Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/g7zSuu1Y2LgUEEcASbCxWIihuvc.roa
File: g7zSuu1Y2LgUEEcASbCxWIihuvc.roa (raw, json)
Hash identifier: DxpZr9EOZTA5swhTGy2g3jLwTeS/IoD0WJP5uBxOYhA=
Subject key identifier: 83:BC:D2:BA:ED:58:D8:B8:14:10:47:00:49:B0:B1:58:88:A1:BA:F7
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 019424B314A0ED0088336708314F31640757
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/g7zSuu1Y2LgUEEcASbCxWIihuvc.roa
Signing time: Thu 02 Jan 2025 01:48:23 +0000
ROA not before: Thu 02 Jan 2025 01:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31117
IP address blocks: 87.244.192.0/18 maxlen: 18
185.171.140.0/22 maxlen: 22
212.37.64.0/19 maxlen: 19
217.119.112.0/20 maxlen: 20
2a01:328::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:14:a0:ed:00:88:33:67:08:31:4f:31:64:07:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Jan 2 01:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83bcd2baed58d8b81410470049b0b15888a1baf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:cb:70:ac:17:d3:b3:e9:c6:fa:68:36:7e:
9f:58:29:d7:9b:08:5b:23:27:73:dc:df:b5:51:a6:
bb:ea:04:46:38:df:ac:85:97:91:be:8f:ce:2b:9c:
f9:4a:ba:aa:f1:f1:87:34:52:67:bb:db:ad:d2:ec:
84:6c:d0:58:21:f3:84:a7:0a:23:c5:0e:30:b3:51:
97:44:0d:a7:b3:c9:29:33:78:13:a6:5d:09:28:fb:
e6:83:74:04:ce:01:f0:64:03:95:03:0f:85:48:84:
f3:bf:4d:b3:eb:ba:9b:81:54:c7:6d:17:19:12:a4:
c2:de:b8:f2:63:f3:3a:c2:29:d2:21:b4:1d:df:5a:
b6:97:f5:70:bb:7e:b0:34:80:f2:62:a8:5d:ee:a5:
f4:cc:ce:d9:41:f1:91:5d:b8:c7:0a:ef:10:f0:20:
f5:09:d3:92:e8:ff:42:d0:16:60:8f:c3:67:6c:66:
30:a6:1e:a1:89:a7:23:20:f4:bb:b9:05:b1:c6:75:
d7:bf:fe:e5:72:c7:5f:0f:f7:30:ef:9a:88:0a:26:
8e:62:f8:da:a8:2a:92:4c:e2:1c:73:1e:c3:3f:ce:
28:79:cd:50:67:fe:4d:91:49:d4:93:3e:2c:85:07:
1d:08:eb:bd:bb:dc:22:4b:cc:e2:db:01:56:92:9e:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BC:D2:BA:ED:58:D8:B8:14:10:47:00:49:B0:B1:58:88:A1:BA:F7
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/g7zSuu1Y2LgUEEcASbCxWIihuvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.244.192.0/18
185.171.140.0/22
212.37.64.0/19
217.119.112.0/20
IPv6:
2a01:328::/32
Signature Algorithm: sha256WithRSAEncryption
58:2c:22:d7:88:c9:fa:13:0a:76:54:8a:ba:10:e0:e2:b3:00:
4c:cb:ab:51:c7:cf:35:35:45:1d:80:ce:bb:58:dc:36:2e:e0:
1c:c7:b5:ab:5d:de:34:5e:1b:40:c5:8a:ec:d7:e9:68:a8:f5:
73:b5:b3:48:30:0e:3c:bf:74:ff:a0:79:40:8b:97:f0:58:9e:
61:26:36:48:e8:a7:5b:ad:d1:b6:13:46:69:64:9c:ff:ff:bc:
26:dc:82:dd:8c:8e:0a:ef:76:71:b0:0b:5f:83:81:68:93:88:
00:16:c0:12:d3:28:99:bf:7e:a4:8a:30:2a:39:3b:e6:b9:7d:
3d:93:1f:5f:1d:e7:4e:67:86:47:01:e1:f6:ae:52:12:93:2d:
e6:47:e2:62:57:c1:ed:d3:d1:09:9e:b6:14:12:8b:d3:f2:1f:
dd:af:d2:9f:61:54:bc:77:3d:eb:f6:dc:29:13:cd:46:8d:d5:
e6:58:76:97:64:22:62:9f:a5:57:38:0e:95:7d:ef:55:5a:b4:
47:5d:7a:6e:76:4c:cc:ea:34:a7:78:8c:93:fb:36:59:9b:e3:
54:19:a1:3e:90:20:8b:45:47:af:51:2e:04:10:36:2c:ca:c5:
71:2c:a1:76:51:7d:a5:a0:ff:05:f1:94:b1:7d:f8:84:57:19:
f4:af:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:58 2025 by rpki-client