Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/B5goYls2pH3yBPe0gnzIkr6hsR0.roa
File: B5goYls2pH3yBPe0gnzIkr6hsR0.roa (raw, json)
Hash identifier: f7c34+lBrPKMK3sy0aiejgFRmV5sKwVWcyjFvoePLVo=
Subject key identifier: 07:98:28:62:5B:36:A4:7D:F2:04:F7:B4:82:7C:C8:92:BE:A1:B1:1D
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 0194266BBB9C8C2EE0E8BB8F5E9A002FD429
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/B5goYls2pH3yBPe0gnzIkr6hsR0.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198813
IP address blocks: 93.89.96.0/20 maxlen: 20
185.152.100.0/22 maxlen: 22
188.246.112.0/23 maxlen: 23
2a00:c584::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bb:9c:8c:2e:e0:e8:bb:8f:5e:9a:00:2f:d4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=079828625b36a47df204f7b4827cc892bea1b11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:8e:0e:ce:9f:91:ea:89:8f:07:89:4f:28:
20:18:3d:8a:a2:4b:53:60:18:9d:9d:8d:e0:6a:20:
8b:78:9d:b0:5c:29:b3:a5:8a:fe:dd:9e:70:e2:91:
36:a5:f9:fc:33:ec:5e:79:af:32:42:7b:c7:1f:87:
f3:b5:a0:c7:d1:f8:3d:4c:b3:c4:1d:91:ee:12:54:
67:ee:86:54:01:37:ce:32:5a:9c:41:dc:4e:3d:65:
1d:c3:3a:ff:b5:b4:8a:3a:a8:77:21:94:ed:96:4b:
a1:f4:bb:55:03:ff:fb:88:c2:2e:37:c3:dc:0c:3c:
9a:2b:dc:6b:aa:78:48:c1:d3:68:5f:69:65:70:81:
d4:c3:6c:b7:06:71:75:f6:7e:7d:cd:60:ef:f5:19:
69:52:e8:a5:d3:53:1b:80:57:89:4d:89:31:91:c7:
e5:c7:92:4c:94:52:36:fb:11:35:26:80:2c:15:30:
a2:58:61:9a:82:77:12:47:45:10:53:db:d7:84:0d:
8d:f8:06:8c:42:87:eb:97:55:da:d6:d1:66:77:ce:
5d:a9:8a:ae:73:87:e5:27:70:97:4b:93:78:5b:64:
5e:33:6d:0f:da:e3:37:7b:2b:ec:08:e6:1b:e5:bb:
3c:81:fa:26:78:39:a3:05:82:6b:46:d9:4e:ff:ff:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:28:62:5B:36:A4:7D:F2:04:F7:B4:82:7C:C8:92:BE:A1:B1:1D
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/B5goYls2pH3yBPe0gnzIkr6hsR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.96.0/20
185.152.100.0/22
188.246.112.0/23
IPv6:
2a00:c584::/32
Signature Algorithm: sha256WithRSAEncryption
c9:14:b1:f3:58:63:e1:64:5d:bb:f2:84:41:44:a8:cb:91:1f:
c8:e6:33:aa:f6:bd:84:6c:c3:43:1f:a3:60:6e:ad:46:a1:8a:
11:51:64:48:81:4a:fc:0b:51:eb:84:56:94:96:71:0b:1a:b3:
ef:ea:62:e3:5e:7e:58:4a:b2:00:17:71:2f:52:6e:91:f3:72:
d9:46:86:0f:b4:a3:9a:94:f3:82:a4:ea:4c:01:58:38:be:4f:
bb:2b:38:f5:f7:5e:4e:a9:5e:76:9d:d0:d7:e8:18:82:7f:41:
d5:34:fb:34:f4:f0:9d:b8:2a:2b:1d:c5:e6:e5:08:c5:7f:ab:
ca:70:07:6f:99:7e:00:9c:55:8a:7a:f0:d2:e4:62:41:bc:e9:
25:77:1d:2e:c8:ea:a7:37:b0:c5:31:4b:cf:30:c7:78:73:70:
eb:8b:89:c2:72:04:3c:87:cb:5b:f2:05:9e:94:a5:fc:ab:93:
a2:97:ca:1d:5d:ed:2d:9d:d0:8e:39:49:b4:ce:1c:0f:3f:ea:
91:90:80:00:bf:d3:e8:10:c7:5b:d6:e5:56:43:a3:8b:e8:3a:
b8:85:b6:2d:4e:78:b1:26:8f:cf:1b:39:f6:69:c2:08:83:f9:
aa:7e:9b:21:bc:a9:20:49:ce:df:ad:a1:59:4b:d3:b3:d1:48:
85:3b:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:45 2025 by rpki-client