Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/rVporlTC0KO2iHCmNkPkBQ1rLtA.roa
File: rVporlTC0KO2iHCmNkPkBQ1rLtA.roa (raw, json)
Hash identifier: QNFtzFtuUhiRexRD3zRBFnGt2eHAdDUybJR5bbQe4xM=
Subject key identifier: AD:5A:68:AE:54:C2:D0:A3:B6:88:70:A6:36:43:E4:05:0D:6B:2E:D0
Certificate issuer: /CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Certificate serial: 0194214429EFA67D9F93253352612374B3F4
Authority key identifier: 47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/rVporlTC0KO2iHCmNkPkBQ1rLtA.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62121
IP address blocks: 185.93.192.0/22 maxlen: 22
195.24.226.0/23 maxlen: 23
195.189.130.0/23 maxlen: 23
2a02:cf40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:29:ef:a6:7d:9f:93:25:33:52:61:23:74:b3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad5a68ae54c2d0a3b68870a63643e4050d6b2ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:85:50:e5:0b:74:cb:af:1c:14:fe:52:65:
ac:54:de:25:5d:16:c8:fe:f9:9d:08:d7:b9:94:2b:
20:e2:9c:76:ca:21:22:3a:6f:de:0d:8c:66:13:c6:
41:8b:7a:6e:39:4c:a1:73:29:77:ee:86:4f:7b:7b:
c2:b1:06:11:b6:22:ca:66:96:16:51:ef:fa:aa:79:
67:28:46:c3:b5:05:c2:1e:a6:69:00:b1:bb:ef:2f:
8c:2a:00:3c:99:50:42:31:48:c4:69:be:53:e9:f5:
00:2a:fe:31:6b:1b:94:48:71:87:e1:75:91:6c:d5:
32:74:78:fc:f8:99:77:7b:b7:96:b9:90:1e:ce:8b:
ee:26:aa:14:20:30:e0:52:0d:67:6f:d0:7f:55:79:
f0:2d:f1:79:ea:1f:81:23:14:84:ea:96:d9:ba:64:
ee:eb:3b:ed:1d:dd:58:1e:72:c2:08:f0:b1:5c:95:
0e:98:e2:7e:ab:28:67:70:81:09:9a:81:f7:ac:7b:
63:33:e7:65:74:f4:d8:8e:17:0f:1f:28:1d:cd:02:
08:90:36:5f:cb:de:68:0e:82:1a:96:f0:d3:bd:b9:
74:9f:90:06:40:37:61:b7:fd:c0:1e:d3:d1:39:03:
78:9b:d9:fb:2b:9f:49:f8:4c:64:08:02:4c:e7:25:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5A:68:AE:54:C2:D0:A3:B6:88:70:A6:36:43:E4:05:0D:6B:2E:D0
X509v3 Authority Key Identifier:
keyid:47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/rVporlTC0KO2iHCmNkPkBQ1rLtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.192.0/22
195.24.226.0/23
195.189.130.0/23
IPv6:
2a02:cf40::/29
Signature Algorithm: sha256WithRSAEncryption
81:a0:df:22:89:2b:88:ae:63:96:4e:f6:a1:12:e2:1b:0e:0c:
00:72:85:9f:1a:22:c1:e1:30:a8:e4:73:60:f7:16:cd:f5:95:
50:9d:db:f4:0a:eb:26:36:c5:1a:93:cd:06:a4:2f:39:cc:8c:
c6:43:5e:bc:16:9c:b4:1c:9f:5d:2f:cb:a1:c8:be:0d:ea:1f:
63:2c:ba:05:e4:0e:2e:03:89:47:f0:26:29:71:d0:d1:35:cc:
a2:40:36:cd:d2:77:25:0c:cb:e7:c7:91:88:d4:37:ef:0e:2e:
47:18:15:48:5b:be:a4:54:cd:21:aa:12:03:0f:54:2a:da:f4:
b2:19:50:d9:e3:f4:a8:2e:fe:0c:cc:78:22:54:24:fb:84:48:
46:b5:2a:58:f5:95:34:61:f5:d2:52:27:b0:8c:32:a1:42:e3:
0b:bb:a7:09:12:be:14:07:63:e4:4d:51:ba:f5:6e:86:f7:78:
21:85:a3:7f:37:ff:42:15:af:e8:cb:fa:ce:c5:f4:5a:fe:a1:
7b:79:ca:81:b0:c4:16:96:64:90:b5:85:ca:88:56:cc:90:da:
12:9c:8f:a9:1c:61:99:af:4c:a6:b5:54:eb:01:5d:36:38:5a:
11:f8:7a:99:07:88:e5:5d:ac:c1:a0:dd:ea:92:a2:a6:e9:cd:
96:2e:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:06 2025 by rpki-client