Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa
File: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (raw, json)
Hash identifier: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=
Subject key identifier: 91:48:76:17:E7:D5:9A:5B:4A:EE:D5:B9:8E:4E:57:52:3B:23:C5:54
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 0194266B6193660778CF41D734CC161E71A1
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa
Signing time: Thu 02 Jan 2025 09:49:19 +0000
ROA not before: Thu 02 Jan 2025 09:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200848
IP address blocks: 185.94.4.0/22 maxlen: 22
213.109.172.0/22 maxlen: 22
2a09:fc00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:61:93:66:07:78:cf:41:d7:34:cc:16:1e:71:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 2 09:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91487617e7d59a5b4aeed5b98e4e57523b23c554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:98:5f:33:eb:ea:f0:19:e1:62:69:fa:67:
3c:46:48:ea:5c:ed:b4:28:31:5c:db:7c:69:a6:3a:
66:28:48:d0:72:0f:50:91:90:fd:a8:f2:ae:1e:37:
93:50:7a:dc:56:77:e5:e1:b9:75:f5:aa:5d:bb:4d:
5d:18:d7:30:50:cc:b1:20:18:fb:af:67:5d:21:0f:
4f:36:03:b7:7f:e1:36:1b:09:c2:d4:96:43:36:f1:
65:cb:f2:2a:58:e5:4e:d2:fe:e8:86:e4:08:93:a5:
a3:33:13:00:31:c6:55:be:65:4c:54:6d:b2:86:00:
28:51:13:c0:af:1f:e0:d0:13:1d:e5:68:b4:d8:06:
96:d5:0c:c5:27:72:5e:85:d3:60:95:cb:64:db:7b:
0f:57:ed:e3:6b:6f:67:60:f6:d8:a6:9e:3d:f7:2c:
73:af:80:95:5d:5d:ce:f2:e0:9e:8c:b0:f9:96:2c:
fa:42:cc:22:1a:23:57:ac:ca:f3:dd:d8:d3:3d:4f:
c9:6d:3b:98:d8:69:7c:9a:52:b6:3a:0e:c6:22:3d:
68:5f:55:a3:3a:ff:a6:c7:13:6e:50:72:d3:21:42:
16:1d:c2:06:e2:9e:8d:1b:35:10:0b:53:4e:3f:cd:
1e:e0:86:49:e7:fd:b1:c0:14:b3:f5:38:6a:33:04:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:48:76:17:E7:D5:9A:5B:4A:EE:D5:B9:8E:4E:57:52:3B:23:C5:54
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.4.0/22
213.109.172.0/22
IPv6:
2a09:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
3d:b6:ca:8a:8b:ba:9a:d3:a9:1f:d9:34:48:33:d2:52:02:4e:
52:ee:07:05:50:6f:c5:96:42:c0:1a:09:f3:c9:21:87:a9:de:
92:65:0f:bc:5d:5d:49:6a:ea:df:56:b5:36:ee:3f:46:e3:20:
ee:c4:e3:4a:03:a6:a3:2a:03:ec:b5:8c:1b:5f:1e:8f:82:71:
cc:23:da:7a:39:bf:6c:fa:e4:f3:5e:6c:0e:d4:a1:07:95:ed:
a6:0a:26:a5:ff:33:68:17:99:d2:31:a1:4b:29:6b:c5:e7:3d:
e9:9d:a0:21:a6:0f:49:65:5c:d9:18:fd:a7:05:01:31:b3:5b:
1c:29:66:f6:64:33:d6:39:9e:7c:5b:90:d7:b5:6b:f7:2a:c3:
c8:5d:c2:c1:00:12:24:be:22:de:00:21:99:9e:05:fb:c0:6f:
f0:1f:a6:d3:1d:15:93:4e:0f:54:96:6c:80:b1:93:f0:ef:61:
5e:99:ee:c6:a2:ef:51:c5:26:71:4d:d3:4b:81:74:13:f3:f0:
9d:0e:27:7e:e9:86:25:af:38:e6:2a:fc:b0:4c:6d:b3:30:d5:
35:a7:26:fc:61:c0:ee:ac:0c:c6:6a:22:a0:83:27:61:83:35:
3d:ac:a2:ca:9b:bf:15:1b:dc:9b:e5:77:3e:2d:da:fb:c1:ad:
f8:0e:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:38 2025 by rpki-client