Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/uCrIjjHZ0Bh5E9L_1WfJm7jDIzM.roa
File: uCrIjjHZ0Bh5E9L_1WfJm7jDIzM.roa (raw, json)
Hash identifier: PwfStxiOKU9DPYmVh7nCpNsTt7ZM+dGHffJpc0H3zLM=
Subject key identifier: B8:2A:C8:8E:31:D9:D0:18:79:13:D2:FF:D5:67:C9:9B:B8:C3:23:33
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2E57DDC8641E8E5A07585651B90DF
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/uCrIjjHZ0Bh5E9L_1WfJm7jDIzM.roa
Signing time: Thu 02 Jan 2025 01:48:11 +0000
ROA not before: Thu 02 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13194
IP address blocks: 80.81.61.0/24 maxlen: 24
85.254.71.0/24 maxlen: 24
85.254.73.0/24 maxlen: 24
85.254.74.0/23 maxlen: 23
85.254.74.0/24 maxlen: 24
85.254.75.0/24 maxlen: 24
85.254.76.0/22 maxlen: 22
85.254.76.0/24 maxlen: 24
85.254.80.0/22 maxlen: 22
85.254.84.0/23 maxlen: 23
85.254.92.0/22 maxlen: 22
85.254.92.0/23 maxlen: 23
85.254.92.0/24 maxlen: 24
85.254.93.0/24 maxlen: 24
85.254.94.0/24 maxlen: 24
85.254.95.0/24 maxlen: 24
85.254.96.0/22 maxlen: 22
85.254.96.0/23 maxlen: 23
85.254.98.0/23 maxlen: 23
85.254.100.0/24 maxlen: 24
85.254.101.0/24 maxlen: 24
85.254.102.0/24 maxlen: 24
85.254.124.0/23 maxlen: 23
85.254.141.0/24 maxlen: 24
85.254.149.0/24 maxlen: 24
85.254.151.0/24 maxlen: 24
85.254.152.0/22 maxlen: 22
85.254.159.0/24 maxlen: 24
85.254.161.0/24 maxlen: 24
85.254.168.0/24 maxlen: 24
85.254.169.0/24 maxlen: 24
85.254.170.0/24 maxlen: 24
85.254.176.0/23 maxlen: 23
91.190.45.0/24 maxlen: 24
159.148.73.0/24 maxlen: 24
159.148.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:e5:7d:dc:86:41:e8:e5:a0:75:85:65:1b:90:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b82ac88e31d9d0187913d2ffd567c99bb8c32333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:52:6c:a6:bf:19:e6:a6:90:10:4b:15:52:
c9:27:be:83:58:f3:22:1c:4f:eb:3b:dc:c2:4f:4b:
77:7a:71:4e:0e:6b:68:d6:8a:16:68:46:45:63:12:
00:08:61:91:08:dd:ec:b2:47:95:58:7e:36:00:09:
63:1f:52:71:c1:59:29:0e:de:94:45:42:38:c6:a0:
ef:ba:27:e0:35:51:ff:e1:ee:ad:29:56:69:be:24:
98:ec:b5:f4:9c:29:06:8d:98:11:a6:aa:60:c1:b2:
7e:89:c8:53:0b:87:4a:5d:b0:78:31:e8:65:08:17:
24:b3:e3:fe:2a:69:b9:67:58:61:38:6a:55:d0:91:
23:c1:fe:c9:67:5b:45:d9:a2:9f:e3:a7:4b:a1:cf:
4d:11:2f:20:5a:6a:47:09:92:ff:e0:20:cc:66:48:
94:64:b7:6e:84:3b:8d:e6:ac:b6:7f:21:09:bf:48:
90:92:f2:29:34:ba:9c:53:88:ad:7e:43:d1:8f:4e:
b9:07:33:c3:6e:94:8e:e4:76:7f:6d:76:69:a6:08:
db:67:0e:8b:fa:37:40:0e:0f:12:35:c8:82:3f:02:
ec:8d:be:8e:05:67:04:3e:d1:c8:09:a2:42:b4:55:
b3:8e:2d:3c:f6:b9:76:ce:67:6e:e1:96:4a:b7:cd:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2A:C8:8E:31:D9:D0:18:79:13:D2:FF:D5:67:C9:9B:B8:C3:23:33
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/uCrIjjHZ0Bh5E9L_1WfJm7jDIzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.61.0/24
85.254.71.0/24
85.254.73.0-85.254.85.255
85.254.92.0-85.254.102.255
85.254.124.0/23
85.254.141.0/24
85.254.149.0/24
85.254.151.0-85.254.155.255
85.254.159.0/24
85.254.161.0/24
85.254.168.0-85.254.170.255
85.254.176.0/23
91.190.45.0/24
159.148.73.0/24
159.148.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d1:aa:f9:37:e4:c9:a6:4e:5e:19:0e:e7:1b:a8:5f:3f:f0:
09:90:0f:f5:7c:88:d0:5c:20:6d:d4:ac:88:73:97:19:c7:29:
f4:0c:b9:d0:15:f3:f1:d3:4b:d9:51:1b:6d:a2:f9:15:fb:6f:
39:bc:b6:47:5f:ab:4f:05:d2:b5:6a:48:e1:1e:cc:92:79:e5:
bc:2e:b4:5a:37:a7:f1:b4:9b:36:e3:af:82:fc:f0:5c:1f:47:
60:c8:0b:a7:47:25:a0:cb:88:f2:ed:89:55:1b:f8:bf:a7:fa:
23:72:fc:8a:40:d2:19:f7:64:5b:c0:87:e4:4c:98:4a:04:ed:
57:ea:d4:64:3f:a4:0b:40:a1:17:5a:99:a2:6e:b4:41:69:03:
29:06:95:e4:7c:13:26:41:e2:e2:49:e3:61:b9:52:dc:2c:6e:
60:4c:4e:c4:fd:a4:f7:ea:88:f0:23:0f:09:c8:0a:7b:e4:c9:
1d:24:0a:a1:24:8c:0e:25:3e:ed:b4:42:2c:ae:53:66:ca:4f:
55:78:e4:4a:e8:58:e5:f7:3f:70:9e:cd:0c:11:71:4d:9e:d5:
53:46:a2:e1:aa:78:00:41:45:93:69:ca:43:ff:0b:ee:64:6c:
34:9b:23:a5:2e:f5:3e:67:74:8c:2f:0d:a8:82:07:b7:55:fc:
0f:ff:8e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:04 2025 by rpki-client