Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/r7a6D_FkR9xhVp2w9lPW31aBNv4.roa
File: r7a6D_FkR9xhVp2w9lPW31aBNv4.roa (raw, json)
Hash identifier: XnCRXOHC4FDX1dXWIOiOTBOBjGntvWRiOFTSpLk90Dc=
Subject key identifier: AF:B6:BA:0F:F1:64:47:DC:61:56:9D:B0:F6:53:D6:DF:56:81:36:FE
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 0194228D0F87D29A7072EA9410AF81BB601D
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/r7a6D_FkR9xhVp2w9lPW31aBNv4.roa
Signing time: Wed 01 Jan 2025 15:47:37 +0000
ROA not before: Wed 01 Jan 2025 15:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201877
IP address blocks: 109.106.28.0/22 maxlen: 22
185.14.8.0/22 maxlen: 23
185.33.56.0/22 maxlen: 22
185.33.56.0/24 maxlen: 24
185.33.57.0/24 maxlen: 24
185.33.58.0/24 maxlen: 24
185.33.59.0/24 maxlen: 24
212.84.32.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:0f:87:d2:9a:70:72:ea:94:10:af:81:bb:60:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Jan 1 15:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afb6ba0ff16447dc61569db0f653d6df568136fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:02:66:e4:fb:62:d7:38:b5:8b:86:3b:ba:
43:84:28:4d:0a:5e:d1:c3:94:eb:20:65:84:f0:2d:
47:14:04:a4:b7:39:14:b9:69:3b:ab:45:4f:c3:84:
1e:d4:d4:c9:98:5e:ac:b4:65:f8:35:4f:77:64:f7:
31:92:08:fd:c8:f3:59:e9:3b:e2:e9:e0:e8:8f:ce:
c4:a5:a5:49:9f:f9:91:99:9a:66:bb:7f:2a:39:1f:
4c:e7:02:48:b0:24:09:b2:27:1a:78:a6:f9:b9:ed:
ff:37:33:d3:31:41:67:b2:8e:5b:37:c1:04:16:0d:
f2:50:5b:4b:83:ab:a5:33:b2:1c:fe:0b:67:19:7e:
85:4a:35:71:cb:5a:6c:dd:61:5c:c8:b5:4b:22:5b:
c5:2f:85:fe:44:e5:d6:5f:60:b7:5c:83:d4:db:0b:
1f:e2:3b:88:7a:df:db:f7:5c:a9:a1:d7:e0:ec:b7:
7f:73:67:5b:b6:2b:fa:9b:43:36:96:6d:99:9b:18:
25:c2:f2:89:12:b9:fe:7e:b7:f8:ad:c8:bc:1d:7b:
92:ac:ea:39:c3:9f:42:8d:b7:94:56:cc:1f:9e:d1:
1b:a0:7c:c9:30:97:6e:0c:24:db:b1:51:b7:e3:07:
db:52:12:ed:a4:dc:39:e0:a0:9a:ee:88:3c:11:0b:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B6:BA:0F:F1:64:47:DC:61:56:9D:B0:F6:53:D6:DF:56:81:36:FE
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/r7a6D_FkR9xhVp2w9lPW31aBNv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.28.0/22
185.14.8.0/22
185.33.56.0/22
212.84.32.0/21
Signature Algorithm: sha256WithRSAEncryption
72:f3:68:78:9e:dd:81:ba:c2:e0:c1:46:00:82:b4:73:b3:e2:
48:3c:da:4a:37:26:30:ae:c4:31:f6:2c:59:dc:98:d6:31:06:
01:36:2a:c6:24:c3:a5:c2:cd:6e:b4:d3:4d:be:c7:70:6b:d6:
ef:2d:2b:db:1e:4a:63:a2:4e:43:c5:74:d5:b7:80:cd:91:a0:
31:1c:b7:cd:04:70:41:9a:19:0f:bf:6e:4b:a9:39:71:3b:66:
a1:6a:4a:e4:ff:be:c9:be:7c:a0:c7:52:bf:66:7a:de:74:1d:
a8:65:50:3a:b7:8d:9b:ba:79:1f:b1:fa:8a:94:49:f1:3c:81:
d6:1f:2d:1d:be:90:7c:5f:2c:21:8f:35:50:52:69:bd:e5:c6:
9d:55:2c:3e:d1:96:7b:fb:33:4d:3d:fb:d5:22:3b:74:2b:a9:
b1:43:e7:43:bb:10:cc:b7:a1:32:0b:86:b1:63:8a:b4:07:f9:
ce:a4:28:3b:5e:21:25:ef:25:d1:c0:df:2a:d9:5f:ba:c8:f8:
b3:18:96:ac:4b:9f:ff:c8:bf:70:c2:30:be:e8:79:fd:7a:69:
96:be:2c:84:e9:8a:51:40:2d:9d:6c:c7:53:bc:ca:a8:bc:fd:
23:7f:82:ee:a1:20:65:5d:3f:fd:a7:6d:fb:50:f6:9f:68:d4:
0f:97:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:44 2025 by rpki-client