Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/34L0qge2tNB4WEjnnevARD_mNUU.roa
File: 34L0qge2tNB4WEjnnevARD_mNUU.roa (raw, json)
Hash identifier: ry58BGExakUgGHZ3z3Fi8XcJ02SF1yHnFqs3N6sRqHc=
Subject key identifier: DF:82:F4:AA:07:B6:B4:D0:78:58:48:E7:9D:EB:C0:44:3F:E6:35:45
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 019420D5B9939F6FF0A78132E80D13320A6B
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/34L0qge2tNB4WEjnnevARD_mNUU.roa
Signing time: Wed 01 Jan 2025 07:47:45 +0000
ROA not before: Wed 01 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44735
IP address blocks: 46.182.184.0/21 maxlen: 24
78.40.248.0/21 maxlen: 24
91.220.138.0/24 maxlen: 24
149.126.80.0/21 maxlen: 24
157.97.0.0/19 maxlen: 24
178.19.48.0/20 maxlen: 24
185.40.120.0/22 maxlen: 24
185.111.36.0/22 maxlen: 24
185.152.116.0/22 maxlen: 24
213.181.96.0/19 maxlen: 24
2a00:9280::/32 maxlen: 32
2a01:6f00::/29 maxlen: 48
2a01:8280::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b9:93:9f:6f:f0:a7:81:32:e8:0d:13:32:0a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df82f4aa07b6b4d0785848e79debc0443fe63545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:55:5a:cb:c7:cb:9b:f2:5e:a7:8a:e1:26:
44:77:0c:3d:e9:4c:99:71:e0:07:7a:d4:2c:dc:41:
9e:e8:bd:6c:84:a3:16:ff:23:3a:d9:f2:ed:c4:2a:
79:68:76:9e:bb:6d:83:6f:2d:05:41:c8:39:3e:31:
2e:04:c5:07:65:54:8c:36:0a:35:c7:3d:97:40:f5:
f3:ce:58:46:28:09:a4:8b:22:ec:c9:bf:7d:81:00:
5e:d6:e4:3c:5b:f2:d6:03:9e:df:d7:88:d4:09:29:
46:65:ed:51:fa:96:50:59:d4:b6:c1:d1:be:0d:6d:
48:2f:89:67:4e:49:0f:92:68:e9:05:a1:83:0e:73:
81:e8:1e:dd:59:3a:84:0a:3b:3c:23:cf:7f:48:dd:
5f:ff:74:3a:4d:6e:94:06:78:36:7b:33:c0:01:1e:
c2:f4:6c:4e:90:14:9e:00:f4:d4:3f:49:62:0b:01:
8e:17:1a:c7:6b:d2:1c:73:99:cd:b9:e9:3b:5d:80:
d0:33:d7:f1:60:1a:e1:14:b2:55:45:53:2b:ae:09:
b9:0f:20:a3:3e:61:50:72:fa:0d:92:ed:3a:53:bb:
26:52:52:e3:78:15:d6:3a:f6:52:75:f1:c1:37:be:
d9:3f:79:2a:af:1c:3f:37:fe:4e:f9:7e:9c:f1:9c:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:82:F4:AA:07:B6:B4:D0:78:58:48:E7:9D:EB:C0:44:3F:E6:35:45
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/34L0qge2tNB4WEjnnevARD_mNUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.184.0/21
78.40.248.0/21
91.220.138.0/24
149.126.80.0/21
157.97.0.0/19
178.19.48.0/20
185.40.120.0/22
185.111.36.0/22
185.152.116.0/22
213.181.96.0/19
IPv6:
2a00:9280::/32
2a01:6f00::/29
2a01:8280::/32
Signature Algorithm: sha256WithRSAEncryption
19:69:b0:25:25:62:65:05:6f:61:39:af:4d:71:af:0b:58:85:
c8:1f:ac:72:c2:7e:99:c1:de:98:25:38:93:18:c2:7f:4f:d5:
9b:65:50:9f:b8:6c:de:c1:0a:55:cb:53:a0:b9:bd:e4:b4:51:
b5:6e:69:cd:9a:47:9f:21:c3:cd:55:0b:a3:dc:fe:21:62:b4:
fb:f6:e1:23:55:83:85:93:5d:cc:b7:06:06:51:ba:a4:b8:f7:
fd:82:df:c3:e1:4d:6d:8e:1e:30:20:e9:22:76:08:1a:06:15:
8f:ac:73:25:e0:50:19:56:0f:9d:cc:99:60:5d:2e:d3:fe:0d:
99:fd:74:1b:c6:6b:fa:1e:eb:ab:00:22:71:05:2c:7f:91:28:
70:c6:46:01:be:e0:64:de:b3:84:21:24:18:e6:fa:4f:ea:d9:
3b:6d:2d:f8:69:cd:15:55:c7:42:ea:52:82:53:4f:a5:0e:4d:
e0:ca:e1:4f:80:9a:35:c9:13:6c:86:11:ba:c1:b4:71:a1:02:
b7:b9:ea:2f:59:ed:0f:26:17:6b:e1:db:ba:f5:ed:ba:43:34:
c9:95:10:6f:4f:98:1e:7f:2c:5d:83:e5:45:14:be:44:a2:cf:
e9:8a:a9:1e:01:ae:1a:c4:37:42:16:b8:87:51:46:d5:c7:cf:
02:08:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:59 2025 by rpki-client