Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/602Z4NiRUVoUbtoD2a1_hKZKM5w.roa
File: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (raw, json)
Hash identifier: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=
Subject key identifier: EB:4D:99:E0:D8:91:51:5A:14:6E:DA:03:D9:AD:7F:84:A6:4A:33:9C
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 019422FB9F6FC10577121F90B337EEAA673E
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/602Z4NiRUVoUbtoD2a1_hKZKM5w.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210150
IP address blocks: 79.171.64.0/21 maxlen: 21
85.158.80.0/21 maxlen: 21
217.145.232.0/22 maxlen: 22
2a0d:9c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9f:6f:c1:05:77:12:1f:90:b3:37:ee:aa:67:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb4d99e0d891515a146eda03d9ad7f84a64a339c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:08:20:3b:76:f2:b0:4e:95:1e:12:d1:fc:
02:38:5d:3e:88:c9:b0:01:85:ff:51:7b:0a:ce:03:
3c:0f:5d:82:21:5f:bb:ab:b0:c2:75:47:3a:2e:1c:
75:18:f5:b8:08:4e:f8:26:55:40:73:ee:1d:01:59:
62:48:e5:74:bf:b9:c0:42:c1:9d:ee:03:62:8d:63:
e7:60:2f:be:88:c6:a1:37:cb:d2:f7:9b:23:3e:85:
c7:ef:b5:37:a2:a1:f4:ea:d9:f8:31:be:e7:12:75:
ba:dd:5e:6f:d3:9b:bd:48:ec:f1:e8:d6:ce:58:f3:
71:66:3e:c5:bb:1c:57:cf:82:90:ca:af:f8:39:be:
ec:e5:ec:dc:4a:7f:27:8f:e8:f5:65:0e:0b:1f:55:
31:27:af:14:60:ff:d6:a0:a4:63:f5:e8:6c:3c:5d:
61:b1:98:f9:b8:63:f8:aa:4d:80:8e:9a:6c:96:08:
bc:a5:fd:31:01:8c:69:9d:e0:0f:2b:a9:f3:8a:f9:
03:cd:25:e6:1e:97:97:1c:55:34:6a:f1:33:b2:80:
96:fe:64:cc:2b:5d:2e:88:55:87:51:a3:dc:36:23:
fb:19:41:41:37:96:54:73:62:db:ec:43:e7:2d:9c:
29:81:d7:4f:4e:78:73:a0:e0:22:91:02:27:c0:56:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4D:99:E0:D8:91:51:5A:14:6E:DA:03:D9:AD:7F:84:A6:4A:33:9C
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/602Z4NiRUVoUbtoD2a1_hKZKM5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.64.0/21
85.158.80.0/21
217.145.232.0/22
IPv6:
2a0d:9c40::/29
Signature Algorithm: sha256WithRSAEncryption
15:f4:a1:d1:65:ff:29:cd:dc:0a:80:ff:a0:0d:9b:af:ca:bd:
66:50:22:a5:17:a6:64:cf:2b:f2:6f:3c:ff:3c:f5:64:df:b7:
63:6a:9d:46:bc:e9:ee:91:32:d0:0c:12:61:4b:94:ff:0d:50:
ec:a2:d4:d7:15:68:c3:4e:f4:ca:b5:38:d5:65:36:28:e5:ff:
b0:30:a2:e0:11:b6:4f:c9:b9:85:17:68:af:f8:75:3a:17:82:
30:b0:fb:66:58:23:a6:58:62:dd:5f:7a:bf:45:98:c9:15:55:
0e:6d:ff:ab:c9:10:6f:d4:15:8d:7d:a1:c5:dc:41:ca:c9:e1:
b9:08:a2:33:9e:bb:c2:87:20:aa:47:e2:67:26:a2:b4:ed:0d:
4d:d7:47:f1:33:c8:8a:42:3c:af:7d:d5:42:3b:4f:20:1f:d4:
78:15:39:9e:49:d2:c5:7c:4b:64:bc:af:c9:48:2f:54:95:54:
83:a6:b7:2e:a1:69:27:84:c1:e8:78:94:25:ab:c8:50:c8:ac:
ca:dc:f5:6b:cd:1d:bb:6b:77:b1:cf:0b:8f:67:4f:1c:ea:d0:
62:4a:24:ff:81:b3:0f:b8:ad:0c:15:7d:eb:0e:f8:20:f5:57:
74:6e:9e:7f:f5:53:18:f3:11:9c:1c:3e:85:ad:a6:f8:4c:4c:
91:25:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:05 2025 by rpki-client