Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/sal7PYLJIpSNgfzX-mHBx92eZY4.roa
File: sal7PYLJIpSNgfzX-mHBx92eZY4.roa (raw, json)
Hash identifier: y0fWbs+KX+1LX1FUo2i/E/BhGWNH/lzhBXcOY7rC0YY=
Subject key identifier: B1:A9:7B:3D:82:C9:22:94:8D:81:FC:D7:FA:61:C1:C7:DD:9E:65:8E
Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial: 0194266BA54AE28430B552858D1534C324A0
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/sal7PYLJIpSNgfzX-mHBx92eZY4.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9137
IP address blocks: 185.82.56.0/22 maxlen: 22
204.14.244.0/22 maxlen: 22
213.204.0.0/19 maxlen: 19
2a02:5640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a5:4a:e2:84:30:b5:52:85:8d:15:34:c3:24:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a97b3d82c922948d81fcd7fa61c1c7dd9e658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:69:61:e9:4f:c4:b1:ad:c0:6c:75:e0:df:e1:
b7:ea:b9:a7:3b:cf:ea:18:1d:31:c9:8b:44:68:f4:
c6:57:51:98:5f:e1:e0:6b:29:6d:b6:d5:6e:7f:75:
7f:4e:f1:45:08:d1:6d:8e:9f:0b:44:f5:a3:4a:cc:
30:b0:ec:9b:38:d6:fe:fa:43:4a:e7:74:8d:ee:e5:
8d:35:db:23:f9:8f:47:f6:8b:a0:1f:ae:79:8b:7a:
0d:c2:34:8e:e7:4e:8a:97:8f:23:bd:54:0a:0d:b2:
5b:73:df:a0:9c:08:34:05:82:da:c6:d4:b3:13:ff:
f6:dd:b9:d1:e8:06:64:eb:03:74:1f:de:4f:f6:da:
b7:75:64:4d:af:ac:95:28:3e:77:7a:f6:86:be:f6:
aa:ac:c3:a0:93:40:17:2f:f4:6b:5d:d3:89:7f:7a:
c5:cd:d5:3a:d0:22:ec:08:36:64:ac:c1:9d:a8:d0:
29:8b:4d:7d:f6:10:0f:6f:56:51:3d:f0:7d:7e:ef:
dd:23:24:31:82:09:3c:b0:ec:3a:ba:f9:90:b0:f1:
40:b5:4b:a0:5b:a4:1e:a5:87:e2:d0:61:cd:4c:f8:
0e:66:ab:38:b4:12:fd:c7:7c:81:da:60:f1:33:1d:
64:07:f8:41:94:8c:13:9e:c5:21:38:a6:8e:01:d3:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A9:7B:3D:82:C9:22:94:8D:81:FC:D7:FA:61:C1:C7:DD:9E:65:8E
X509v3 Authority Key Identifier:
keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/sal7PYLJIpSNgfzX-mHBx92eZY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.56.0/22
204.14.244.0/22
213.204.0.0/19
IPv6:
2a02:5640::/29
Signature Algorithm: sha256WithRSAEncryption
2e:ef:dd:7a:55:c3:3c:28:ef:8e:2b:c3:55:a2:b8:2b:77:a6:
05:77:9c:af:54:d5:1b:01:cb:77:4e:97:66:24:8d:05:4f:56:
f8:32:19:eb:2f:2b:6b:ec:83:f9:05:0e:03:92:5d:03:f7:02:
80:6e:10:4e:a5:be:8a:93:d7:a1:e5:bf:c7:6c:48:6c:09:76:
13:ea:18:20:3f:c4:12:8c:72:30:3e:47:8b:2c:19:ac:09:55:
e8:a4:61:7b:7a:6b:4f:34:06:b3:f7:cf:a1:dd:29:5d:8c:14:
9f:ba:62:4b:aa:2a:16:e1:30:2c:77:7e:43:f9:2a:40:6d:58:
7e:e7:33:9e:f6:b2:dc:c6:4b:9e:33:b3:63:38:ba:a1:4b:c2:
09:11:de:66:7f:f6:24:21:74:55:49:53:14:c7:7b:12:7f:7a:
c3:a4:b8:86:fa:1c:0f:26:06:cf:80:49:4f:a8:8d:de:4b:d6:
1d:da:62:9b:97:fe:fb:5e:2e:3b:16:5c:e3:de:25:84:e8:18:
9e:5d:29:30:50:66:83:cd:6d:a5:a6:88:0e:81:b2:0b:a4:61:
33:1c:0a:33:77:43:c9:aa:3c:43:bc:31:e8:f4:48:74:04:44:
9a:af:93:fd:8d:ce:e6:0b:4e:2c:e1:46:ca:6a:ff:2e:c6:c2:
91:25:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:41 2025 by rpki-client