Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/q1djJGXN4h62Rhblu8FEgkuWF-s.roa
File: q1djJGXN4h62Rhblu8FEgkuWF-s.roa (raw, json)
Hash identifier: As4tKaDUqH8R0C1/XWavCmqsT6Gv14IgovE31K3ap4Q=
Subject key identifier: AB:57:63:24:65:CD:E2:1E:B6:46:16:E5:BB:C1:44:82:4B:96:17:EB
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747E7B1FB1FAC6526E2168AAA5BE521
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/q1djJGXN4h62Rhblu8FEgkuWF-s.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34569
IP address blocks: 77.78.0.0/18 maxlen: 24
93.152.182.0/24 maxlen: 24
93.152.188.0/22 maxlen: 22
109.120.192.0/18 maxlen: 24
109.120.213.0/24 maxlen: 24
109.120.215.0/24 maxlen: 24
109.120.216.0/23 maxlen: 23
109.120.218.0/23 maxlen: 23
109.120.220.0/22 maxlen: 24
109.120.224.0/22 maxlen: 24
109.120.228.0/23 maxlen: 24
109.120.230.0/23 maxlen: 24
109.120.232.0/23 maxlen: 24
109.120.238.0/23 maxlen: 24
185.211.200.0/23 maxlen: 23
212.25.32.0/19 maxlen: 24
212.25.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e7:b1:fb:1f:ac:65:26:e2:16:8a:aa:5b:e5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab57632465cde21eb64616e5bbc144824b9617eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:98:00:29:2e:d5:2c:0d:d3:4e:22:9e:2c:6a:
40:78:68:68:e6:17:db:90:49:ba:d0:0f:f7:c9:15:
3f:fa:33:44:f6:1e:cd:c9:e8:49:ba:d4:e2:07:5f:
2b:2c:ab:e2:e1:d6:5c:d1:ee:ff:f7:96:09:0b:3e:
ce:b9:b2:a5:4b:af:0e:f2:2e:01:8e:10:4a:6e:cf:
28:8b:ba:14:54:17:d0:91:c7:a2:cd:78:c2:e0:44:
43:63:90:27:35:01:da:50:55:c4:64:7b:22:9b:cc:
bf:6f:7d:e6:94:ee:3a:41:50:75:da:29:4e:af:b3:
4a:a6:98:24:8d:87:2b:88:8c:dd:26:41:a4:cf:88:
c9:bb:09:64:4e:eb:61:3b:34:ca:43:7b:cc:46:d9:
d5:07:77:c0:a6:9d:20:97:50:60:74:c4:04:4f:95:
68:fd:72:f6:56:a1:ac:bb:3b:6e:e3:5e:e9:53:8b:
94:41:53:ff:84:88:dd:3b:b5:36:76:16:f9:e8:bd:
ca:28:b0:c8:4c:99:04:ea:6d:12:67:e9:b2:5d:b8:
e6:dd:69:89:9d:a9:16:43:03:df:f0:b3:25:66:26:
a3:35:a0:26:77:2e:da:03:58:63:ba:d2:aa:74:6d:
87:ab:3a:42:56:aa:c9:db:97:71:4f:c8:38:df:84:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:57:63:24:65:CD:E2:1E:B6:46:16:E5:BB:C1:44:82:4B:96:17:EB
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/q1djJGXN4h62Rhblu8FEgkuWF-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.0.0/18
93.152.182.0/24
93.152.188.0/22
109.120.192.0/18
185.211.200.0/23
212.25.32.0/19
Signature Algorithm: sha256WithRSAEncryption
62:cc:ef:b9:4a:d8:ed:e2:10:ad:aa:2c:5f:40:1a:be:01:02:
29:4c:85:7e:b1:f8:08:78:5f:10:1f:de:a2:d4:fe:d1:ef:ee:
8d:42:68:10:33:a8:7d:62:c4:e0:42:25:66:4d:88:4b:e9:68:
f6:b3:e6:a2:d0:e5:4e:4f:d0:fd:70:9d:8c:23:20:fb:9d:41:
40:1f:38:35:9c:03:49:22:e6:c9:9a:26:d0:29:7f:cd:7b:1d:
7d:30:19:7a:33:48:82:68:0f:db:7e:10:93:4d:22:cb:a8:ef:
e1:01:24:b3:2d:a5:f3:43:c0:7b:03:03:d6:3f:a0:63:6f:55:
7f:7b:3b:35:e3:6f:5d:29:b1:b2:10:90:c2:1a:80:e2:55:a2:
50:0b:bd:5f:a2:e5:88:d1:a2:90:17:ed:f7:8b:3e:d8:c9:2b:
4e:d3:7b:35:b3:31:ee:5a:fd:a7:bd:86:07:01:d4:ba:aa:00:
9e:5e:04:0e:6f:2f:13:5f:02:19:cb:78:a8:27:4a:df:e3:84:
85:c0:f3:56:21:e9:40:2a:de:37:ac:a1:52:01:36:01:d4:6d:
e5:72:ef:3e:ac:ca:1c:30:f9:af:50:1c:c2:27:0d:3c:b8:b3:
ed:a9:fb:1b:14:c8:d8:67:29:07:ac:d5:38:e6:72:f5:1f:8f:
7b:16:ba:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:08 2025 by rpki-client