Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/vG2nuL1igzgqWJUWOISEpJLLdWQ.roa
File: vG2nuL1igzgqWJUWOISEpJLLdWQ.roa (raw, json)
Hash identifier: eVGIn7eVFi1uovTluqkckWewyyXRYQcdEO/+J7uhkjQ=
Subject key identifier: BC:6D:A7:B8:BD:62:83:38:2A:58:95:16:38:84:84:A4:92:CB:75:64
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 019428253D3D42C3BF23A9D3DB252DB8965E
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/vG2nuL1igzgqWJUWOISEpJLLdWQ.roa
Signing time: Thu 02 Jan 2025 17:51:56 +0000
ROA not before: Thu 02 Jan 2025 17:51:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206495
IP address blocks: 81.28.252.0/22 maxlen: 22
185.186.242.0/24 maxlen: 24
194.9.56.0/23 maxlen: 23
194.9.80.0/23 maxlen: 23
194.150.68.0/23 maxlen: 23
194.150.70.0/23 maxlen: 23
2a04:1080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:3d:3d:42:c3:bf:23:a9:d3:db:25:2d:b8:96:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 2 17:51:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc6da7b8bd6283382a589516388484a492cb7564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:0f:c3:e5:2d:52:47:9e:91:2a:8c:68:64:
0c:c9:7b:24:e9:34:4a:c3:fc:94:16:23:96:08:95:
81:34:87:b1:6d:0f:7a:b7:b6:a0:59:89:77:08:a6:
27:4c:60:f9:8a:9e:4e:a6:4c:91:26:f5:40:b0:77:
8b:5e:18:be:4a:78:5a:56:c7:e6:8b:f6:53:13:ec:
14:f4:c6:49:bb:23:a7:06:ae:b5:b9:a6:12:10:7d:
2e:27:33:94:6a:d2:7e:9b:c0:ce:02:0a:4c:f3:c5:
8d:b6:62:5e:ba:20:5b:e6:1b:c8:15:f8:97:32:ea:
14:ff:c9:0b:ae:9a:f8:48:da:f6:68:0a:fc:b1:b1:
b4:d2:2c:1a:b4:e4:86:90:98:47:5b:78:95:bb:d2:
10:40:03:03:d6:e2:c3:c3:2b:d3:55:4e:f0:68:5d:
cf:d8:b5:e9:12:5e:97:12:e9:83:cd:3a:d1:7e:bb:
10:92:1e:de:8f:6b:fa:ef:a7:ef:57:91:df:89:9d:
1a:26:04:24:b2:d7:ed:67:5d:1a:09:9b:fc:e7:55:
25:75:ca:7e:63:44:e6:a2:a5:0d:3a:7d:28:0a:01:
f3:32:b4:ad:cf:cc:8f:8d:1c:22:0d:10:87:ae:2a:
c1:39:d3:17:40:1c:82:ac:c5:eb:fb:da:a6:93:e8:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6D:A7:B8:BD:62:83:38:2A:58:95:16:38:84:84:A4:92:CB:75:64
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/vG2nuL1igzgqWJUWOISEpJLLdWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.252.0/22
185.186.242.0/24
194.9.56.0/23
194.9.80.0/23
194.150.68.0/22
IPv6:
2a04:1080::/29
Signature Algorithm: sha256WithRSAEncryption
c1:c1:31:c1:9f:c7:c6:59:ca:20:51:e1:5b:28:81:d0:12:89:
49:94:de:72:df:06:62:97:a9:bf:cd:01:e0:e4:64:22:b5:75:
10:fe:04:0e:78:19:ee:fb:69:77:89:d5:83:10:49:4e:53:51:
8e:1c:83:1b:fb:24:d9:59:8c:f3:35:5c:23:fe:36:ff:a6:41:
f3:95:ca:b9:c5:be:2a:61:a2:29:35:b6:33:9d:63:59:87:3f:
3f:d8:98:79:ed:bf:f3:f7:f1:96:f8:b0:b9:d8:10:f7:53:9f:
9a:eb:5a:54:85:96:1e:5a:3d:d0:56:b2:da:2f:87:4f:24:4b:
3e:ff:83:da:d1:50:af:56:69:b0:4a:8d:1e:d4:4f:60:08:cc:
3b:08:e8:95:ae:b0:14:4c:97:b2:45:e3:ad:0a:6f:c4:1b:3d:
55:6a:6c:3e:6a:c7:a0:15:d5:60:49:44:94:d9:69:1e:d8:b7:
43:34:79:dd:d4:97:6b:e5:6b:88:b3:8b:ad:2d:ad:b2:ec:2d:
aa:09:bb:10:90:c4:45:f7:f4:86:65:d7:b5:11:1c:c1:2b:14:
d6:c5:92:a6:11:7c:2e:58:f0:cb:b1:0a:3c:7f:2d:8e:3a:e5:
44:ad:66:d5:1b:a8:2d:9b:30:24:cb:c2:7a:cc:a8:2b:67:ee:
d3:97:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:52 2025 by rpki-client