Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa
File: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (raw, json)
Hash identifier: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=
Subject key identifier: 1B:BB:F7:A4:29:10:EA:19:9F:86:96:D5:C7:33:B0:51:6C:26:CC:36
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01941FFABA89D819CA8104A729E3564A1F2D
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43447
IP address blocks: 5.184.0.0/16 maxlen: 24
31.60.0.0/14 maxlen: 25
37.47.0.0/16 maxlen: 24
37.108.0.0/16 maxlen: 25
37.225.0.0/16 maxlen: 25
46.134.0.0/16 maxlen: 25
87.96.0.0/17 maxlen: 24
91.94.0.0/16 maxlen: 24
178.56.0.0/16 maxlen: 24
2a00:f40::/29 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ba:89:d8:19:ca:81:04:a7:29:e3:56:4a:1f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bbbf7a42910ea199f8696d5c733b0516c26cc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:84:57:1a:ac:c6:c7:3c:dc:b0:28:a7:47:
b7:cd:67:56:3a:a4:52:e9:02:5c:72:ec:ea:57:7e:
6a:d7:89:8e:d5:e5:e6:7f:2b:20:7f:ea:af:5a:a9:
c4:0a:69:ef:34:0b:ff:07:a3:a3:3a:2a:9b:53:45:
1b:70:6e:30:f3:b6:a6:82:cf:c1:af:0a:87:14:53:
3f:7e:c1:0c:e7:b2:4e:e4:40:3e:a4:f4:5d:a9:0e:
ab:6c:58:36:a7:eb:61:19:49:c5:a1:8e:23:6b:ce:
4f:dc:23:5e:c7:cc:52:c3:3a:22:9c:e4:75:12:7d:
01:c7:67:e8:b4:5f:88:32:b0:4d:5f:37:e4:80:c0:
19:13:ff:50:88:ab:8e:7b:57:64:ff:fb:21:be:64:
37:8d:4f:fb:fa:66:8e:38:ec:35:1a:20:4e:65:32:
87:88:e5:e2:45:34:b4:1d:cc:89:31:ba:bd:02:a6:
17:83:b6:03:4b:f2:b9:b2:e9:c3:0d:10:7d:99:72:
b5:09:97:d8:7f:1d:a5:48:56:94:0d:f9:f9:5f:20:
b6:ad:3e:45:c1:6b:c7:50:15:48:af:ed:b6:76:eb:
4f:5b:27:bb:90:ee:cf:41:89:7f:66:14:7d:fe:d9:
47:3d:6c:0e:61:81:19:d3:22:3b:2a:f5:6d:51:62:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BB:F7:A4:29:10:EA:19:9F:86:96:D5:C7:33:B0:51:6C:26:CC:36
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.184.0.0/16
31.60.0.0/14
37.47.0.0/16
37.108.0.0/16
37.225.0.0/16
46.134.0.0/16
87.96.0.0/17
91.94.0.0/16
178.56.0.0/16
IPv6:
2a00:f40::/29
Signature Algorithm: sha256WithRSAEncryption
70:e9:a7:a1:1f:f9:58:30:9c:b2:c0:f3:99:75:cb:ec:dc:a2:
f5:29:8c:9a:c7:a3:c3:28:35:6e:e3:b8:d7:ef:d7:6a:30:28:
a2:35:07:f1:6b:15:05:91:aa:b9:1e:b8:54:dc:e4:d8:aa:3f:
de:a6:4f:ad:4a:6d:fe:ce:14:84:a8:0b:bb:35:ab:00:e5:bf:
ef:66:36:34:36:05:df:b0:b0:44:35:ac:9f:87:8f:3d:d5:bd:
78:8d:cb:7f:69:85:0a:52:b1:87:5b:74:ff:47:e3:4a:78:aa:
8f:41:a1:59:0a:d0:19:e0:6f:3b:bb:e2:77:8e:06:5a:82:02:
cc:54:1d:fc:40:bf:1a:fd:44:1c:66:13:a1:71:43:b8:0b:2e:
0a:cb:a9:14:74:ca:16:49:67:9a:b9:99:f8:4d:0d:a7:6d:ab:
5a:80:33:25:cc:ab:7b:98:1f:00:c8:8e:88:3c:d8:1a:b8:fe:
fa:70:2b:43:cd:a9:41:55:b5:cd:8b:14:e6:99:ed:c6:d1:e8:
fd:be:8e:0a:4e:df:98:73:10:84:7e:35:4a:d0:36:51:d2:7c:
76:a0:16:f9:5c:00:f8:37:86:bb:21:b1:bd:05:df:0e:b6:98:
70:f8:a5:68:52:ac:79:62:e6:2c:40:be:db:3c:d7:4f:f0:7f:
9a:89:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:00 2025 by rpki-client