Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/noETuaSg2NDroaOeavuCacXZ46Y.roa
File: noETuaSg2NDroaOeavuCacXZ46Y.roa (raw, json)
Hash identifier: b3qjDiweWuBiwvD6HnnYy4jP/x089j6Z6nVSRAkDVKQ=
Subject key identifier: 9E:81:13:B9:A4:A0:D8:D0:EB:A1:A3:9E:6A:FB:82:69:C5:D9:E3:A6
Certificate issuer: /CN=e9bf904f418bfc7b49b85f3abdac417cca5e3759
Certificate serial: 018CC8DEA517F50911D38151989ECF669D98
Authority key identifier: E9:BF:90:4F:41:8B:FC:7B:49:B8:5F:3A:BD:AC:41:7C:CA:5E:37:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b-QT0GL_HtJuF86vaxBfMpeN1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/noETuaSg2NDroaOeavuCacXZ46Y.roa
Signing time: Tue 02 Jan 2024 06:31:23 +0000
ROA not before: Tue 02 Jan 2024 06:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8896
IP address blocks: 185.126.184.0/22 maxlen: 22
212.33.128.0/19 maxlen: 19
212.33.133.0/24 maxlen: 24
185.15.216.0/24 maxlen: 24
185.15.216.0/22 maxlen: 22
89.221.96.0/20 maxlen: 20
185.92.52.0/22 maxlen: 22
77.241.96.0/20 maxlen: 20
2a00:1e18::/29 maxlen: 29
2a00:1e18::/32 maxlen: 32
2a00:1e19::/32 maxlen: 32
2a00:1e1c:3000::/36 maxlen: 36
2a00:1e1c:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a5:17:f5:09:11:d3:81:51:98:9e:cf:66:9d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bf904f418bfc7b49b85f3abdac417cca5e3759
Validity
Not Before: Jan 2 06:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e8113b9a4a0d8d0eba1a39e6afb8269c5d9e3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:a4:63:af:a3:e8:a1:6c:a1:ac:1a:5e:c8:
ee:14:e6:44:6f:57:27:d2:57:f1:f2:57:39:19:a4:
f9:37:36:19:27:a9:5d:77:93:5a:5f:5f:34:24:31:
7b:92:a6:ff:d8:ba:8f:6f:92:58:c8:49:22:0f:9f:
56:d4:c7:9a:a9:da:41:d0:2c:5e:da:1f:b7:2a:76:
28:e7:ea:eb:95:a2:bd:52:19:99:7b:ff:0d:bd:ca:
30:fd:0d:46:f0:bb:03:9e:64:5c:dc:ef:8d:b1:b4:
4c:1b:53:da:35:fa:bc:2e:bd:bb:e1:e3:24:3a:cd:
e9:dc:fb:4f:15:53:5b:81:d9:4d:00:0d:dc:41:95:
bb:63:19:70:38:19:e5:2c:48:1d:fd:c7:3f:7f:d4:
bf:11:01:09:02:3e:69:de:0b:f0:d2:39:00:de:1b:
be:5a:b7:97:41:73:0f:f3:8e:00:d2:77:e1:bd:8c:
7d:28:49:54:48:97:09:9f:c7:60:24:eb:26:49:6a:
17:04:9c:90:55:fb:f3:ce:5e:a2:ce:c0:f6:9e:e7:
50:e7:e5:94:99:ef:a2:c9:57:54:9a:bc:71:77:a0:
88:56:5f:0e:b5:8c:63:37:62:93:f2:ad:ec:af:04:
4a:ae:81:0b:a0:09:e2:28:d8:b8:51:5f:5d:ab:2e:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:81:13:B9:A4:A0:D8:D0:EB:A1:A3:9E:6A:FB:82:69:C5:D9:E3:A6
X509v3 Authority Key Identifier:
keyid:E9:BF:90:4F:41:8B:FC:7B:49:B8:5F:3A:BD:AC:41:7C:CA:5E:37:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b-QT0GL_HtJuF86vaxBfMpeN1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/noETuaSg2NDroaOeavuCacXZ46Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/6b-QT0GL_HtJuF86vaxBfMpeN1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.96.0/20
89.221.96.0/20
185.15.216.0/22
185.92.52.0/22
185.126.184.0/22
212.33.128.0/19
IPv6:
2a00:1e18::/29
Signature Algorithm: sha256WithRSAEncryption
10:bf:63:3c:ee:ce:e9:59:6e:9e:2d:01:71:5c:7f:44:6c:f6:
10:99:bb:70:a7:81:ed:a1:7b:80:80:8f:6b:42:36:7a:b4:57:
ac:25:a8:a9:83:f3:51:ed:10:d7:b9:bf:4c:60:a3:d2:43:78:
b7:7a:fb:02:9b:08:13:f4:1b:7f:6e:9f:22:7e:e7:73:6f:03:
3f:15:41:f6:67:1c:24:3e:72:da:d3:70:6f:c9:ef:e5:ba:db:
c9:40:65:2b:fe:72:3e:3c:fa:f9:44:37:70:0c:e6:62:eb:bc:
5c:00:c7:c5:92:af:5c:31:a7:6e:39:ef:ec:b6:a8:e1:ce:5c:
54:25:cc:53:9d:d4:9b:7b:f4:ff:db:55:20:13:2a:b3:37:6c:
61:9c:4f:eb:8b:c7:71:f9:b0:14:14:a8:d4:3d:5b:00:08:e9:
f7:9a:6e:1f:d8:74:4d:89:8c:f6:b3:63:f9:14:77:ba:2a:d0:
cc:f9:fd:54:c9:96:41:25:9c:7b:55:02:ee:b0:45:dc:12:1e:
6d:42:61:17:63:75:01:20:35:02:9b:c4:0d:9e:92:31:cf:14:
af:c7:a8:49:51:47:21:67:4f:9a:b9:86:01:6d:93:ce:ae:85:
fd:16:52:70:c1:5c:b7:fb:28:9a:08:33:a8:74:e8:0f:e8:52:
12:4e:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:17:51 2025 by rpki-client