Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/O5dwSGpy0OL0LjPB3wap3UtIwjM.roa
File: O5dwSGpy0OL0LjPB3wap3UtIwjM.roa (raw, json)
Hash identifier: cR4roCPU2uE8JstXy3PNObd3k08fMc1QAFzMuYnt3oU=
Subject key identifier: 3B:97:70:48:6A:72:D0:E2:F4:2E:33:C1:DF:06:A9:DD:4B:48:C2:33
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 019426D9180E02362A0B3B848A8E503D2333
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/O5dwSGpy0OL0LjPB3wap3UtIwjM.roa
Signing time: Thu 02 Jan 2025 11:49:09 +0000
ROA not before: Thu 02 Jan 2025 11:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4913
IP address blocks: 93.190.185.0/24 maxlen: 24
93.190.186.0/24 maxlen: 24
93.190.187.0/24 maxlen: 24
93.190.188.0/24 maxlen: 24
93.190.189.0/24 maxlen: 24
93.190.190.0/24 maxlen: 24
109.71.185.0/24 maxlen: 24
109.71.186.0/24 maxlen: 24
109.71.187.0/24 maxlen: 24
109.71.188.0/24 maxlen: 24
109.71.189.0/24 maxlen: 24
109.71.190.0/24 maxlen: 24
185.28.84.0/24 maxlen: 24
185.28.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:18:0e:02:36:2a:0b:3b:84:8a:8e:50:3d:23:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Jan 2 11:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b9770486a72d0e2f42e33c1df06a9dd4b48c233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:de:1f:31:6e:b6:86:ff:d4:52:67:ef:29:
f8:53:2c:b6:50:b9:d6:82:60:35:f8:96:0c:05:66:
b8:39:6e:81:86:be:70:a2:b5:79:c6:98:ed:81:f4:
66:d9:8b:93:bb:a1:99:85:6c:c0:b7:e5:a4:06:5e:
77:1a:5b:8e:dc:b2:63:3a:0d:dd:8e:30:e2:95:43:
43:c9:2a:ab:08:8e:19:88:50:6c:f7:be:42:0d:0c:
84:8a:56:f8:15:43:20:5b:da:55:e7:ef:49:c7:59:
45:fb:ca:cb:f9:bd:e9:34:b5:e8:43:97:e5:84:49:
52:f5:90:8a:c4:55:2a:dd:b8:4a:eb:e2:36:a7:5b:
31:4e:13:fc:ea:c2:53:3e:4e:b6:a0:1e:92:6a:f5:
7b:7f:ce:1a:0e:62:bf:ca:c5:fb:a1:57:3b:d6:5c:
4f:3a:0e:81:95:56:63:61:d4:b8:06:d8:de:31:91:
23:81:51:cb:f9:ed:e8:5d:7b:52:e4:75:5a:2b:b0:
17:11:28:c4:cd:38:24:e7:e8:7a:00:fa:0b:79:89:
29:d8:74:2a:cc:b4:2e:e0:67:57:69:3d:e3:71:c6:
83:b3:96:40:71:e7:ac:38:7c:3a:d3:2a:4e:f8:d7:
bf:b2:a1:36:98:84:ed:ff:27:8f:07:a4:b7:30:1e:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:97:70:48:6A:72:D0:E2:F4:2E:33:C1:DF:06:A9:DD:4B:48:C2:33
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/O5dwSGpy0OL0LjPB3wap3UtIwjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.185.0-93.190.190.255
109.71.185.0-109.71.190.255
185.28.84.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:98:b2:d4:e9:e9:fc:a0:67:28:e5:ba:1a:74:d4:fb:8c:6c:
15:6e:ad:27:4f:ea:e2:89:ca:31:9b:65:9c:18:d7:bc:b6:0a:
3c:1f:c3:34:25:78:d3:44:16:e9:58:95:bf:85:d5:27:42:f8:
cf:69:9d:9c:d0:70:d3:59:f0:9c:7c:f4:1a:53:30:7c:66:1d:
fb:48:47:d2:d6:f9:4b:4b:07:fc:c7:97:66:4a:ed:0d:73:75:
d1:12:59:63:48:a4:fc:2a:30:5a:1d:43:99:86:c3:d7:0b:dd:
8a:1e:b6:d8:7b:a5:c9:c6:76:67:9d:8b:51:ba:c7:15:35:d0:
f6:c8:14:a9:df:f4:94:91:30:38:5e:a1:bc:97:63:a3:00:28:
70:d1:12:1d:d7:91:67:bf:c3:dc:b0:8d:76:02:af:55:40:7f:
26:34:62:c8:26:1f:85:c1:ba:28:de:99:66:d6:75:c1:26:ec:
0f:08:8b:94:f4:2d:57:61:15:1b:70:1f:45:2c:8b:50:77:1d:
19:81:37:6d:fb:ab:ea:d5:16:bc:c3:e0:ee:89:4c:2e:83:3a:
2d:51:eb:af:40:eb:7a:73:e5:f4:2d:0d:96:a4:8a:71:55:2e:
d0:7e:f8:a4:1e:8e:1a:4e:bf:e2:e2:c6:9d:aa:20:4c:23:5a:
ac:19:04:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:58:15 2025 by rpki-client