Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/fnq47xvFlP3s88cw-L8mb-lvd_E.roa
File: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (raw, json)
Hash identifier: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=
Subject key identifier: 7E:7A:B8:EF:1B:C5:94:FD:EC:F3:C7:30:F8:BF:26:6F:E9:6F:77:F1
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019421B25D43DEA43F00BA5467FC8185ACC7
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/fnq47xvFlP3s88cw-L8mb-lvd_E.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25220
IP address blocks: 46.182.248.0/21 maxlen: 24
62.102.192.0/19 maxlen: 24
82.145.192.0/20 maxlen: 24
85.197.64.0/19 maxlen: 24
85.197.96.0/21 maxlen: 24
85.197.104.0/21 maxlen: 24
185.56.228.0/22 maxlen: 24
193.106.16.0/22 maxlen: 24
193.254.212.0/23 maxlen: 24
195.135.224.0/22 maxlen: 24
2001:4b38::/32 maxlen: 48
2001:4b39::/32 maxlen: 48
2001:4b3a::/32 maxlen: 48
2001:4b3b::/32 maxlen: 48
2a00:9e00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5d:43:de:a4:3f:00:ba:54:67:fc:81:85:ac:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e7ab8ef1bc594fdecf3c730f8bf266fe96f77f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:e7:e0:d0:93:0c:01:83:3c:3a:f7:a0:0f:
31:6c:7b:f0:b6:be:40:82:01:db:39:b0:7d:59:b0:
49:5f:43:3c:c4:bb:ae:65:75:25:88:5f:8c:78:ad:
55:79:06:b5:c0:59:c5:02:6c:66:7b:bd:17:ad:69:
60:74:6e:a1:0a:d5:5b:f9:c4:ac:9a:ad:66:6a:a1:
d6:14:bb:72:be:84:a5:64:88:e4:b0:76:0b:04:99:
7c:a7:20:e9:f3:70:af:24:a2:21:ca:c0:d1:a2:d3:
fa:32:86:07:21:9a:09:de:95:bd:7c:5e:b0:34:20:
1f:5a:e2:f0:cd:d8:87:00:6e:3e:94:28:1b:a8:7c:
0d:e4:1e:21:86:52:68:f8:6d:f8:17:d4:40:e2:40:
80:e7:66:e7:35:19:85:83:19:f4:b5:94:44:a1:77:
0f:02:0d:30:81:ad:3e:c9:3e:69:77:98:f6:e1:f8:
86:84:d2:00:45:f6:33:90:18:53:49:80:8d:cf:df:
82:fa:40:2c:e4:8d:7f:96:fa:27:4a:97:cf:1f:ac:
db:68:b8:27:62:9b:f7:b0:bb:bf:9d:9f:a0:4c:4e:
3c:a6:0c:a4:7e:1c:e1:cc:23:0c:56:a1:e4:1e:eb:
57:a1:6e:41:7c:41:37:26:21:9f:cb:72:41:c2:e3:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:B8:EF:1B:C5:94:FD:EC:F3:C7:30:F8:BF:26:6F:E9:6F:77:F1
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/fnq47xvFlP3s88cw-L8mb-lvd_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.248.0/21
62.102.192.0/19
82.145.192.0/20
85.197.64.0-85.197.111.255
185.56.228.0/22
193.106.16.0/22
193.254.212.0/23
195.135.224.0/22
IPv6:
2001:4b38::/30
2a00:9e00::/32
Signature Algorithm: sha256WithRSAEncryption
11:ff:97:50:c4:5f:9c:40:1e:2e:f6:1b:5a:f8:e6:bb:72:eb:
0c:59:9c:82:cf:a3:91:3f:04:f6:52:36:92:31:65:cd:ee:ee:
c9:fa:30:88:73:ce:e3:9a:de:5f:c0:0b:4e:21:42:20:ac:83:
e3:0b:b3:8c:4c:98:2f:32:b2:fc:e6:73:b0:e0:c1:30:d4:39:
e8:79:93:91:22:a3:e0:67:bd:e6:c6:8c:6c:0c:72:46:1d:51:
ec:2a:54:09:d0:d7:5e:b2:0c:ab:0c:0c:2b:3b:4e:aa:bf:dc:
67:22:2b:d2:f8:15:fb:7f:a7:5a:bb:60:e7:a8:dd:e8:d6:29:
2b:27:62:26:0b:12:76:02:67:02:35:13:23:6a:e6:a2:55:9c:
56:28:78:6e:b6:8b:42:7a:81:a6:6c:46:4d:4f:0b:47:78:49:
69:60:7b:7f:24:1c:8e:5a:a5:d8:22:e5:34:34:2b:5c:03:ab:
9c:2a:2d:51:fa:e0:56:d2:4f:af:52:21:db:47:2a:af:a2:e3:
ae:82:fb:42:af:be:72:9f:4f:24:1f:91:fe:c9:92:0d:4c:e4:
5b:43:94:2a:1e:9d:f5:2f:82:9e:44:10:4e:48:47:ae:41:ca:
1d:c7:ec:d8:52:e5:c7:d6:da:e5:13:a3:1f:7c:83:4b:60:0b:
d1:c8:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:51 2025 by rpki-client