Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/pOdO9Se2ice1mi6CizmcbokQTm4.roa
File: pOdO9Se2ice1mi6CizmcbokQTm4.roa (raw, json)
Hash identifier: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=
Subject key identifier: A4:E7:4E:F5:27:B6:89:C7:B5:9A:2E:82:8B:39:9C:6E:89:10:4E:6E
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 0194274719173145068250B1A89120558B52
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/pOdO9Se2ice1mi6CizmcbokQTm4.roa
Signing time: Thu 02 Jan 2025 13:49:18 +0000
ROA not before: Thu 02 Jan 2025 13:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61108
IP address blocks: 62.249.96.0/22 maxlen: 22
88.218.52.0/22 maxlen: 22
185.92.102.0/24 maxlen: 24
185.226.40.0/22 maxlen: 22
2a02:5e0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:19:17:31:45:06:82:50:b1:a8:91:20:55:8b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jan 2 13:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4e74ef527b689c7b59a2e828b399c6e89104e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:ef:10:18:5f:4f:e5:dd:7d:c6:5b:c9:12:
29:2e:ef:41:7b:9c:74:fb:c0:3a:83:15:2c:b6:c7:
55:1d:f4:8c:8f:d5:ed:c1:5f:a3:29:15:d9:bb:a2:
88:29:42:5b:86:80:98:c9:76:ae:fc:7c:8e:ab:50:
00:28:01:c3:cd:d3:25:25:12:c5:9d:71:bd:64:93:
38:6e:c9:21:c6:8a:1a:e3:d0:56:c0:81:85:af:78:
6f:83:1d:29:e1:56:bc:ac:38:8a:68:da:b1:64:0f:
78:66:ed:ca:74:72:ae:8a:e6:79:66:db:54:14:f2:
14:01:05:0b:90:db:d8:e4:1a:6a:3b:6c:1a:24:c8:
1c:8d:90:61:a6:ec:d3:92:f9:dc:3a:29:66:51:58:
c2:bc:f5:ce:3f:5c:82:56:34:7a:96:6a:c3:f1:dc:
7f:36:8d:39:28:03:74:d1:85:3e:d9:78:3c:5d:94:
1d:26:7c:5a:af:f8:76:50:12:bd:78:22:00:80:88:
a1:a0:be:b4:92:a9:f3:5a:b1:4b:48:de:df:58:b1:
0e:3f:ba:5e:6f:20:49:c2:bc:ca:66:b4:d3:2d:4d:
f3:68:56:78:9d:9a:6a:c7:55:03:bc:ab:79:6e:be:
e0:44:79:cf:6e:57:44:d5:7b:f4:49:ed:28:df:30:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:4E:F5:27:B6:89:C7:B5:9A:2E:82:8B:39:9C:6E:89:10:4E:6E
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/pOdO9Se2ice1mi6CizmcbokQTm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.249.96.0/22
88.218.52.0/22
185.92.102.0/24
185.226.40.0/22
IPv6:
2a02:5e0:2::/48
Signature Algorithm: sha256WithRSAEncryption
1d:2b:12:53:9b:f9:5b:59:64:51:4c:45:61:ff:fa:c1:d1:b1:
a0:6c:3c:80:95:7c:e4:b9:75:54:f9:9c:13:58:c4:86:11:45:
34:3b:37:35:88:69:67:f8:85:7d:74:6a:87:c3:c0:6e:d3:cd:
d6:b6:27:85:1b:b5:7c:a4:c8:15:6b:35:bb:ff:75:c8:82:60:
d2:22:46:e7:1d:7d:9d:45:4f:81:0b:6f:84:ce:70:2d:98:f2:
38:99:d3:14:df:cd:85:12:17:82:bd:87:cf:83:a4:87:d9:f0:
da:25:15:49:ac:9c:6f:3d:bc:c2:fe:48:2e:5e:9c:0d:cb:cd:
b1:d1:2a:38:1b:c5:4c:09:8a:6d:bd:85:79:d2:11:83:97:a9:
17:30:79:6c:d0:02:62:6f:fd:a5:22:82:08:da:93:db:18:9f:
78:4d:a0:75:49:2e:02:d7:0c:8a:a6:ae:bd:60:15:54:d9:14:
d1:0e:2c:10:e9:2f:39:ec:78:e7:8f:3f:a4:c6:5f:87:ee:c7:
fe:15:33:d7:b8:40:d9:59:e9:fb:bf:6b:ad:4c:0d:8b:53:c6:
81:e9:5a:7a:35:bd:54:1e:15:47:bf:af:db:11:2c:e1:75:cf:
09:d8:78:8b:66:d9:f9:fb:f6:bf:45:d9:48:ea:a8:fd:c7:1b:
cc:24:39:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:08 2025 by rpki-client