Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa
File: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (raw, json)
Hash identifier: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=
Subject key identifier: AF:D8:AF:3C:21:FB:07:E1:08:8E:6B:CE:78:62:2C:53:56:D5:98:9C
Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial: 019421B22E69A18465869DC97B668A95FCD1
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203293
IP address blocks: 185.139.92.0/22 maxlen: 24
2a07:1440::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2e:69:a1:84:65:86:9d:c9:7b:66:8a:95:fc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afd8af3c21fb07e1088e6bce78622c5356d5989c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:e0:f1:23:6a:56:c8:be:1a:38:29:c0:42:
0e:e2:54:5f:a3:ef:b4:a4:f5:81:cd:1c:f3:d0:5a:
ae:bd:9b:dd:0c:ec:d5:55:01:a3:43:8a:9f:bb:ce:
2e:6c:ac:07:55:1f:33:22:5b:a7:aa:00:ac:38:c6:
d7:0a:8d:a3:07:44:f4:e6:ed:a7:b9:4e:9f:0a:77:
1f:ff:91:4d:93:b2:08:24:8b:6f:bc:ff:d8:5a:1e:
69:4b:0f:ef:0e:74:13:52:33:bc:43:cc:cf:42:f2:
2c:f7:34:c5:bd:5b:94:f8:56:f1:0b:53:9b:5e:13:
71:97:eb:a8:1f:dc:24:84:91:85:ec:dd:61:b0:4c:
82:e3:89:07:be:40:cc:fd:5e:b1:63:41:93:6e:1c:
13:80:5c:86:e2:9b:bd:d2:3a:fe:c7:3e:68:3b:22:
59:37:25:8a:f6:15:92:f8:73:42:18:3a:b7:1c:40:
a9:01:89:93:fc:d5:f2:d6:2f:d8:7a:82:ac:56:ea:
f0:8f:81:d5:a1:90:18:84:41:06:d4:39:5a:eb:18:
49:c5:98:97:3c:ef:2e:36:6b:85:81:71:7a:77:cc:
b8:32:5f:d0:80:5b:bd:cd:77:b5:f3:68:ba:f9:6a:
cf:3e:54:f4:c9:47:e2:5d:3b:7f:7f:de:9c:e1:4b:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D8:AF:3C:21:FB:07:E1:08:8E:6B:CE:78:62:2C:53:56:D5:98:9C
X509v3 Authority Key Identifier:
keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.92.0/22
IPv6:
2a07:1440::/29
Signature Algorithm: sha256WithRSAEncryption
34:8f:cf:02:08:e6:73:28:55:fb:ed:6f:f3:6e:f4:5b:35:51:
79:13:8a:bf:0b:4d:5b:31:17:ec:df:80:ae:cd:6f:82:61:8a:
e2:7e:05:d2:cc:d2:b7:ef:8f:a5:30:50:41:be:84:4c:71:ec:
48:ec:89:60:71:db:cf:ef:3d:3c:87:37:75:44:ea:75:ca:a6:
53:3c:c6:22:c6:39:68:5c:a7:a1:fc:6a:44:8d:d3:20:02:4a:
29:30:19:20:54:f4:db:17:aa:48:fd:57:89:e0:3c:d4:02:5d:
0d:53:b8:e9:1b:a1:65:bf:cc:7e:50:01:85:73:91:d6:39:14:
59:6b:e6:a0:31:b0:76:16:73:f7:1b:49:e9:87:75:ef:0b:cc:
59:11:53:f1:b9:25:49:24:dc:8f:ec:11:4b:4d:b3:60:1d:4f:
96:b8:83:59:b5:94:63:8d:62:2f:47:3f:8a:b3:b3:41:78:88:
f8:4a:9a:07:95:a0:91:8f:8d:f4:ec:d3:41:33:43:88:8e:fb:
98:eb:19:10:ee:0a:84:e1:ee:64:44:75:47:5e:90:04:78:40:
9f:7d:f8:e5:0a:36:73:82:08:8f:d5:66:c3:1e:3d:60:b5:b2:
b6:9e:f5:9a:02:6b:81:a5:74:99:eb:8e:80:e8:43:fc:5a:68:
7f:3c:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:12 2025 by rpki-client