Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/EhNndesTum81mOMXhcOi2n_rHnA.roa
File: EhNndesTum81mOMXhcOi2n_rHnA.roa (raw, json)
Hash identifier: sAogpa1RExSlGgrDWGINlE/Q6Mx7t3gyGRgJK0CraUs=
Subject key identifier: 12:13:67:75:EB:13:BA:6F:35:98:E3:17:85:C3:A2:DA:7F:EB:1E:70
Certificate issuer: /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial: 019426D8D9C4BCC9D05A32CB771D1BCF3897
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/EhNndesTum81mOMXhcOi2n_rHnA.roa
Signing time: Thu 02 Jan 2025 11:48:53 +0000
ROA not before: Thu 02 Jan 2025 11:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58273
IP address blocks: 5.83.8.0/21 maxlen: 24
148.252.16.0/20 maxlen: 24
185.89.32.0/22 maxlen: 24
185.201.32.0/22 maxlen: 24
194.113.44.0/22 maxlen: 24
2a01:6240::/29 maxlen: 48
2a10:cb80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:d9:c4:bc:c9:d0:5a:32:cb:77:1d:1b:cf:38:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
Validity
Not Before: Jan 2 11:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12136775eb13ba6f3598e31785c3a2da7feb1e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:f1:a7:e4:95:1e:8a:3b:10:f1:ca:88:9a:
fe:a5:10:a8:86:4f:73:f0:63:4c:a6:df:1c:78:ba:
69:cf:0d:0d:11:fa:70:32:2a:90:07:69:09:d2:87:
6a:b1:36:4d:74:de:77:28:03:07:a8:3d:8a:6a:94:
8c:bf:f0:35:7f:c2:3c:8b:67:28:69:b4:57:ee:0b:
be:9e:53:f5:14:06:16:5b:09:5a:c6:0a:74:e1:64:
27:e0:39:f4:db:31:68:07:9a:e6:bb:2d:5a:aa:06:
e3:7c:79:80:47:70:12:67:37:f4:1e:7e:02:4d:9c:
92:02:a8:75:0e:ca:f5:a9:a1:26:8a:b7:c5:8b:d1:
92:e2:cc:f1:16:93:a0:3a:2a:30:a6:b7:17:f0:71:
6d:ef:ad:50:2f:05:c2:8f:9f:05:ce:a4:b6:c2:78:
b0:7b:c9:29:98:9a:96:59:76:e2:dd:9f:22:9e:86:
b1:2e:07:3a:25:96:5d:dd:91:f9:84:f0:f7:24:cd:
c8:c0:aa:6c:dd:30:5b:8e:e6:e0:61:47:3e:4b:21:
2f:6e:06:21:e2:06:52:4b:16:74:96:79:ed:19:05:
d5:67:6c:3b:e6:44:98:8b:56:5b:70:0f:17:12:1e:
65:d4:26:7b:08:65:32:43:3d:d9:7f:26:5a:b8:50:
8f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:67:75:EB:13:BA:6F:35:98:E3:17:85:C3:A2:DA:7F:EB:1E:70
X509v3 Authority Key Identifier:
keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/EhNndesTum81mOMXhcOi2n_rHnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.8.0/21
148.252.16.0/20
185.89.32.0/22
185.201.32.0/22
194.113.44.0/22
IPv6:
2a01:6240::/29
2a10:cb80::/29
Signature Algorithm: sha256WithRSAEncryption
87:14:68:02:00:eb:4d:3e:8a:16:53:a7:a0:da:a2:9b:5b:aa:
49:e5:89:14:7a:35:36:2f:41:52:1f:63:26:d9:dc:43:89:c1:
ee:06:15:56:c2:79:08:26:0d:a3:1c:d4:8e:e4:4f:00:db:82:
1b:14:b9:dd:78:9c:e3:27:8e:43:b1:2f:b2:47:c9:76:98:d9:
5d:45:3f:c3:c3:e7:4b:6b:d3:17:1e:9a:51:61:84:bf:fb:ba:
fb:8d:d6:2b:a6:b2:c5:fd:19:1c:58:b5:ac:a0:a2:8d:bb:fb:
2b:52:1a:54:bb:56:4b:5b:5d:c3:c2:b9:0a:0c:ba:7d:ca:60:
5b:ac:36:5e:66:d3:eb:c5:75:8d:64:25:d7:37:a2:e6:be:96:
11:68:5e:3c:d4:74:de:40:82:02:8c:76:78:12:51:da:42:d7:
94:40:82:3b:20:54:4a:74:23:29:cc:21:dd:26:8f:d5:43:f3:
f7:0d:a6:ef:a6:5d:fc:0a:53:1d:f9:e6:6d:b3:9b:fc:ea:3a:
08:a4:19:d1:2c:bc:92:6b:c1:28:69:a0:93:b7:dc:e9:54:d5:
b6:81:99:ff:b7:7f:f0:83:bb:db:ca:e5:ef:8b:36:6d:d7:f3:
2f:72:00:aa:ac:66:f4:c7:16:65:ac:bf:85:76:6c:21:45:58:
5b:a0:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:09 2025 by rpki-client