Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/iDXRiP2KTrR7EnTL3Il7vAvE8ZY.roa
File: iDXRiP2KTrR7EnTL3Il7vAvE8ZY.roa (raw, json)
Hash identifier: qHBkuq3VAoJJ912HaCku/w5ZejG6cpiy3sd/5s+PRss=
Subject key identifier: 88:35:D1:88:FD:8A:4E:B4:7B:12:74:CB:DC:89:7B:BC:0B:C4:F1:96
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CA36F9D6591ECD3BDC0A6E99CB5D3
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/iDXRiP2KTrR7EnTL3Il7vAvE8ZY.roa
Signing time: Wed 01 Jan 2025 01:48:17 +0000
ROA not before: Wed 01 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3348
IP address blocks: 45.144.12.0/22 maxlen: 24
85.117.244.0/22 maxlen: 24
93.92.224.0/22 maxlen: 24
93.187.132.0/22 maxlen: 24
185.81.132.0/22 maxlen: 24
185.119.236.0/22 maxlen: 24
188.208.20.0/22 maxlen: 24
193.0.146.0/23 maxlen: 24
193.0.164.0/23 maxlen: 24
2a06:8840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a3:6f:9d:65:91:ec:d3:bd:c0:a6:e9:9c:b5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8835d188fd8a4eb47b1274cbdc897bbc0bc4f196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:44:4f:26:5d:2c:ff:7b:3c:60:60:87:a9:
a5:fc:f6:59:ed:4d:68:46:88:7d:a9:c8:82:a6:d5:
55:3b:c7:69:b3:d2:5f:bb:8b:83:64:35:35:4e:47:
7f:19:07:2a:ae:e9:dd:1b:4e:e7:82:08:c5:63:a0:
81:f6:91:96:ae:81:6d:61:8e:9d:79:7c:73:04:11:
16:ca:c6:4c:81:3b:0a:83:cd:56:90:76:62:2c:55:
bf:5d:b6:cc:fd:b5:b3:7e:24:7a:fc:d7:ac:c2:d9:
6f:e0:92:79:bc:1d:b2:73:7c:a7:c0:74:d0:c9:7a:
27:fd:da:f9:df:73:2b:6c:13:ca:94:71:52:ee:24:
b6:fd:64:40:26:a4:ef:30:b7:b2:7f:91:29:7d:ea:
03:55:3c:b9:ea:6b:d6:f1:45:d2:37:fb:b5:a3:3f:
ce:63:2d:c8:7d:5c:c6:ee:2f:46:92:b5:75:60:6f:
6e:10:7d:7d:e2:69:c5:0b:c8:d9:90:45:2e:15:9c:
d8:d1:d4:50:51:80:b3:1b:e4:01:51:62:4d:f5:a8:
64:a3:d4:68:3b:d6:09:22:f1:b3:35:24:88:b3:ad:
fd:57:55:2b:42:76:b2:97:48:cf:f9:7f:9c:82:aa:
3e:96:56:af:b6:92:9b:cf:76:91:ea:f9:4b:30:23:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:35:D1:88:FD:8A:4E:B4:7B:12:74:CB:DC:89:7B:BC:0B:C4:F1:96
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/iDXRiP2KTrR7EnTL3Il7vAvE8ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.12.0/22
85.117.244.0/22
93.92.224.0/22
93.187.132.0/22
185.81.132.0/22
185.119.236.0/22
188.208.20.0/22
193.0.146.0/23
193.0.164.0/23
IPv6:
2a06:8840::/29
Signature Algorithm: sha256WithRSAEncryption
86:2d:1c:33:5a:ef:95:d6:4c:27:1e:ea:3c:20:94:88:4f:bc:
79:80:0f:a9:a2:21:b2:99:62:a5:8c:9d:31:e3:d7:f6:29:59:
87:4d:ee:c9:46:2c:2e:cf:20:a8:e5:e6:7f:c7:f9:19:66:df:
83:c6:3b:b9:3f:fe:39:dc:9c:d1:8c:d3:c5:41:4d:4c:49:ac:
02:19:b6:c9:7c:f2:6c:99:a3:6a:27:0f:22:a9:0a:cf:1a:05:
ba:f5:17:ea:07:12:5b:fe:a3:8e:7e:37:5f:b5:9c:da:34:2b:
12:95:64:a5:97:5e:8e:68:62:8e:00:11:7d:c8:9d:09:1b:ff:
f0:47:ca:62:85:26:bc:a5:e9:a2:4a:b6:8f:7c:66:a6:cb:90:
84:d7:50:81:55:64:56:6a:e5:ab:41:51:3b:70:84:61:41:11:
1b:b3:5b:ae:f2:e6:a6:c4:5f:a3:4f:49:22:a0:f1:a9:19:48:
72:b3:ee:26:ba:0c:5a:69:03:b8:78:62:16:65:7c:94:29:a9:
14:b0:ff:44:f6:0a:e2:51:4a:f7:57:e7:5b:e5:4a:c7:1b:77:
f2:60:bf:81:f1:bd:4b:09:e7:66:fd:54:1f:d0:77:ee:44:92:
6b:c1:ab:2e:60:16:3a:a8:66:f7:93:9b:d3:81:9d:b0:2f:37:
4d:40:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:11 2025 by rpki-client