Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/u-TIzzCbIsSdGOd1CtfNEcgemko.roa
File: u-TIzzCbIsSdGOd1CtfNEcgemko.roa (raw, json)
Hash identifier: DN7JFzlpz7Go6ldmAhoYI+Qwq1vNoGjP9zoXjX6dqwg=
Subject key identifier: BB:E4:C8:CF:30:9B:22:C4:9D:18:E7:75:0A:D7:CD:11:C8:1E:9A:4A
Certificate issuer: /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial: 019425FD870B9FE9D94E4E3EA59FE405B7FB
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/u-TIzzCbIsSdGOd1CtfNEcgemko.roa
Signing time: Thu 02 Jan 2025 07:49:19 +0000
ROA not before: Thu 02 Jan 2025 07:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21119
IP address blocks: 5.226.160.0/21 maxlen: 24
46.16.48.0/21 maxlen: 24
80.86.128.0/20 maxlen: 24
82.117.32.0/19 maxlen: 24
82.117.32.0/20 maxlen: 24
89.105.32.0/20 maxlen: 24
89.233.96.0/21 maxlen: 24
93.187.80.0/21 maxlen: 24
185.36.28.0/22 maxlen: 24
193.169.42.0/23 maxlen: 24
193.201.74.0/23 maxlen: 24
213.179.48.0/20 maxlen: 24
217.65.224.0/20 maxlen: 24
2001:a90::/32 maxlen: 64
2a01:b8c0::/32 maxlen: 64
2a03:6240::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:87:0b:9f:e9:d9:4e:4e:3e:a5:9f:e4:05:b7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Validity
Not Before: Jan 2 07:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbe4c8cf309b22c49d18e7750ad7cd11c81e9a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:86:19:78:25:3b:f0:9f:ac:59:d8:a8:b8:
14:a8:da:e0:67:b2:95:33:ab:9f:8f:b3:9f:63:29:
d9:72:54:4e:1a:07:05:a2:cd:02:cf:dc:18:59:7c:
f7:4b:1d:20:bd:b7:d0:37:cf:8b:19:48:ec:84:88:
d8:c2:97:18:8f:17:86:33:15:a3:ff:1d:0a:18:8c:
63:4c:c0:83:83:18:1d:80:9a:43:01:9f:c5:30:a8:
23:05:39:7f:da:4c:34:ad:3c:20:db:15:84:21:29:
45:9e:83:6c:e9:c9:52:46:67:38:9c:ae:1b:19:8c:
c2:d7:eb:3f:f7:6e:f2:af:16:bc:de:59:16:1f:c6:
90:fd:9e:2c:13:67:fc:f1:f6:7f:19:42:f1:32:05:
3d:75:53:48:0a:8a:9d:aa:b6:85:e1:87:cb:bf:7d:
84:64:ef:72:b1:01:23:7c:02:05:30:5f:84:d2:cf:
05:24:27:29:51:de:9b:28:51:c1:3a:39:65:b6:30:
b4:fb:73:c7:b1:11:a9:9d:3c:6c:ae:8b:1e:73:c7:
47:4a:6c:a6:5d:4c:a1:83:dc:69:5f:36:d6:a2:7b:
47:d7:eb:66:55:2b:15:67:52:a3:ad:5a:8c:df:f7:
a3:92:88:bd:0d:e7:67:61:59:4d:1f:dc:2c:01:e6:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E4:C8:CF:30:9B:22:C4:9D:18:E7:75:0A:D7:CD:11:C8:1E:9A:4A
X509v3 Authority Key Identifier:
keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/u-TIzzCbIsSdGOd1CtfNEcgemko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.160.0/21
46.16.48.0/21
80.86.128.0/20
82.117.32.0/19
89.105.32.0/20
89.233.96.0/21
93.187.80.0/21
185.36.28.0/22
193.169.42.0/23
193.201.74.0/23
213.179.48.0/20
217.65.224.0/20
IPv6:
2001:a90::/32
2a01:b8c0::/32
2a03:6240::/32
Signature Algorithm: sha256WithRSAEncryption
54:d9:43:b6:ba:e5:4a:5f:e8:e0:01:65:cc:f0:cb:11:fd:90:
3d:78:8c:14:a8:db:c4:b9:08:c9:48:ec:8f:11:81:4b:23:bc:
f7:bc:f5:49:5f:7d:48:57:ab:ca:b8:e7:94:46:ae:07:75:a1:
90:66:54:e0:b0:e9:80:48:d4:80:c1:09:33:0e:1f:ab:f0:69:
30:74:93:38:0d:30:e8:37:b1:63:6c:b4:08:89:99:02:df:64:
07:bb:62:ef:5a:26:f1:7e:cf:70:99:4f:f4:78:f3:08:e8:db:
ee:f7:39:3b:53:e2:38:ef:b8:02:20:4c:8a:9d:c2:c1:d9:7e:
ef:df:db:ab:c5:28:4d:dd:7b:6e:23:0c:8b:fa:02:ec:50:04:
97:fc:84:f0:7a:48:d1:24:9d:c7:bc:40:43:79:b7:5c:c3:4d:
91:00:ce:6d:2b:26:47:d1:6b:f2:5d:af:3a:49:e3:92:7f:8b:
d9:45:1a:4a:6f:40:21:f1:c9:05:03:d8:60:3f:2c:41:bb:c2:
81:9b:ea:a0:5c:3d:e4:cd:af:c1:24:81:f9:62:11:5d:55:8c:
1e:e4:f8:c7:d0:75:81:15:eb:86:54:28:69:7a:bf:d6:3f:fb:
77:62:e2:c3:79:08:1b:a0:ab:db:67:69:1c:de:9d:d3:e0:f0:
c8:cb:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:22 2025 by rpki-client