Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/NRIijDcrDMFXxiIUrw7-RSFRIqg.roa
File: NRIijDcrDMFXxiIUrw7-RSFRIqg.roa (raw, json)
Hash identifier: Xs1dJSQh6jP43OXs08E3Y0OA6tYNWxMNx7R3rVpJodY=
Subject key identifier: 35:12:22:8C:37:2B:0C:C1:57:C6:22:14:AF:0E:FE:45:21:51:22:A8
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01943C2691D55F5B6E11E963D1ED7A366174
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/NRIijDcrDMFXxiIUrw7-RSFRIqg.roa
Signing time: Mon 06 Jan 2025 15:05:47 +0000
ROA not before: Mon 06 Jan 2025 15:05:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43205
IP address blocks: 37.143.192.0/18 maxlen: 18
46.40.64.0/18 maxlen: 18
46.40.75.0/24 maxlen: 24
46.47.64.0/18 maxlen: 18
46.237.64.0/18 maxlen: 18
91.139.128.0/17 maxlen: 17
93.155.128.0/17 maxlen: 17
109.121.192.0/18 maxlen: 18
158.58.192.0/18 maxlen: 18
178.169.128.0/17 maxlen: 17
185.4.80.0/22 maxlen: 22
188.254.128.0/17 maxlen: 17
212.43.32.0/19 maxlen: 19
212.75.0.0/19 maxlen: 19
213.214.64.0/19 maxlen: 19
2a02:6800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:26:91:d5:5f:5b:6e:11:e9:63:d1:ed:7a:36:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 6 15:05:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3512228c372b0cc157c62214af0efe45215122a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:12:9f:ba:d1:92:a0:aa:d1:79:43:00:cd:
9c:77:19:1e:89:8f:9d:47:53:4d:ad:fa:a8:d9:80:
b4:a8:3e:b2:d6:ab:70:41:47:8b:de:07:18:99:2e:
f2:2b:c7:84:ca:fa:0c:84:d4:cf:c9:3e:87:b8:c2:
5b:7d:5f:6a:0e:9a:2f:7c:df:77:c9:71:0e:42:8b:
0d:68:80:91:6d:56:15:a6:95:dd:4e:3b:5a:90:21:
b4:20:f4:0d:a6:14:25:f9:a9:2f:a0:0c:4f:df:3a:
03:9a:7a:f0:23:62:8b:20:86:32:95:1c:ca:81:92:
e7:65:25:c1:5a:91:95:59:c0:c0:04:e6:3b:6a:b9:
cb:7c:2d:26:c7:fc:5a:2b:bf:da:ad:98:a0:e3:93:
02:10:cf:b9:dc:1e:c8:01:4b:69:05:07:61:5b:c8:
b6:8e:08:ea:6a:11:8d:09:b0:0b:b7:66:a2:04:9a:
09:b5:e4:ac:0e:f2:46:e1:60:f6:e6:f6:99:79:6a:
92:2b:d2:da:b9:4a:f9:da:7a:73:df:10:fd:fa:37:
81:ca:1d:e3:00:9d:d2:4a:22:ed:81:de:6b:2f:a8:
64:cd:6c:70:0f:97:a5:3b:17:53:15:fe:5d:d5:5d:
46:93:12:68:1a:d4:c4:77:67:38:98:c8:f5:09:38:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:12:22:8C:37:2B:0C:C1:57:C6:22:14:AF:0E:FE:45:21:51:22:A8
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/NRIijDcrDMFXxiIUrw7-RSFRIqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.192.0/18
46.40.64.0/18
46.47.64.0/18
46.237.64.0/18
91.139.128.0/17
93.155.128.0/17
109.121.192.0/18
158.58.192.0/18
178.169.128.0/17
185.4.80.0/22
188.254.128.0/17
212.43.32.0/19
212.75.0.0/19
213.214.64.0/19
IPv6:
2a02:6800::/32
Signature Algorithm: sha256WithRSAEncryption
44:4f:3f:5f:6a:fb:1d:27:a0:19:52:c9:a3:48:5f:fe:df:18:
b5:7a:d0:da:89:fc:13:1f:59:a7:38:fd:61:a2:1e:8e:9e:ea:
1c:cb:13:e7:cc:d9:5d:be:b1:d9:38:bb:f0:76:32:7a:fe:16:
0b:73:47:a2:00:fb:85:70:89:f8:87:c6:7e:9c:5e:42:86:d9:
9a:cf:73:3b:e4:69:80:69:b2:f0:3f:b0:01:1d:17:ea:94:86:
6a:98:31:6b:01:09:cf:52:f0:ad:85:90:34:af:78:49:5a:52:
24:ac:bb:69:7a:38:3a:64:c7:8f:95:7a:d7:ef:cd:f8:bb:1d:
ed:a3:8b:bb:98:f4:b6:25:67:59:e6:2f:e3:19:1a:aa:9f:11:
28:d3:c4:ff:03:c5:87:7a:64:05:e0:5b:81:d6:eb:a5:7f:23:
cb:c3:5b:5e:d6:9f:af:cd:77:b0:e1:c5:81:7d:d5:a1:18:45:
b4:30:d1:09:42:3e:7e:09:68:f3:74:c4:26:ac:22:ed:46:d0:
45:cc:b3:dd:51:bc:ab:9e:00:7b:4d:b2:08:74:d4:2e:1f:01:
4a:b7:49:74:8e:d6:82:2b:41:c1:9d:6c:ed:dc:9c:08:6e:b6:
48:65:ee:40:e9:16:f5:67:eb:c9:57:13:75:97:cb:2f:57:2a:
02:7f:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:58 2025 by rpki-client