Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/D7v-i2Em1A95E4k4o6lvGCl8mqk.roa
File: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (raw, json)
Hash identifier: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=
Subject key identifier: 0F:BB:FE:8B:61:26:D4:0F:79:13:89:38:A3:A9:6F:18:29:7C:9A:A9
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 01941F8C00CF523AB91996F778A2D9BF902F
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/D7v-i2Em1A95E4k4o6lvGCl8mqk.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 132.230.0.0/16 maxlen: 16
192.52.0.0/19 maxlen: 19
192.52.32.0/20 maxlen: 20
192.52.48.0/23 maxlen: 23
192.52.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:00:cf:52:3a:b9:19:96:f7:78:a2:d9:bf:90:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fbbfe8b6126d40f79138938a3a96f18297c9aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:21:6c:5f:de:3b:29:e9:fe:3a:c7:fb:86:
a4:28:53:83:dc:d5:9e:49:4b:ad:47:f0:7f:29:9f:
4c:e4:05:6a:c8:05:ba:3d:52:e4:3e:23:55:2c:1b:
97:7f:58:8a:f3:5d:ac:fd:58:4d:fd:50:92:d2:b6:
65:eb:64:9e:94:a1:60:3f:21:ba:13:99:b1:e8:2f:
16:80:93:9e:5f:34:7c:b9:6b:6c:0a:7c:81:4c:46:
2d:d0:01:6e:c2:57:f7:8a:58:33:66:0a:73:37:64:
03:a3:2f:aa:f1:e9:38:97:6b:d2:33:bf:27:b6:ea:
e1:42:e5:d1:f4:56:7d:7a:30:e5:ce:52:8f:54:e5:
80:8b:b5:5a:c7:93:6c:b8:60:df:93:d4:aa:51:db:
31:23:c1:ef:a6:23:83:b4:25:8d:b6:d1:54:32:90:
ef:45:69:19:ff:31:b3:e8:8a:c8:bb:69:a0:e0:b4:
f6:21:d5:6a:0d:a4:15:a5:86:dd:d6:06:01:c6:3e:
8f:9f:12:4f:6a:59:c1:6a:e4:35:fc:5e:02:63:4d:
02:e2:0d:06:5b:7a:3d:0d:e2:4a:e0:38:3b:4c:1d:
e9:d1:91:7f:4a:77:b9:aa:17:b2:f5:54:c2:02:de:
85:e6:f8:5b:18:79:9d:b6:88:60:34:26:e4:df:ba:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:FE:8B:61:26:D4:0F:79:13:89:38:A3:A9:6F:18:29:7C:9A:A9
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/D7v-i2Em1A95E4k4o6lvGCl8mqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.230.0.0/16
192.52.0.0-192.52.50.255
Signature Algorithm: sha256WithRSAEncryption
52:51:be:88:2b:d4:90:c8:f3:ad:78:09:cb:00:39:8b:0c:c4:
3a:a4:78:49:71:50:e8:fd:36:8e:6f:3b:e6:c4:9d:f7:26:4c:
f7:2b:f9:eb:18:5b:db:8e:9f:e7:ec:24:b9:e7:5d:47:43:75:
19:c3:ce:e6:a5:33:9e:65:3d:6e:6f:1a:de:00:e6:66:98:2b:
3b:7f:82:25:b6:52:a7:b8:97:6e:c9:a4:5c:b4:d0:e3:34:77:
35:f1:0f:05:e5:ff:05:96:90:ca:fb:5b:bb:aa:90:a8:10:3a:
41:82:21:56:da:8d:7c:37:c3:f3:81:ad:8d:2e:e9:fb:4e:32:
8b:6f:c1:14:7a:70:28:7c:e4:9e:e1:1e:54:8a:58:04:c1:71:
73:eb:84:cd:52:bf:23:fa:0f:b6:26:d7:56:2c:8a:c5:cc:40:
bc:45:5b:94:8e:08:6c:3b:3f:b0:ce:03:50:09:64:0c:d8:d6:
39:cb:fa:4a:f1:c0:fa:f2:05:a7:00:75:a7:da:33:25:c4:9d:
0d:b4:30:c6:30:7b:d7:ad:30:e4:36:d4:4c:ed:94:81:6b:09:
04:c0:c7:70:e0:c6:60:3b:fd:29:6b:d8:62:b4:c2:3d:0a:f8:
34:73:19:28:17:a0:98:c2:e1:e8:8f:0f:d6:32:10:04:8e:c2:
67:24:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:48 2025 by rpki-client