Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RvXRvVyvlekCab9ullONcGuemgo.roa
File: RvXRvVyvlekCab9ullONcGuemgo.roa (raw, json)
Hash identifier: kILuzxt9RHYWDgEffsiWLl3jeXDJ/TZBIJWTp1FRvsM=
Subject key identifier: 46:F5:D1:BD:5C:AF:95:E9:02:69:BF:6E:96:53:8D:70:6B:9E:9A:0A
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D61202AEF90657AD14F35A338514E2
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RvXRvVyvlekCab9ullONcGuemgo.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35348
IP address blocks: 85.204.98.0/24 maxlen: 24
89.36.20.0/24 maxlen: 24
89.36.198.0/24 maxlen: 24
89.44.228.0/24 maxlen: 24
89.44.229.0/24 maxlen: 24
89.44.230.0/24 maxlen: 24
89.44.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:12:02:ae:f9:06:57:ad:14:f3:5a:33:85:14:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46f5d1bd5caf95e90269bf6e96538d706b9e9a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ff:16:87:d3:a8:64:43:69:f4:d8:2f:2c:6d:
fb:2c:ab:d9:11:a4:5c:28:86:ed:54:85:90:50:46:
32:b3:7c:02:6c:12:d6:a1:3f:7b:d3:31:6a:e3:50:
1e:64:ae:49:f1:50:7a:e2:08:d0:82:d4:a6:76:58:
d8:6a:b4:37:eb:39:21:eb:47:b9:9f:71:ce:a4:be:
5e:51:ee:7c:c3:60:9d:b4:5c:48:4e:f1:cb:2a:57:
56:da:fc:ba:65:1d:a9:3d:66:35:dc:06:bd:a9:db:
a4:e0:fa:05:cd:f4:96:db:1b:9f:93:4e:63:61:89:
b9:2d:52:97:a7:e4:9f:76:dd:b9:8d:e6:1b:23:49:
1c:f8:7f:e4:94:6b:57:e4:be:e5:4e:de:ba:8e:52:
f3:1f:00:36:23:ef:ec:94:16:b0:00:01:90:18:61:
d0:1e:35:9a:28:6a:e1:7d:c5:8b:ba:2f:81:27:77:
86:9c:97:3a:5e:77:5e:6f:99:57:57:69:37:96:2c:
83:14:04:e7:3b:18:2c:47:40:dc:8b:5e:61:0c:24:
90:23:e1:09:ff:0e:b4:9b:34:fb:cb:66:2a:c0:12:
e4:7a:73:4a:96:bc:a8:63:c1:0e:f2:72:d6:bb:f4:
1a:78:cb:b3:f7:d5:a4:17:32:8c:e7:e1:91:24:4e:
d4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F5:D1:BD:5C:AF:95:E9:02:69:BF:6E:96:53:8D:70:6B:9E:9A:0A
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RvXRvVyvlekCab9ullONcGuemgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.98.0/24
89.36.20.0/24
89.36.198.0/24
89.44.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:a4:b9:03:bb:08:99:62:85:5d:b4:be:e4:06:1d:4c:9f:b8:
d1:b1:15:da:be:9a:7e:12:ce:58:c9:b8:8a:c8:ac:dd:6b:98:
b5:df:f7:ef:4c:a9:11:8c:8e:74:74:6f:ea:1d:96:21:34:b4:
68:21:17:c6:21:46:49:2f:31:83:bf:4c:0b:6a:ca:90:9c:6f:
90:32:61:30:32:cb:2c:c3:d9:df:25:b2:d2:7d:77:c5:d0:fb:
2a:9b:14:42:31:24:17:1a:99:d1:7a:cf:74:fc:dd:ba:11:a6:
34:9a:ba:c7:73:17:2f:8c:f5:c0:ec:1e:f6:4f:6a:87:43:87:
dc:4c:5e:cf:d5:f3:1b:34:c8:ad:9e:b8:17:f3:88:15:2e:2d:
50:56:cd:f1:8d:e2:11:f6:53:52:0b:d5:f5:56:2b:b8:b2:31:
ae:58:49:17:26:0c:a5:93:e7:54:2e:ca:ca:6f:f9:50:54:09:
b8:18:24:08:bd:9a:09:5c:47:e3:a9:53:2b:08:1b:16:09:0f:
ec:29:8d:54:df:de:86:fd:b5:60:af:8b:a9:92:27:1b:db:9d:
01:53:d0:dc:70:61:59:82:d6:e5:72:08:3c:56:ca:cc:ce:45:
46:ba:92:67:24:57:c9:56:17:d8:78:ea:a5:05:21:73:8a:ea:
10:29:1e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:20 2025 by rpki-client