Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qENGYYQooqGwFbAC63azjQoEUss.roa
File: qENGYYQooqGwFbAC63azjQoEUss.roa (raw, json)
Hash identifier: Z0DCcoIhRr5AVBhj7K0PPzNOjsbmL5FN5LBsvSeYtx0=
Subject key identifier: A8:43:46:61:84:28:A2:A1:B0:15:B0:02:EB:76:B3:8D:0A:04:52:CB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01953D2AFFF89DCA36F796E978EE40606459
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qENGYYQooqGwFbAC63azjQoEUss.roa
Signing time: Tue 25 Feb 2025 12:53:03 +0000
ROA not before: Tue 25 Feb 2025 12:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 82.152.142.0/24 maxlen: 24
82.153.220.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.123.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
213.210.52.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:2a:ff:f8:9d:ca:36:f7:96:e9:78:ee:40:60:64:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 25 12:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a84346618428a2a1b015b002eb76b38d0a0452cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:00:10:ce:f3:a9:52:4d:fe:0a:b2:da:45:
6f:37:d5:15:c5:8c:45:79:38:83:6d:26:c8:dd:84:
18:60:5a:bd:7a:30:43:b0:d1:53:89:2a:ee:fd:9f:
24:fd:a4:e6:17:87:32:13:27:a1:b3:ec:a6:30:92:
ec:cf:f5:ec:10:9b:c6:c4:34:13:4f:53:d6:ec:bb:
f8:f1:94:89:6c:eb:ba:78:51:ff:a1:65:49:2d:02:
2f:1b:86:40:20:75:86:75:d1:e5:fe:83:cd:32:b8:
c3:05:e9:26:36:ab:c5:48:65:14:05:c3:75:86:81:
b4:44:af:10:df:1f:15:8b:13:d4:1b:7e:4a:83:35:
45:a3:87:ef:af:5b:cd:39:16:07:29:89:92:e3:43:
21:cb:d6:87:1f:90:3d:84:21:02:f3:fc:75:4a:a5:
82:5b:52:46:81:43:df:59:b3:e9:d0:5b:25:9c:ce:
12:44:40:57:c4:6b:de:43:2f:59:2b:10:7e:e3:6e:
d2:d3:58:26:33:99:84:47:0e:59:11:59:e0:13:88:
39:e7:27:6b:89:19:33:bc:03:b5:fa:43:52:01:a1:
9a:bc:32:be:b4:df:ff:dc:15:46:a8:34:0c:8b:1f:
c1:13:0b:f5:17:76:a3:42:67:ab:01:d4:e9:0f:ba:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:46:61:84:28:A2:A1:B0:15:B0:02:EB:76:B3:8D:0A:04:52:CB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qENGYYQooqGwFbAC63azjQoEUss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.142.0/24
82.153.220.0/24
89.213.104.0/24
89.213.123.0/24
109.176.14.0/24
212.38.81.0/24
213.210.52.0/23
213.218.239.0/24
217.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:84:03:c7:90:01:4b:69:3b:b7:47:ef:a7:6f:6e:38:43:8a:
7d:80:90:37:e7:df:81:33:e1:96:29:6b:93:4b:7b:39:5b:08:
dc:90:be:6c:87:98:66:af:f8:b9:cc:e2:23:92:28:42:fe:1e:
0a:57:79:9d:b3:f0:4e:64:ff:5f:4b:e4:b2:ab:d8:e0:fe:ff:
57:e6:5b:60:c3:e0:5e:7e:22:1a:1e:59:46:df:7e:8e:b1:b9:
a9:98:5f:0e:08:6d:32:36:37:50:d7:ef:61:98:72:55:7b:d5:
6a:22:5c:7a:ac:a0:80:52:e2:51:a5:e3:db:4d:8a:05:ee:0b:
02:3d:82:fb:65:b7:53:98:39:29:28:5a:11:8c:f3:cd:38:87:
b9:af:b8:92:8f:23:0c:9f:63:0e:5d:56:c7:e6:5d:11:02:dd:
e3:30:30:5e:d2:25:4f:aa:a9:25:7f:31:7c:f5:eb:71:fa:b1:
3a:32:c9:11:2b:fa:01:c5:5c:36:6a:40:24:d3:94:a9:8e:d8:
90:93:66:d0:97:92:75:5a:17:5d:85:a4:c8:f5:5c:5a:b6:c7:
c6:25:fe:09:24:5f:5d:7b:b6:43:b1:a6:0c:ec:fb:d4:e5:4c:
63:c4:d9:a5:9d:0f:d0:4a:46:97:74:25:91:c9:98:21:0c:bc:
bc:bf:b4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:53:22 2025 by rpki-client