Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/df6eEH1lcm-NQu74tYmhvofIQ3M.roa
File: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (raw, json)
Hash identifier: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=
Subject key identifier: 75:FE:9E:10:7D:65:72:6F:8D:42:EE:F8:B5:89:A1:BE:87:C8:43:73
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 0194244480A11039B61945A94F53A618B4AB
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/df6eEH1lcm-NQu74tYmhvofIQ3M.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25148
IP address blocks: 46.31.184.0/22 maxlen: 22
46.31.188.0/22 maxlen: 22
79.171.80.0/21 maxlen: 21
81.93.160.0/20 maxlen: 20
89.250.112.0/20 maxlen: 20
109.68.88.0/21 maxlen: 21
194.24.252.0/23 maxlen: 23
195.28.172.0/23 maxlen: 23
195.225.0.0/19 maxlen: 19
2a01:600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:80:a1:10:39:b6:19:45:a9:4f:53:a6:18:b4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75fe9e107d65726f8d42eef8b589a1be87c84373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:ee:22:f0:40:a0:90:00:12:e2:23:1d:61:
d0:8f:18:8c:af:50:01:9e:7a:77:9a:d8:61:a3:e4:
b6:14:9f:ca:f0:e7:11:c8:32:10:31:b5:52:75:02:
a1:6b:23:c0:23:e5:3a:a3:e7:4b:bc:e8:56:a6:dc:
f8:1b:2e:04:20:dd:14:0e:7b:94:de:85:5f:d1:17:
d0:e0:ba:c1:e9:a2:39:cf:83:95:fe:70:19:be:41:
ee:fa:af:f5:eb:06:2d:0e:e5:a2:09:ce:b5:4b:8d:
4d:8b:d4:78:9b:1a:2d:38:78:f4:33:6a:cd:ef:2a:
10:b2:a8:da:ad:5f:1c:09:97:ca:03:11:55:84:30:
b1:ba:5a:4a:0f:a6:7e:b2:6c:6d:c7:35:b2:2f:cb:
cf:a0:06:a2:cc:d5:8b:b3:8b:75:e9:32:9f:00:0c:
35:34:ae:d0:20:40:d7:cc:2e:39:9c:79:6e:e1:17:
c2:d5:70:62:45:c1:d1:54:57:59:66:20:b4:50:ef:
12:64:4d:2a:ed:f3:f7:0c:87:aa:8d:a4:16:66:1b:
8e:c8:e6:5e:60:22:7a:eb:12:dc:da:67:3f:f7:6a:
b3:60:27:f8:b3:6d:a1:49:95:18:f1:84:68:11:b1:
53:48:83:eb:9e:5b:7f:0a:14:cd:5a:63:52:1f:e7:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:9E:10:7D:65:72:6F:8D:42:EE:F8:B5:89:A1:BE:87:C8:43:73
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/df6eEH1lcm-NQu74tYmhvofIQ3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.184.0/21
79.171.80.0/21
81.93.160.0/20
89.250.112.0/20
109.68.88.0/21
194.24.252.0/23
195.28.172.0/23
195.225.0.0/19
IPv6:
2a01:600::/32
Signature Algorithm: sha256WithRSAEncryption
09:75:0d:71:97:13:1b:88:0d:c9:ed:99:0d:33:74:af:41:e4:
ba:cb:19:90:6c:dc:89:ee:c4:1d:df:66:c8:e5:f6:4a:af:a2:
f6:2b:84:67:d4:6c:c3:cb:36:74:b2:d2:8d:cd:12:16:08:95:
90:b6:2b:2e:81:87:08:2c:65:38:66:5f:c4:41:7a:0a:35:4f:
4c:5c:b3:7a:94:a4:54:f4:38:7b:67:11:c2:bd:46:7c:88:18:
23:da:03:32:65:3b:c2:54:b6:0e:e4:52:90:c3:ed:ca:6f:7c:
b0:18:86:94:8f:93:ed:94:2a:91:bc:b3:98:f9:92:a3:25:a3:
50:34:6f:90:74:99:4a:a4:d4:3f:e6:25:68:19:97:47:50:d6:
3b:ba:c3:1b:64:06:91:4e:28:1a:9b:33:27:ef:4d:3f:6f:38:
de:46:c7:d5:7d:dc:03:a3:c3:92:40:a0:ee:c7:be:a5:e9:d7:
fe:d7:40:a1:2b:b2:b3:56:91:5c:a4:e4:df:cf:62:6b:c6:52:
32:fa:62:b7:07:94:1e:60:b8:67:6d:39:dd:ac:15:1b:dd:85:
31:a7:4d:21:af:a9:bc:37:2a:14:db:c2:34:bd:2a:28:d2:77:
c7:1d:1f:76:e3:4b:26:a7:b1:2a:7f:4b:17:96:6f:ab:44:3e:
ca:f6:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:16 2025 by rpki-client