Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/vJJQ7dMyrgz7V87aem8R5eRT1tU.roa
File: vJJQ7dMyrgz7V87aem8R5eRT1tU.roa (raw, json)
Hash identifier: YVuwtpk4uTSArI127axgnPV75XcPEeuaWjYEyG0FBxg=
Subject key identifier: BC:92:50:ED:D3:32:AE:0C:FB:57:CE:DA:7A:6F:11:E5:E4:53:D6:D5
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 01942444A622DD204A19F82254284B04AC41
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/vJJQ7dMyrgz7V87aem8R5eRT1tU.roa
Signing time: Wed 01 Jan 2025 23:47:46 +0000
ROA not before: Wed 01 Jan 2025 23:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48846
IP address blocks: 85.8.180.0/23 maxlen: 24
87.253.224.0/21 maxlen: 24
93.191.136.0/21 maxlen: 24
185.76.212.0/22 maxlen: 24
185.190.108.0/22 maxlen: 24
185.228.96.0/23 maxlen: 23
185.228.96.0/24 maxlen: 24
185.228.97.0/24 maxlen: 24
188.210.216.0/22 maxlen: 24
2a05:5c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a6:22:dd:20:4a:19:f8:22:54:28:4b:04:ac:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: Jan 1 23:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc9250edd332ae0cfb57ceda7a6f11e5e453d6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:9e:b7:64:67:7e:da:f4:77:86:3a:db:e7:
29:9d:f0:e4:c8:37:ff:1e:2f:c5:8d:3c:c2:cc:a9:
c7:66:eb:54:0b:e0:40:02:1b:7b:e1:4c:cc:a1:7a:
cc:25:c8:fd:1e:60:88:9c:c0:b1:13:e0:18:75:53:
d1:c0:58:70:9a:dd:c4:e4:c4:f9:70:60:5f:f7:49:
58:e8:a8:aa:b6:02:df:29:6c:61:e0:0b:c1:43:ab:
ae:47:40:4b:90:c1:83:81:39:68:d5:05:52:97:11:
92:ea:ab:be:8c:1d:b6:09:35:a1:41:68:be:99:e2:
5d:87:8c:ff:94:d0:f9:59:a6:d0:75:60:a6:33:d8:
6a:4a:ac:35:29:35:5f:2c:3f:b4:3e:04:67:02:be:
6a:cc:3e:06:35:5e:9a:be:02:7c:d3:05:d0:97:bb:
0b:c7:06:35:f5:6d:58:f0:69:1c:4e:d6:f9:e9:fa:
77:d9:0b:32:16:d2:93:a3:1a:0c:22:1b:57:8f:cd:
d2:c7:dc:6a:14:0d:46:10:f7:aa:2d:49:6e:01:47:
ae:68:d1:2c:6a:d4:1c:49:fc:83:cd:46:7b:a8:55:
c2:12:31:f1:89:bb:78:74:e0:71:4a:da:19:4b:6e:
ff:e8:8b:e2:51:03:7a:5d:8f:9b:c4:1c:70:74:d4:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:92:50:ED:D3:32:AE:0C:FB:57:CE:DA:7A:6F:11:E5:E4:53:D6:D5
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/vJJQ7dMyrgz7V87aem8R5eRT1tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.180.0/23
87.253.224.0/21
93.191.136.0/21
185.76.212.0/22
185.190.108.0/22
185.228.96.0/23
188.210.216.0/22
IPv6:
2a05:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
74:4f:54:38:7d:06:cd:94:6f:df:b4:93:bc:04:92:85:49:ff:
d3:bc:be:32:bf:4f:11:d6:e1:60:3b:83:ca:60:84:8d:45:70:
87:b4:87:4a:ea:14:4d:54:aa:76:e9:ca:76:90:27:eb:35:0e:
d9:54:68:be:74:b6:c6:5b:50:48:2f:2a:21:0b:9d:c6:c3:13:
88:b8:cd:8a:e2:8e:3f:1a:45:89:db:92:0c:1a:9a:b7:bc:ca:
cc:84:ab:72:5b:eb:0f:d2:83:3e:dd:d1:fb:12:5c:75:be:9f:
2e:45:28:15:c3:64:89:8b:aa:da:6f:4c:ff:68:86:aa:ae:6b:
da:68:9b:c8:f2:e1:b2:1b:ab:a4:f1:be:df:c3:bf:e6:c5:67:
55:fe:30:23:14:7d:7b:3c:28:7c:ec:61:6a:be:43:4b:16:99:
c4:d2:66:8c:e1:6d:85:1c:1f:36:26:a0:b2:97:83:0a:1f:70:
cb:83:bc:3b:57:2a:29:d0:97:e6:90:24:69:4e:5e:2f:d3:62:
5b:5a:b7:3b:4c:5f:18:d4:a2:1e:b9:ca:90:d0:ca:eb:71:ad:
8a:43:26:0d:3e:1e:07:c4:3c:e4:44:da:2c:d3:09:75:58:64:
86:ce:19:b9:e6:bc:20:c4:6d:fc:6b:58:c3:d8:24:d3:7f:28:
d3:a8:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:44 2025 by rpki-client