Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/50dgdJCY1U_X23NXGljLz9Pi_IE.roa
File: 50dgdJCY1U_X23NXGljLz9Pi_IE.roa (raw, json)
Hash identifier: ZtT3vskcJeBBLD0zBcohFAUSQxBke5ZavVBHI2qWEhI=
Subject key identifier: E7:47:60:74:90:98:D5:4F:D7:DB:73:57:1A:58:CB:CF:D3:E2:FC:81
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 019428236B10FA9C474B6B5BA6CEB2C31D90
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/50dgdJCY1U_X23NXGljLz9Pi_IE.roa
Signing time: Thu 02 Jan 2025 17:49:57 +0000
ROA not before: Thu 02 Jan 2025 17:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202766
IP address blocks: 77.72.104.0/21 maxlen: 24
84.18.0.0/19 maxlen: 24
92.60.160.0/20 maxlen: 24
176.98.220.0/22 maxlen: 24
185.66.60.0/22 maxlen: 24
185.145.224.0/22 maxlen: 24
185.155.64.0/22 maxlen: 24
185.173.44.0/22 maxlen: 24
185.187.180.0/22 maxlen: 24
185.224.76.0/22 maxlen: 24
193.34.240.0/22 maxlen: 24
195.5.64.0/19 maxlen: 24
195.5.64.0/24 maxlen: 24
195.5.65.0/24 maxlen: 24
195.5.66.0/24 maxlen: 24
195.5.67.0/24 maxlen: 24
212.49.128.0/18 maxlen: 24
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 24
212.66.164.0/22 maxlen: 24
212.66.168.0/21 maxlen: 24
212.66.176.0/20 maxlen: 24
212.163.0.0/16 maxlen: 24
213.9.128.0/17 maxlen: 24
213.192.192.0/18 maxlen: 24
2001:ac0::/32 maxlen: 48
2a0d:59c1::/32 maxlen: 32
2a0d:59c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:6b:10:fa:9c:47:4b:6b:5b:a6:ce:b2:c3:1d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 17:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e74760749098d54fd7db73571a58cbcfd3e2fc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:bf:20:1f:4b:f8:81:20:83:f4:d1:38:96:
86:5c:a6:e5:ad:69:2e:ea:b5:83:d1:2c:fc:7b:02:
3b:ca:8b:5a:38:bc:d1:fd:36:7f:33:23:fa:eb:8a:
0b:6a:01:6b:1c:a3:57:2e:4c:c7:0c:03:b8:1e:fa:
a8:2b:bd:56:4f:8b:04:4b:d0:08:42:20:06:a2:d3:
89:1d:52:4e:37:01:a6:13:78:13:36:37:7b:73:94:
34:24:23:0a:4c:53:7d:ce:37:cb:72:dc:b8:3f:5f:
62:8c:83:d6:ff:54:ff:e9:bc:63:fd:44:5f:56:ad:
18:72:f3:ca:d8:6b:c4:0e:d6:2f:e6:28:b7:e3:9d:
e8:84:16:a6:62:f7:4f:58:1d:76:79:5f:0d:21:fc:
9a:b7:1f:49:5d:e8:25:9c:18:33:4e:4b:82:25:f3:
68:6d:fe:f8:56:67:ed:70:9a:d9:0b:a2:ac:c1:6f:
be:2e:9c:7f:50:3e:f8:80:5e:17:ac:09:19:3a:c6:
3a:e6:f9:a7:20:13:6d:e5:1c:40:30:e8:5d:95:30:
fe:df:2d:f1:8d:98:50:6f:f7:a8:91:64:09:38:44:
1a:aa:ff:6f:e1:eb:23:1c:bb:cd:ed:57:09:48:b3:
7b:63:20:d6:48:c8:5f:42:b6:70:0f:ed:da:ba:af:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:60:74:90:98:D5:4F:D7:DB:73:57:1A:58:CB:CF:D3:E2:FC:81
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/50dgdJCY1U_X23NXGljLz9Pi_IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.104.0/21
84.18.0.0/19
92.60.160.0/20
176.98.220.0/22
185.66.60.0/22
185.145.224.0/22
185.155.64.0/22
185.173.44.0/22
185.187.180.0/22
185.224.76.0/22
193.34.240.0/22
195.5.64.0/19
212.49.128.0/18
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/32
2a0d:59c1::/32
2a0d:59c7::/32
Signature Algorithm: sha256WithRSAEncryption
c5:55:44:1d:e9:47:94:b1:d3:68:8b:fb:c8:ad:11:bf:3d:27:
83:e9:9e:5e:bc:76:e4:6a:f3:5a:78:ff:2a:e2:23:1f:48:13:
3a:10:98:b3:a3:b5:ec:af:a7:ad:94:2c:d6:60:a8:e4:a8:a0:
cb:c0:4e:c7:0f:17:6f:6a:ab:e3:df:72:36:f7:4e:b8:ec:2f:
c4:21:03:96:45:7b:9f:aa:14:2d:7c:b1:a4:9d:cd:5e:62:e9:
f4:f2:da:4a:96:2e:0a:dc:0f:87:19:48:cd:99:49:70:a8:0f:
1d:e2:d5:82:df:6c:a8:e6:bd:a2:d2:57:1a:17:d6:ef:60:52:
0e:38:6f:9c:5c:a5:ba:bf:56:19:d1:10:66:cc:d6:cb:2b:36:
0d:56:0f:51:e8:36:4b:d3:8a:78:f5:9c:68:8c:eb:0d:82:26:
4a:74:a2:d7:f9:86:59:af:7d:55:6d:58:25:87:eb:4e:ed:2f:
f6:59:18:46:29:7f:87:ec:3b:37:d6:c3:e3:d2:df:14:9e:8f:
19:fe:c3:9e:82:c0:29:31:1d:8c:83:47:ef:42:15:8a:af:ce:
27:27:b3:00:b5:d7:3d:15:57:d5:a3:96:1b:6a:c2:80:5b:1b:
25:14:4a:27:3a:2b:66:b7:69:58:b6:e9:ad:d8:a5:07:4b:59:
8c:32:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:39 2025 by rpki-client