Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/rPbx58T-x5ORRRx0tEYr-rx7t3U.roa
File: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (raw, json)
Hash identifier: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=
Subject key identifier: AC:F6:F1:E7:C4:FE:C7:93:91:45:1C:74:B4:46:2B:FA:BC:7B:B7:75
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 019426D93B6744807E959AC906B5B2204D3B
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/rPbx58T-x5ORRRx0tEYr-rx7t3U.roa
Signing time: Thu 02 Jan 2025 11:49:18 +0000
ROA not before: Thu 02 Jan 2025 11:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207355
IP address blocks: 66.97.192.0/19 maxlen: 19
91.196.172.0/22 maxlen: 22
193.187.160.0/22 maxlen: 22
193.239.168.0/23 maxlen: 23
2a06:f240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:3b:67:44:80:7e:95:9a:c9:06:b5:b2:20:4d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Jan 2 11:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acf6f1e7c4fec79391451c74b4462bfabc7bb775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c6:2c:00:51:11:db:04:f4:9b:87:71:94:66:
7d:4f:a4:fd:8b:3d:0c:0a:53:9d:95:d8:b4:b7:4e:
98:e4:62:4b:69:ce:ea:a8:51:64:48:63:3e:b5:e2:
95:44:85:83:fa:a5:01:23:99:ea:81:b4:d0:13:f7:
8b:b8:2b:37:87:d5:8f:1e:51:95:08:b9:8e:f1:de:
c6:f8:db:59:97:ff:a0:43:ad:63:d0:00:09:63:93:
24:1a:38:78:76:67:05:f4:ed:96:10:47:81:35:28:
43:bb:15:3a:7a:8b:aa:07:2d:72:f2:3d:eb:0d:8f:
1d:9d:92:86:91:f0:d7:a3:7a:ab:51:62:30:6c:85:
64:6f:20:71:2c:b4:d4:9d:55:18:6e:71:6a:d2:78:
1a:48:53:72:41:f7:a4:30:52:e9:9b:bb:f9:80:69:
86:38:c5:26:fe:63:e8:ad:db:a1:87:43:b8:3c:89:
26:90:3e:89:7c:51:e7:0d:bc:f5:2e:40:b8:1c:64:
48:6f:ca:2c:b7:d1:e0:2f:be:e3:48:a7:d2:78:7b:
2f:72:8b:ed:16:08:46:52:5d:f0:d0:e7:2d:8e:6e:
c8:b3:d8:54:16:13:9a:bb:4a:d1:19:51:ee:18:45:
5a:f1:38:75:04:64:ef:ac:94:2b:67:25:0b:f4:f6:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:F1:E7:C4:FE:C7:93:91:45:1C:74:B4:46:2B:FA:BC:7B:B7:75
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/rPbx58T-x5ORRRx0tEYr-rx7t3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.97.192.0/19
91.196.172.0/22
193.187.160.0/22
193.239.168.0/23
IPv6:
2a06:f240::/29
Signature Algorithm: sha256WithRSAEncryption
13:4c:a9:e3:e6:44:08:c0:bb:60:12:00:8a:03:a2:e4:ba:f2:
d5:87:d1:49:49:e8:37:42:69:6f:fc:a8:b5:2d:4f:39:85:e2:
4b:36:35:33:12:55:48:6e:b6:6b:0d:40:03:51:3b:4d:68:4f:
72:08:e4:52:48:ff:01:8c:16:23:e7:06:ec:b5:d6:3a:ee:3a:
41:48:8e:2c:1f:34:04:42:0d:e0:3f:a2:fa:b4:ad:28:67:5c:
e9:2e:23:6a:b1:8d:e6:d2:34:17:83:19:ca:76:2d:2f:4d:7e:
6f:de:81:13:df:b3:d0:bf:a3:58:29:8f:98:bf:bf:de:e9:cf:
47:40:cd:3c:dd:84:c7:93:ab:95:70:d5:bf:4b:cd:76:e1:56:
34:fc:ac:58:b5:f7:b7:64:90:19:b8:e7:38:0b:1f:cb:9c:eb:
21:ad:e7:f8:f2:38:03:31:34:fb:f4:05:80:09:28:9b:76:e6:
93:69:bf:87:14:6d:75:9a:9f:c7:be:bb:09:63:71:88:b7:43:
90:87:85:c8:77:83:94:2f:7e:da:ca:f2:d0:a3:c9:b4:7a:bd:
78:7b:6f:26:23:f8:f8:fe:59:72:c5:d0:85:a9:e4:8b:81:7f:
ba:7c:37:bc:37:45:26:2c:eb:6f:42:3c:f7:ff:b9:5c:72:0a:
34:9a:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net