76:74:a6:48:a4:18:7b:a4:b7:2e:0d:2f:
bb:0e:9b:29:ca:95:91:99:c3:67:26:51:d9:aa:a2:
c2:f8:0d:46:e7:0a:f3:6e:10:cd:d8:b7:88:63:4e:
0f:8a:01:ba:93:af:da:33:e1:2a:e0:f2:84:47:df:
a6:3f:c9:a9:8a:ce:9b:f3:ed:70:20:7e:54:36:87:
0f:89:ad:0b:5f:d2:0f:67:e9:30:5b:f1:98:a9:55:
ed:c4:79:e9:dd:58:d0:51:7e:6e:b9:10:b1:52:fe:
44:ab:4f:14:7e:14:1b:2d:91:fa:d8:6b:2d:7f:bd:
1c:5b:63:90:4a:77:4a:b2:78:bc:63:ce:22:78:38:
f0:cd:ab:37:86:7f:ba:65:8e:16:90:fe:c9:70:23:
4f:c7:c5:7b:d6:76:8a:a5:55:bf:62:0f:52:21:28:
f7:35:7e:6a:d4:09:9c:fb:40:35:f2:18:ba:ac:de:
c1:e3:cb:e7:64:1a:98:fb:af:f3:bf:97:2f:84:49:
91:c2:12:d2:8e:f6:5a:e1:b9:a9:23:84:a7:75:e1:
61:0a:21:9b:77:ec:41:c6:18:9a:60:a4:b7:da:7d:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D8:79:64:AC:2A:75:22:A4:12:B9:4A:DD:F0:98:05:B8:FF:58:92
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/_9h5ZKwqdSKkErlK3fCYBbj_WJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.32.0/19
185.244.56.0/22
193.29.250.0/24
IPv6:
2a04:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
63:17:07:84:06:62:54:64:fb:76:ec:8f:8b:02:75:41:50:3b:
29:ed:d2:17:5e:f0:ce:a7:a6:f9:06:27:8b:23:46:84:13:17:
03:3f:65:fb:3d:01:99:56:eb:59:1c:35:db:fd:72:a9:a5:b9:
e0:0b:f4:d0:f8:d3:d3:ec:ec:d6:78:3a:61:60:cd:a5:bb:40:
8f:c7:22:55:05:78:de:56:bc:a8:80:87:10:35:22:63:5b:6f:
6a:41:c1:b8:6b:01:2f:71:53:7e:7b:36:4c:d6:54:69:63:52:
26:3a:31:30:c7:78:76:d7:e3:b6:0a:e6:79:55:7b:d4:3e:15:
36:99:3c:a8:d9:a9:48:53:b6:96:06:1a:d3:19:b9:1e:03:df:
f6:97:ec:58:6d:08:d7:63:f7:bc:d8:15:d8:98:0e:7a:d4:34:
a0:bf:d7:1e:f9:38:9a:03:2c:d4:74:bb:a1:0e:94:0c:68:44:
09:19:2a:f8:bd:10:2b:37:c9:3d:52:9e:6f:41:a9:0f:1b:8e:
22:5e:06:a1:14:b2:4f:d4:db:5d:e8:c3:22:44:46:8d:89:e8:
a9:ec:cc:6d:98:9a:b0:9d:9a:4d:16:da:3b:06:18:cd:f7:63:
39:72:7d:77:68:89:9d:92:8e:fe:bb:4b:bb:8d:1e:ea:09:11:
db:a3:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:24 2025 by rpki-client