Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/1-Dw1PHMy6IBe_-mHLEz4ebvy2w0.roa
File: 1-Dw1PHMy6IBe_-mHLEz4ebvy2w0.roa (raw, json)
Hash identifier: Ah1oxFMhZvVxbnGr/mLU8GHb80xSkSSdAwDT+auz+vQ=
Subject key identifier: F8:3C:35:3C:73:32:E8:80:5E:FF:E9:87:2C:4C:F8:79:BB:F2:DB:0D
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 01942445206AE58CA04A78664C0F9CBCECD2
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/1-Dw1PHMy6IBe_-mHLEz4ebvy2w0.roa
Signing time: Wed 01 Jan 2025 23:48:17 +0000
ROA not before: Wed 01 Jan 2025 23:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13065
IP address blocks: 89.28.224.0/21 maxlen: 21
185.9.56.0/22 maxlen: 22
212.109.144.0/20 maxlen: 20
2a00:6c40:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:20:6a:e5:8c:a0:4a:78:66:4c:0f:9c:bc:ec:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: Jan 1 23:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f83c353c7332e8805effe9872c4cf879bbf2db0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:e4:83:4c:60:29:f7:72:dd:9a:1e:2a:23:
d3:d4:af:e8:78:8b:0e:0d:51:1c:5f:3b:98:57:b2:
8c:e8:d9:e5:3b:2b:b9:82:f5:1f:80:f8:1d:b7:61:
5b:86:f9:1c:69:8d:46:ef:b9:a2:10:74:37:55:7c:
87:ce:a0:cc:92:6d:d7:8c:14:0c:41:1e:45:42:e0:
00:87:23:98:8d:52:79:36:a6:01:4c:c5:be:7f:50:
c8:68:bf:c0:c9:93:70:e2:bb:34:39:05:e3:8b:f0:
fc:57:07:17:4a:f0:36:f9:1b:67:d4:06:d7:f2:61:
3a:e2:a3:4a:e1:13:e0:59:09:2e:3f:ca:38:67:3c:
87:58:88:22:0f:b5:35:ec:17:b5:7c:25:57:25:18:
95:2f:0e:ac:70:36:ca:29:b8:72:94:31:0a:2e:0c:
b2:d9:cb:3c:6a:b5:cf:b7:92:c3:7a:b0:ed:d7:2d:
b8:e7:79:1c:e5:71:2a:79:ed:24:bd:2c:f1:68:d4:
91:18:1b:60:be:75:f1:b1:61:af:15:33:5a:7d:98:
e7:37:ba:90:55:26:52:a0:e9:d6:73:fe:7d:2b:95:
d6:c2:86:4e:4d:9a:c2:bb:c6:96:61:8d:94:09:a2:
e0:4c:12:26:e2:e4:e6:36:b8:43:04:e4:7c:d5:17:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3C:35:3C:73:32:E8:80:5E:FF:E9:87:2C:4C:F8:79:BB:F2:DB:0D
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/1-Dw1PHMy6IBe_-mHLEz4ebvy2w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.224.0/21
185.9.56.0/22
212.109.144.0/20
IPv6:
2a00:6c40:8000::/33
Signature Algorithm: sha256WithRSAEncryption
8e:33:c0:84:d9:cf:cb:8c:5f:d3:82:70:37:1a:21:52:60:eb:
be:dc:5f:fc:7d:40:6e:b7:a5:fb:00:78:ee:2d:fb:6d:f4:48:
95:1f:37:a2:eb:8f:40:26:c3:1e:cb:ca:44:95:ab:fe:f2:a7:
20:c0:0c:55:76:02:a4:96:bc:73:db:8f:fd:eb:50:06:f5:48:
0b:c1:f4:2c:8d:43:ab:0b:bf:1b:0f:bf:d8:d0:d2:4f:29:2a:
77:d9:2f:db:f9:fb:b2:76:0d:fc:ff:e3:2c:42:24:ea:b3:5f:
2d:3c:55:ee:2e:28:23:85:80:88:e4:88:a1:db:0a:51:bf:6e:
e9:26:c3:21:fd:86:80:71:e7:5b:87:e5:99:56:8d:6c:e0:c6:
44:f8:b9:27:26:55:55:69:b1:3c:7b:a7:60:17:ae:82:b2:d4:
a0:32:82:d7:0e:b3:a9:76:67:88:85:6d:13:f6:7e:15:f2:3e:
0b:59:41:9f:0d:fc:ba:25:38:d0:43:d1:d8:d7:9e:42:b6:d8:
f1:d1:10:5e:42:b1:09:ae:9e:31:14:a0:53:0b:56:ad:2c:d6:
e5:cf:7b:0e:d6:42:35:5e:66:40:a8:8f:da:2f:f4:7f:77:5c:
11:63:a4:5c:c1:19:3e:f0:35:29:9b:8e:31:a1:05:30:9f:61:
2d:bd:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:36 2025 by rpki-client