Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/xBrh2puAZLD7pjCAoLg5yGjRnB0.roa
File: xBrh2puAZLD7pjCAoLg5yGjRnB0.roa (raw, json)
Hash identifier: 8ID00PDtROfidLU9/47rFQiCsHZROmYeVHVQ85z87+Q=
Subject key identifier: C4:1A:E1:DA:9B:80:64:B0:FB:A6:30:80:A0:B8:39:C8:68:D1:9C:1D
Certificate issuer: /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial: 019426D8F95090E0643E730D8C6E2EACA7B7
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/xBrh2puAZLD7pjCAoLg5yGjRnB0.roa
Signing time: Thu 02 Jan 2025 11:49:01 +0000
ROA not before: Thu 02 Jan 2025 11:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39305
IP address blocks: 89.40.176.0/22 maxlen: 22
94.24.24.0/22 maxlen: 22
94.24.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:f9:50:90:e0:64:3e:73:0d:8c:6e:2e:ac:a7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Validity
Not Before: Jan 2 11:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c41ae1da9b8064b0fba63080a0b839c868d19c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:d4:ad:20:46:a4:e6:79:5a:36:6e:6a:52:
6d:e6:59:f7:63:20:36:11:d6:2e:07:b1:de:57:9a:
69:21:e6:94:c3:f1:6c:e2:fd:8c:0d:1c:e8:c2:ac:
31:a6:57:6f:c8:6a:c3:88:3e:e5:7a:00:0e:a5:eb:
61:6b:4c:ae:f2:0a:fc:b3:7f:42:48:a7:bd:68:f7:
c4:87:f2:a3:b2:34:9b:08:16:58:fa:d1:52:19:b8:
96:07:22:39:f4:e5:4b:ed:ad:c6:00:cb:3f:b5:0a:
8a:c3:df:dd:49:44:6d:a2:a1:e3:ea:91:ed:8d:fb:
a8:95:6b:10:de:a8:ee:bf:6e:3c:01:8a:5e:90:68:
17:d8:b0:5d:46:1d:7c:36:64:3f:cf:b3:33:eb:a1:
d7:bc:38:ff:21:ea:c5:12:db:f7:76:6d:90:c6:f7:
db:36:15:47:7f:2e:81:b4:49:c3:5f:36:4d:29:c6:
64:26:5e:6c:3d:5a:34:8e:3f:d9:e5:80:8b:4c:93:
6d:88:7d:fa:de:18:67:b5:ae:5c:d1:24:69:6b:66:
8e:e9:4c:4c:d0:21:cc:93:7b:0b:f7:f6:87:43:e6:
9d:f7:b3:77:fe:1c:01:25:9d:d8:6d:38:30:5a:3a:
6d:f2:b6:f9:57:12:39:5f:29:89:8c:f9:6d:f7:1a:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1A:E1:DA:9B:80:64:B0:FB:A6:30:80:A0:B8:39:C8:68:D1:9C:1D
X509v3 Authority Key Identifier:
keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/xBrh2puAZLD7pjCAoLg5yGjRnB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.176.0/22
94.24.24.0/22
94.24.30.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:c6:df:3f:91:5b:0a:1e:85:b9:6f:9f:0c:72:0f:c6:7f:05:
48:95:f2:1e:cc:5f:6e:fe:66:94:4b:40:6f:08:b2:35:d0:1b:
bf:92:65:45:ee:c7:06:ec:d1:f4:d8:71:e8:34:1d:b4:6e:6f:
ea:a5:41:fe:41:c1:3b:77:46:8d:3e:02:63:17:ca:80:79:2c:
e3:fc:96:b7:0d:aa:2c:f5:84:2c:98:27:b7:7d:14:aa:02:f8:
90:96:ae:84:fb:04:45:2d:49:77:e8:bf:d3:7e:73:e5:9e:bf:
85:03:50:52:bb:69:37:70:71:a6:37:72:08:cb:84:bc:80:22:
8c:88:c7:05:fc:f5:09:7b:e7:7e:2f:db:7b:25:e9:78:f6:dd:
bf:67:db:4a:1b:24:41:77:a6:de:bd:ea:46:b5:9c:d4:47:d7:
c7:80:06:e3:71:17:00:20:c2:0d:39:ec:7f:02:60:97:22:10:
e0:8f:0f:cd:31:1b:57:b6:7d:33:bb:d7:df:e1:27:32:13:35:
b8:25:14:dd:87:0a:81:b5:55:28:11:8e:72:58:42:15:29:e2:
48:d5:73:c8:e0:c9:e5:f0:91:77:56:96:19:41:08:93:0f:b0:
a4:d2:1a:18:e0:b1:4b:8e:2f:c5:6a:11:5e:fa:72:11:c9:b7:
75:2b:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:45 2025 by rpki-client