Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/_2jPSPlgYJsD4ywwlbMtnQzhjck.roa
File: _2jPSPlgYJsD4ywwlbMtnQzhjck.roa (raw, json)
Hash identifier: dPt4vhrAZj1gNIW23Wk2/nT1GhYcZvAFuVHXtMeqVMs=
Subject key identifier: FF:68:CF:48:F9:60:60:9B:03:E3:2C:30:95:B3:2D:9D:0C:E1:8D:C9
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 019422FB7D3C7F640E3C9C1B2D2EEA7D208E
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/_2jPSPlgYJsD4ywwlbMtnQzhjck.roa
Signing time: Wed 01 Jan 2025 17:48:14 +0000
ROA not before: Wed 01 Jan 2025 17:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31510
IP address blocks: 83.175.64.0/18 maxlen: 32
83.175.86.0/24 maxlen: 24
83.175.126.0/24 maxlen: 24
156.67.200.0/21 maxlen: 32
156.67.200.0/24 maxlen: 24
185.72.72.0/22 maxlen: 32
212.56.160.0/19 maxlen: 32
2a02:6180::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7d:3c:7f:64:0e:3c:9c:1b:2d:2e:ea:7d:20:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Jan 1 17:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff68cf48f960609b03e32c3095b32d9d0ce18dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:87:0f:07:78:1d:30:8c:62:04:64:ec:70:
a1:8e:c1:84:87:c6:8f:7b:01:ef:57:26:ff:3c:d9:
55:58:63:b7:b0:92:78:80:70:5e:31:6f:94:2e:60:
48:3b:34:fd:4c:0d:43:96:6e:b5:bf:e4:61:f4:58:
14:c5:bb:bd:02:d9:c4:f9:cb:29:40:ca:3c:29:99:
be:85:79:ae:d4:c0:bc:2d:0a:cd:76:10:3b:db:94:
36:10:ce:cb:35:10:6d:19:ea:86:16:d1:52:3b:f5:
5e:75:52:e2:b3:c3:c6:ae:dc:33:6e:0a:29:f0:b7:
9a:c9:9a:a6:5d:36:13:86:af:d5:15:fd:cb:43:6d:
2b:bc:b3:b5:61:9a:11:4c:e4:96:5d:24:dd:06:87:
5a:84:ac:01:25:fd:f8:a7:70:ec:8b:d7:70:01:f5:
14:7d:7d:63:b3:71:e4:94:88:83:7c:5f:5b:8d:7a:
84:f2:b8:60:96:12:eb:aa:dd:37:48:bb:4b:2d:b5:
dc:88:2a:e0:e2:07:03:b5:4e:64:e3:62:83:14:a1:
f6:90:5e:55:3f:ca:29:1c:77:c4:1a:07:4e:40:c5:
37:00:1c:fe:d1:b2:a9:98:40:b6:9d:41:1b:fa:e7:
06:06:35:35:95:a0:a9:fe:54:ab:cf:e8:7d:47:49:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:68:CF:48:F9:60:60:9B:03:E3:2C:30:95:B3:2D:9D:0C:E1:8D:C9
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/_2jPSPlgYJsD4ywwlbMtnQzhjck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.175.64.0/18
156.67.200.0/21
185.72.72.0/22
212.56.160.0/19
IPv6:
2a02:6180::/32
Signature Algorithm: sha256WithRSAEncryption
26:e4:6b:6b:56:12:5d:14:9e:5a:3a:27:ee:9c:f3:ae:cf:c9:
57:81:de:d0:57:a9:d9:43:f7:3c:47:c4:1e:df:26:06:c4:d9:
ab:91:f1:44:6d:3e:be:da:d2:b6:ec:5f:9c:d9:17:0d:aa:9c:
3d:62:2b:ef:25:6c:86:d2:72:1b:f7:37:d7:10:29:fc:b6:3f:
d0:bd:13:b0:ae:fc:cc:aa:8f:15:c6:8c:3f:8c:54:b1:3e:7e:
fd:ab:00:1f:14:33:a5:33:27:3c:7c:99:76:7d:53:19:24:0d:
6a:24:2c:43:0e:11:5b:94:a2:59:b0:15:cb:f5:4d:db:23:4f:
e7:ca:19:fe:56:38:4a:00:c4:f1:2b:53:f5:c9:d5:2f:49:9a:
41:b7:29:99:46:26:db:89:1a:1e:62:ca:9c:33:a2:98:c5:ff:
71:e8:af:d5:34:05:84:de:ab:f1:38:3d:4b:8b:92:8c:e9:d7:
e2:c1:61:35:85:94:39:42:50:59:6c:95:b4:1c:67:86:12:94:
2d:db:c9:92:b8:10:17:10:ff:95:65:73:71:2e:09:66:d8:b8:
10:13:82:e9:65:e4:74:63:ac:9e:82:c7:30:a1:85:6c:89:b5:
a4:74:24:61:b6:e2:78:51:3c:05:64:4e:d7:52:86:e9:86:39:
0b:73:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:39:59 2025 by rpki-client