Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/kK7s4B4iJHcI--a0tUgG0bFeh44.roa
File: kK7s4B4iJHcI--a0tUgG0bFeh44.roa (raw, json)
Hash identifier: cXtjH8FVGfS4yj37ODOmNqJh1E5u2OmlQK2i9CaYqsI=
Subject key identifier: 90:AE:EC:E0:1E:22:24:77:08:FB:E6:B4:B5:48:06:D1:B1:5E:87:8E
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0194D5CBBF109925C3154AB291C624475ED8
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/kK7s4B4iJHcI--a0tUgG0bFeh44.roa
Signing time: Wed 05 Feb 2025 11:08:07 +0000
ROA not before: Wed 05 Feb 2025 11:08:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 86.106.80.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:cb:bf:10:99:25:c3:15:4a:b2:91:c6:24:47:5e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Feb 5 11:08:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90aeece01e22247708fbe6b4b54806d1b15e878e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:3c:22:be:d1:cb:ea:63:c2:39:68:ba:20:
84:68:de:d9:92:e6:7f:e0:30:55:f5:65:47:61:b9:
02:24:e4:f9:f6:1e:c2:1d:b0:1b:d8:dc:67:c6:f8:
1a:94:16:7c:43:b4:38:73:9a:78:98:da:04:32:d2:
cc:c8:ef:a3:f5:d4:31:ca:0e:cd:ca:ed:1e:b6:80:
dc:83:00:37:5c:c3:55:d2:63:33:a8:c6:6d:17:b7:
84:0c:72:a8:14:af:e7:b0:bb:b8:71:7d:98:c7:13:
53:a7:9b:7b:ea:35:8b:6d:67:3f:1d:68:1a:0f:b3:
2d:38:5b:a7:6a:86:11:eb:bc:10:ee:ac:42:be:4d:
d9:07:ef:70:18:dc:f0:12:96:48:8a:a5:70:cf:ed:
3d:17:f8:c1:e0:40:14:58:26:6d:4f:58:f6:f8:a1:
dd:cc:08:3b:ac:f0:23:77:a4:7c:e1:9c:0c:54:1f:
9b:6e:40:d0:3b:0c:7f:c9:d6:74:a8:bd:98:74:92:
b4:a6:6b:ca:72:2c:20:a3:21:16:79:45:2d:9f:c1:
c8:4a:b9:03:69:6a:4a:53:7f:28:e7:86:78:dc:a4:
67:86:a2:9a:9e:74:5e:48:e6:e8:91:1d:ab:6c:de:
34:d9:81:c0:3d:48:19:1d:7e:f8:2f:72:4d:3c:c2:
01:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AE:EC:E0:1E:22:24:77:08:FB:E6:B4:B5:48:06:D1:B1:5E:87:8E
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/kK7s4B4iJHcI--a0tUgG0bFeh44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.80.0/24
89.45.34.0/24
93.114.187.0/24
188.215.72.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e4:8a:50:94:99:36:fd:59:ce:b3:ca:2f:78:53:44:51:3e:
f8:06:12:c4:8c:ea:70:e2:c8:6a:e6:d4:ed:60:19:58:28:cd:
e7:e0:53:7e:0c:9d:17:68:b5:69:aa:5d:7a:48:eb:ab:75:5e:
ec:14:e3:90:ef:e2:ea:b6:30:64:7e:5e:f4:4c:3e:df:b2:41:
1d:08:de:ca:3b:09:14:18:df:25:d4:1c:9a:7b:2d:6b:63:de:
a1:9a:b9:a9:6e:b6:43:26:c6:33:d7:89:c0:ca:71:20:59:d1:
f5:a1:3f:c0:66:4b:a2:b6:cf:07:18:8c:70:af:7d:d1:fc:2e:
4b:72:f5:e9:cb:32:ef:12:02:39:35:18:ef:8e:fd:98:6a:eb:
bb:58:cf:16:b8:ef:35:53:14:d4:ca:48:a7:aa:f6:cf:c0:57:
2d:17:32:b6:85:e5:69:0f:9a:05:0c:f8:11:a7:12:16:a2:de:
d7:2a:52:50:71:c6:85:1d:f7:1f:af:df:bb:23:59:2e:80:57:
da:7a:bc:83:21:a6:09:12:44:84:6d:fd:3d:fb:3a:7e:44:09:
ba:ba:c8:76:1c:12:9f:c4:91:f1:ba:58:73:26:06:8c:bc:82:
f5:ca:14:09:d1:76:84:dc:2b:d0:4b:6f:ca:9b:7d:2c:da:01:
81:33:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:51:34 2025 by rpki-client