Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/q6dxHjXf_smDxFRqVKpoM4ZxcK0.roa
File: q6dxHjXf_smDxFRqVKpoM4ZxcK0.roa (raw, json)
Hash identifier: 2V/9T0djEJLIxLCP3ZW6UZqNaP1jJrToYR6Petpt72A=
Subject key identifier: AB:A7:71:1E:35:DF:FE:C9:83:C4:54:6A:54:AA:68:33:86:71:70:AD
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 0195CD660386D71D1475B676CAEBE759C2B1
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/q6dxHjXf_smDxFRqVKpoM4ZxcK0.roa
Signing time: Tue 25 Mar 2025 13:02:49 +0000
ROA not before: Tue 25 Mar 2025 13:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209281
IP address blocks: 93.115.196.0/22 maxlen: 22
137.59.56.0/23 maxlen: 23
185.20.108.0/22 maxlen: 22
185.107.0.0/22 maxlen: 22
185.216.188.0/23 maxlen: 23
185.216.188.0/24 maxlen: 24
185.216.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:66:03:86:d7:1d:14:75:b6:76:ca:eb:e7:59:c2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Mar 25 13:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aba7711e35dffec983c4546a54aa6833867170ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:dd:c0:9d:1c:da:ef:33:3f:d1:a1:6b:e8:
37:73:e7:99:8e:75:37:86:75:9c:27:16:ba:31:64:
13:51:77:07:5f:93:64:7a:b5:cd:e3:ef:44:29:bc:
e6:b9:da:a4:98:af:f4:8e:d1:59:ac:f9:43:03:fc:
26:3a:b4:d6:7d:44:b4:7c:05:bb:c7:6b:1b:c4:da:
8f:df:cd:37:b0:4e:34:f2:c6:ff:72:00:2d:59:f3:
f1:7a:5c:27:da:96:ac:03:57:ee:5b:9a:fa:20:10:
05:ab:a4:a9:4b:f3:9b:75:bc:05:fb:d3:8d:48:a6:
ad:4f:8a:43:32:17:90:00:2c:60:bb:d5:d2:71:b8:
96:c0:a1:7d:a4:5a:7d:43:09:2a:73:2f:97:9d:5d:
4a:fc:e7:53:2b:d9:0e:ac:ae:bf:67:3c:c3:ff:56:
3a:de:64:5b:21:32:6c:6e:3d:ec:ae:63:1e:11:f5:
8e:7b:27:a6:1c:0b:b8:f5:f4:8f:6c:07:f9:ec:f6:
d9:50:d9:c7:ed:85:3c:43:e7:1a:20:16:0f:ac:f2:
3a:fc:da:46:dc:39:b0:f1:dd:a3:0c:1b:39:c0:fa:
11:2b:e6:a4:09:22:65:cc:42:14:70:bd:35:1a:73:
c4:80:55:3a:a8:d4:96:0f:95:56:13:4b:58:f0:97:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A7:71:1E:35:DF:FE:C9:83:C4:54:6A:54:AA:68:33:86:71:70:AD
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/q6dxHjXf_smDxFRqVKpoM4ZxcK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
137.59.56.0/23
185.20.108.0/22
185.107.0.0/22
185.216.188.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:91:ae:4a:a6:e4:9b:dc:2e:4a:1e:cd:a2:2b:99:35:4f:41:
7f:e9:86:df:d9:4a:02:de:0a:94:58:3f:7e:93:52:0f:90:5f:
6b:d6:32:3d:0e:f5:a0:ab:f0:ec:42:62:3f:14:77:84:60:a6:
8d:18:96:23:3a:41:ae:1d:66:da:4f:2e:77:11:51:96:24:1a:
80:a1:50:38:12:35:5e:8b:af:38:f3:45:a3:f2:82:b9:b5:70:
11:3d:24:32:4b:40:53:f1:d9:79:fc:da:ec:47:4f:18:6e:79:
ca:0b:f3:78:04:85:49:68:26:15:c1:2b:d7:50:78:51:19:75:
75:5c:51:65:2c:ed:92:d6:ba:2c:92:08:df:6d:a9:aa:f6:e2:
23:09:9e:10:8a:2c:fc:a8:61:27:91:66:dc:d0:aa:5a:72:0d:
ef:02:bb:ae:eb:4e:48:9e:2a:9e:46:09:da:f7:71:17:88:7b:
f7:88:e8:ed:ce:72:69:93:fb:da:c5:85:66:a5:1b:76:82:e9:
a6:82:2a:4a:c7:73:ed:2b:92:14:03:d0:a6:50:9e:2a:4e:47:
d1:9e:6e:3d:1d:6d:75:e2:d5:a3:77:fb:16:8c:80:82:c5:7e:
f0:1e:b5:3b:89:8d:d1:ce:e2:c3:a8:77:da:ed:be:53:3c:6c:
bd:59:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:08 2025 by rpki-client