Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/kLUvnXotktqFtjyxcAK1Pw-nDh4.roa
File: kLUvnXotktqFtjyxcAK1Pw-nDh4.roa (raw, json)
Hash identifier: 3ls5Vf/yyMJJwtft4XXLsF1cgkBLF2hXtx72vpzsv+E=
Subject key identifier: 90:B5:2F:9D:7A:2D:92:DA:85:B6:3C:B1:70:02:B5:3F:0F:A7:0E:1E
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0194A934063CBECD7E6C7406637EE6D5CFF1
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/kLUvnXotktqFtjyxcAK1Pw-nDh4.roa
Signing time: Mon 27 Jan 2025 19:19:06 +0000
ROA not before: Mon 27 Jan 2025 19:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a9:34:06:3c:be:cd:7e:6c:74:06:63:7e:e6:d5:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 27 19:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90b52f9d7a2d92da85b63cb17002b53f0fa70e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:ce:2a:0f:fd:ce:d8:81:f0:99:f9:62:13:
e7:5f:56:1d:4a:d2:c6:ce:b6:f8:df:5a:ec:da:67:
bc:f0:81:37:ab:2c:a9:7d:e6:10:7d:d0:f1:aa:8b:
ef:28:2a:e0:b0:f3:db:29:c1:9a:03:4f:89:cd:3c:
af:ce:10:d7:33:df:9d:4e:41:96:e7:c5:9f:40:57:
1a:d5:dc:79:35:ec:62:81:d5:fa:62:13:26:4a:f9:
51:ff:67:72:4f:31:f5:59:54:7c:8e:4b:a6:08:25:
be:3f:1f:ab:ff:8a:5b:6b:b2:ba:2f:3f:c7:b0:a1:
4f:d0:b6:13:e5:d7:d2:bd:2c:49:07:01:71:f5:6a:
c0:90:49:49:28:35:2a:7f:83:47:30:ec:a2:7b:23:
56:0b:7f:05:78:45:9d:06:53:3f:b6:50:c0:81:71:
17:1a:97:c6:f0:8b:c5:97:d1:be:72:8d:26:95:4c:
33:4f:b2:b8:72:f8:bb:3b:c6:f2:55:1c:4d:fc:4d:
38:56:32:b1:b3:9e:fc:f7:e9:73:23:24:f3:c0:35:
3a:0f:b3:31:3c:f1:44:76:e7:53:b8:1b:50:de:1c:
5e:6d:ca:2c:91:0a:ad:d4:d7:04:4d:c5:67:b7:1c:
ac:e6:f4:dc:8d:7c:eb:78:c5:f3:04:8d:40:fd:ed:
f3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B5:2F:9D:7A:2D:92:DA:85:B6:3C:B1:70:02:B5:3F:0F:A7:0E:1E
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/kLUvnXotktqFtjyxcAK1Pw-nDh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.46.0/24
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
96:08:6d:a1:fe:c9:8e:74:5e:33:c4:bb:f7:fa:df:25:a5:d3:
d5:29:2b:df:41:3c:ab:86:1a:39:81:b9:d7:25:fd:9b:c0:f2:
87:b9:70:ed:55:7b:e8:24:87:17:6a:ea:11:ea:ec:d4:d4:27:
7b:62:ff:ea:76:74:c0:f4:5e:d7:d6:0e:b2:f9:9d:67:29:7d:
18:8b:e7:20:34:0f:dd:9d:63:63:fb:ad:0b:40:1b:22:72:b8:
44:4c:8b:0b:c5:1e:fe:10:fd:f3:3e:80:ab:d6:ca:d7:f6:4b:
59:9a:2c:d7:0f:9c:7c:71:41:3a:84:85:e2:59:66:5c:29:b8:
2c:de:c1:58:b7:a2:21:68:82:a0:39:a6:fb:ab:f2:c9:ed:d7:
f7:8b:0d:29:b8:64:2e:fc:9d:88:bb:fd:8e:7a:0a:d8:f3:c8:
ac:01:73:4b:cb:5c:20:aa:83:4f:d5:9b:17:85:2a:f6:35:cc:
dd:90:9e:3c:9b:f7:4a:e3:f8:d5:85:01:0f:bb:ee:df:e1:bd:
27:3a:17:71:40:20:99:6d:63:00:61:e3:ef:ce:38:3b:a6:b5:
18:66:cb:4c:a0:bb:74:c5:fd:aa:49:9c:c3:55:31:8b:57:70:
0e:ca:ce:a7:eb:0c:0b:8f:ba:24:42:f6:5a:f7:b9:09:ed:21:
50:43:39:ba
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZSpNAY8vs1+bHQGY37m1c/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjUwMTI3MTkxOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGI1MmY5ZDdhMmQ5MmRhODViNjNjYjE3MDAyYjUzZjBmYTcwZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi/OKg/9ztiB8Jn5YhPnX1YdStLG
zrb431rs2me88IE3qyypfeYQfdDxqovvKCrgsPPbKcGaA0+JzTyvzhDXM9+dTkGW
58WfQFca1dx5NexigdX6YhMmSvlR/2dyTzH1WVR8jkumCCW+Px+r/4pba7K6Lz/H
sKFP0LYT5dfSvSxJBwFx9WrAkElJKDUqf4NHMOyieyNWC38FeEWdBlM/tlDAgXEX
GpfG8IvFl9G+co0mlUwzT7K4cvi7O8byVRxN/E04VjKxs5789+lzIyTzwDU6D7Mx
PPFEdudTuBtQ3hxebcoskQqt1NcETcVntxys5vTcjXzreMXzBI1A/e3zkQIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFJC1L516LZLahbY8sXACtT8Ppw4eMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEva0xVdm5Yb3RrdHFGdGp5eGNBSzFQdy1uRGg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBUBAIAATBOAwQAVcx9AwQA
VmpoAwQDWSIIAwQAWSWIAwQAWSsuAwQAWSzRAwQAXXGeAwQAXXI3AwQAXXJjAwQA
XXKrAwQAvNUSAwQBvNdIAwQAvPAOMA8EAgACMAkDBwAqBbaAAAEwDQYJKoZIhvcN
AQELBQADggEBAJYIbaH+yY50XjPEu/f63yWl09UpK99BPKuGGjmBudcl/ZvA8oe5
cO1Ve+gkhxdq6hHq7NTUJ3ti/+p2dMD0XtfWDrL5nWcpfRiL5yA0D92dY2P7rQtA
GyJyuERMiwvFHv4Q/fM+gKvWytf2S1maLNcPnHxxQTqEheJZZlwpuCzewVi3oiFo
gqA5pvur8snt1/eLDSm4ZC78nYi7/Y56CtjzyKwBc0vLXCCqg0/VmxeFKvY1zN2Q
njyb90rj+NWFAQ+77t/hvSc6F3FAIJltYwBh4+/OODumtRhmy0ygu3TF/apJnMNV
MYtXcA7KzqfrDAuPuiRC9lr3uQntIVBDObo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:46 2025 by rpki-client