Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/lQNPj8sY3sS0hmmjGHoiOGHH7wQ.roa
File: lQNPj8sY3sS0hmmjGHoiOGHH7wQ.roa (raw, json)
Hash identifier: N/4EZbE+TohDC1N5D66nmcA+EmAuNEgWV+tU+8eVbSE=
Subject key identifier: 95:03:4F:8F:CB:18:DE:C4:B4:86:69:A3:18:7A:22:38:61:C7:EF:04
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019470F670B39E45F732559B3CA496A5C146
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/lQNPj8sY3sS0hmmjGHoiOGHH7wQ.roa
Signing time: Thu 16 Jan 2025 21:13:06 +0000
ROA not before: Thu 16 Jan 2025 21:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:f6:70:b3:9e:45:f7:32:55:9b:3c:a4:96:a5:c1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 16 21:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95034f8fcb18dec4b48669a3187a223861c7ef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:51:37:d5:9d:e4:e9:eb:ef:d6:b2:b8:28:
76:64:94:63:e9:0b:7f:e8:9e:06:a5:de:9f:47:02:
c9:82:f4:bd:ea:06:dd:96:db:d6:6c:e9:f4:eb:30:
66:59:69:d6:ba:71:41:18:65:1b:ba:1e:49:45:fa:
c3:4d:a4:7d:42:1e:dd:40:e9:e0:8c:11:78:28:49:
2a:07:49:80:9e:30:4d:ef:eb:0b:ea:19:0b:68:57:
ba:47:f3:fa:d2:fd:d5:ca:f3:aa:ac:57:f7:2b:38:
b2:0a:9e:b1:e6:a7:fb:c0:81:4a:00:cb:e0:bf:18:
d1:58:5f:55:51:39:65:d4:80:6d:c4:49:ba:3b:1f:
86:ab:5b:39:2d:26:6d:a1:f8:49:26:92:0d:73:fa:
60:9e:70:9d:44:4f:6d:0c:f8:ab:30:fd:0d:57:ca:
19:75:7a:6d:f8:7c:27:f7:70:75:4f:8a:e1:92:66:
0e:dc:04:c1:a7:75:a4:4c:bc:61:e1:54:9f:e8:20:
74:50:ef:26:eb:5c:72:78:3a:38:c1:91:ad:41:9d:
40:fc:77:48:91:8e:df:4d:ba:ed:57:bf:65:5e:62:
d4:7d:ea:d9:37:aa:6a:dd:e1:25:52:34:7b:d5:de:
10:bb:a8:bf:d9:d0:75:5f:ce:17:2b:34:a8:52:6e:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:03:4F:8F:CB:18:DE:C4:B4:86:69:A3:18:7A:22:38:61:C7:EF:04
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/lQNPj8sY3sS0hmmjGHoiOGHH7wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.45.0-89.43.46.255
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
cc:37:ed:e0:68:37:3f:ba:bb:c2:23:01:8d:8d:6e:d2:e5:b6:
d1:eb:bb:91:43:ce:2a:d7:fd:b6:67:6e:31:57:93:48:f9:03:
f4:dc:42:d0:b2:b5:d8:ba:58:d3:c8:c3:0b:bc:49:20:02:6b:
cc:b0:83:e9:82:50:fe:02:81:c3:87:77:0c:32:13:a8:16:28:
77:04:a9:3e:19:f4:53:e0:00:f1:d5:0a:ad:f6:e7:ac:17:30:
f2:46:ba:7d:0c:9c:88:13:f9:49:1f:73:76:78:7a:df:8f:e9:
93:21:5d:0f:0b:b3:24:9b:86:15:c8:12:62:24:b5:72:76:7c:
f7:54:d4:19:5a:05:a5:b7:e8:a2:60:49:8e:fe:6a:1a:4e:6e:
66:c7:17:b3:67:83:29:91:76:e6:c7:9b:b9:0b:b6:98:11:91:
1a:3a:67:a3:08:a1:28:3c:28:84:7f:f0:53:1e:84:99:0a:b0:
d3:36:50:6b:98:c5:ad:f8:9e:3b:60:eb:74:57:3d:dd:05:1b:
10:00:ef:13:43:52:41:c1:52:c1:35:cd:96:f8:d6:dd:32:0e:
85:de:50:1e:0f:6a:56:32:b9:92:02:86:7b:b8:8e:57:cc:1d:
79:d9:61:8c:c2:e6:fa:49:5f:97:cc:07:4c:80:20:1b:a8:ef:
b2:f3:e9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:52 2025 by rpki-client