Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/5n7dgIWemJ_305TpiU3O_0-YbeA.roa
File: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (raw, json)
Hash identifier: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=
Subject key identifier: E6:7E:DD:80:85:9E:98:9F:F7:D3:94:E9:89:4D:CE:FF:4F:98:6D:E0
Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial: 01941F8C63B10B97E4C684B4EAAF59EC50AA
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/5n7dgIWemJ_305TpiU3O_0-YbeA.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206557
IP address blocks: 77.222.160.0/19 maxlen: 24
81.93.96.0/20 maxlen: 24
85.113.160.0/19 maxlen: 24
213.161.160.0/19 maxlen: 24
2001:4b80::/29 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:63:b1:0b:97:e4:c6:84:b4:ea:af:59:ec:50:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e67edd80859e989ff7d394e9894dceff4f986de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:a3:34:49:37:7f:77:2c:13:7f:8f:2c:d5:
19:69:8f:28:9f:9e:3f:5e:ff:67:ed:4e:69:b0:89:
34:b2:fb:ec:79:9a:b2:5c:d8:76:d4:8a:ce:fc:19:
9e:10:bf:e0:93:db:eb:db:17:fc:a5:e3:18:b2:ac:
ad:54:65:d9:54:fa:0e:1a:4d:5f:5d:23:3a:01:8c:
46:04:a9:59:bb:8f:26:9e:10:fa:bd:2b:f5:72:d4:
c0:2d:0f:d4:d3:9b:50:35:c9:ab:1b:e1:1b:41:9e:
a9:82:c6:3a:b0:25:67:6c:7b:39:57:14:ce:89:20:
be:45:ea:68:e9:78:e5:11:d3:d5:89:bd:d5:77:a5:
51:b4:6f:ce:f2:30:6d:0d:b3:76:25:d3:f4:3f:d6:
65:ed:ca:6e:2b:eb:e0:1c:70:a6:55:24:18:f9:8a:
43:26:ea:b4:ab:72:3a:a0:10:9c:ac:74:a6:5b:6f:
c1:87:9f:f5:0e:86:9e:07:db:68:ee:14:8e:60:e2:
c1:98:09:f9:bd:5d:60:35:19:50:f5:7a:a4:08:19:
fe:f1:10:bd:f2:00:72:e2:97:93:0a:58:35:54:56:
7a:55:5a:b5:b9:ab:d5:45:d1:2a:76:18:6a:27:22:
6c:c7:72:7a:4b:79:e4:76:d6:3a:c5:d4:7f:79:c4:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7E:DD:80:85:9E:98:9F:F7:D3:94:E9:89:4D:CE:FF:4F:98:6D:E0
X509v3 Authority Key Identifier:
keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/5n7dgIWemJ_305TpiU3O_0-YbeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.160.0/19
81.93.96.0/20
85.113.160.0/19
213.161.160.0/19
IPv6:
2001:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
6c:25:ee:9a:45:ec:bd:af:8d:5a:38:e3:91:06:ed:a3:7f:23:
53:63:e6:88:be:1a:bc:50:7e:03:a2:d9:94:ad:1b:f7:90:8a:
84:a7:85:5f:bf:1c:64:a7:ac:22:0e:70:18:2a:c1:5b:b5:70:
06:e0:23:b8:12:89:fc:38:eb:86:46:bb:07:a9:54:1f:46:11:
3c:7e:06:77:fb:8e:51:73:31:17:10:e4:f8:c1:d2:49:80:07:
61:e7:65:3b:9c:b4:ef:79:93:12:89:74:7d:91:42:a1:12:92:
3b:00:a9:ff:4d:fb:f0:63:79:10:fd:a6:85:8d:0f:04:ca:59:
b9:07:a4:11:83:37:e4:4c:93:4e:83:4d:c1:2d:ef:53:99:fa:
0e:ef:61:76:35:b3:f6:ec:4a:57:f4:86:72:a4:b4:43:3d:a0:
b6:45:6b:1a:34:ec:a2:65:3b:1d:e6:6e:dc:5c:0a:0e:eb:8d:
50:75:8c:f5:d9:0a:fe:cd:38:03:67:18:a5:d2:01:4d:f2:00:
32:32:c9:41:4d:1a:6d:7f:9b:13:b1:44:f4:a2:41:fe:5b:60:
05:53:77:f0:cc:f9:e0:ed:6c:30:92:da:59:3d:70:30:24:ca:
87:aa:b2:f4:09:6d:70:bd:34:90:2a:b8:0b:74:97:bd:5e:0b:
be:d0:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:12 2025 by rpki-client