Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/IcWYNvOBamTxu6amEYkiVctQe18.roa
File: IcWYNvOBamTxu6amEYkiVctQe18.roa (raw, json)
Hash identifier: DVw0i9jC2LodVXO+VD00rdFIuWtsdo/jV9gSa2jJOsM=
Subject key identifier: 21:C5:98:36:F3:81:6A:64:F1:BB:A6:A6:11:89:22:55:CB:50:7B:5F
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 0194258F85626DC4BF43D56265CAFC307C71
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/IcWYNvOBamTxu6amEYkiVctQe18.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57513
IP address blocks: 91.197.46.0/23 maxlen: 23
91.197.46.0/24 maxlen: 24
91.197.47.0/24 maxlen: 24
91.232.100.0/24 maxlen: 24
91.232.101.0/24 maxlen: 24
185.81.140.0/24 maxlen: 24
185.81.141.0/24 maxlen: 24
185.81.142.0/24 maxlen: 24
185.81.143.0/24 maxlen: 24
2a05:8800::/29 maxlen: 29
2a05:8800::/32 maxlen: 32
2a05:8800:1::/48 maxlen: 48
2a05:8801::/32 maxlen: 32
2a05:8802::/32 maxlen: 32
2a05:8803::/32 maxlen: 32
2a05:8804::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:85:62:6d:c4:bf:43:d5:62:65:ca:fc:30:7c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21c59836f3816a64f1bba6a611892255cb507b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:71:c3:b5:4c:d1:14:40:24:bd:e1:4e:c3:
58:6d:06:2f:3a:8b:a9:9a:8b:b6:64:b4:d2:e7:e3:
9b:89:6a:00:6c:a6:66:a0:6b:1d:ad:04:e8:9c:53:
25:d8:4f:f7:24:f6:3a:45:4e:d0:13:fe:fd:27:0c:
9b:75:9f:62:8c:90:4c:79:0a:e2:b3:47:3f:56:bf:
ff:f6:23:78:65:0f:eb:8c:33:fe:1b:48:bd:a8:61:
f9:09:b9:28:33:e1:16:ca:a8:e3:a3:99:fb:ec:91:
03:e0:07:a4:4c:f9:76:eb:11:13:bb:34:4c:9b:14:
d9:50:2f:b3:f7:b6:68:f5:ea:df:e4:ca:e4:7c:e5:
4b:37:fe:86:d1:04:b5:7e:37:4c:9e:ba:ad:48:4d:
13:c4:ae:41:6d:84:b6:07:e9:54:ee:3a:a4:3c:a3:
5f:78:53:0c:fa:a7:fa:84:e5:8e:8e:b3:3e:51:25:
0c:81:5c:df:c3:5c:df:ac:94:f0:9d:0d:26:76:23:
5b:36:d6:19:44:95:b0:46:fd:dd:f3:f1:7e:c0:ed:
9a:3a:00:ee:8b:88:c4:ce:6d:f8:68:89:0c:c8:ce:
43:4d:13:0f:51:44:56:f6:fd:61:6a:e1:85:f0:4f:
06:66:f8:4a:c0:63:30:f1:ab:49:3b:c3:5b:42:45:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C5:98:36:F3:81:6A:64:F1:BB:A6:A6:11:89:22:55:CB:50:7B:5F
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/IcWYNvOBamTxu6amEYkiVctQe18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.46.0/23
91.232.100.0/23
185.81.140.0/22
IPv6:
2a05:8800::/29
Signature Algorithm: sha256WithRSAEncryption
3a:99:01:e4:e9:4a:65:95:6d:e6:36:5b:80:9e:77:89:fc:31:
4f:1f:c8:b3:07:8e:64:6f:8e:95:61:49:46:3a:fc:36:45:d5:
fc:f0:a8:97:c9:dd:48:c0:04:94:7e:62:7e:7d:32:35:c1:41:
3c:f5:22:8a:d7:37:30:59:66:6d:51:a7:67:3e:cf:94:ed:7b:
84:f4:39:28:90:1c:0c:ef:92:2b:64:c0:31:b3:c4:43:19:3f:
88:5d:7a:7f:50:f1:71:b4:4a:fd:e8:c0:64:43:bb:c8:6a:70:
a0:c3:f3:40:68:d0:c9:dc:86:7a:e6:57:21:68:88:82:fb:5a:
d1:ee:1c:93:2d:2d:8b:c7:72:ba:a6:14:b0:c5:57:76:ea:68:
9c:95:7e:04:5a:3f:e9:f7:50:46:d7:62:ae:c7:38:41:78:c7:
ae:cf:71:58:94:b3:29:5c:2c:6d:35:25:09:8c:b9:cf:b9:2e:
ff:23:33:cf:59:d5:7f:1b:3c:93:4e:4f:ae:d3:f7:be:2f:df:
c8:e6:f8:6d:04:e2:54:59:35:ca:d1:4b:db:7e:a9:c8:7c:78:
ca:47:00:54:26:06:1e:06:e0:08:a0:aa:53:6b:75:d9:22:60:
cc:08:6e:e1:4c:56:3f:f1:95:78:71:17:1d:10:31:a5:01:48:
ef:1f:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:50:47 2025 by rpki-client