Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa
File: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (raw, json)
Hash identifier: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=
Subject key identifier: EC:F0:F5:C0:88:23:AD:9F:53:F7:E7:D0:86:32:C5:52:B6:46:50:91
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 019424B26EF09EF3DE50CB2371767255E582
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa
Signing time: Thu 02 Jan 2025 01:47:41 +0000
ROA not before: Thu 02 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 89.206.64.0/18 maxlen: 18
130.60.0.0/16 maxlen: 16
185.207.116.0/24 maxlen: 24
185.207.117.0/24 maxlen: 24
185.207.118.0/23 maxlen: 24
192.12.247.0/24 maxlen: 24
192.41.132.0/22 maxlen: 22
192.41.136.0/24 maxlen: 24
2001:67c:16dc::/48 maxlen: 48
2a0b:2040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6e:f0:9e:f3:de:50:cb:23:71:76:72:55:e5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Jan 2 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecf0f5c08823ad9f53f7e7d08632c552b6465091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:f2:f2:a1:87:b6:c9:16:db:72:3a:37:55:
ca:df:72:31:20:e9:b6:9e:74:68:9f:7f:fa:4e:a5:
d9:1e:d8:f4:ad:75:6f:dc:40:f6:30:0e:49:53:83:
73:55:28:e9:fb:00:50:68:35:15:54:06:80:69:44:
fe:34:51:59:60:af:41:63:b3:d0:21:62:fa:32:a8:
6e:5e:e3:fd:81:ce:2e:17:d7:08:97:cb:c7:f8:96:
fa:1c:84:23:e9:3c:ac:c7:6c:b9:71:b5:69:d4:17:
55:bb:e3:07:60:ae:44:a8:76:fa:82:30:8b:62:82:
10:16:d5:b4:de:09:e8:6d:b7:c5:92:9d:ba:54:e7:
b0:99:bf:aa:4a:cd:25:7f:db:fe:83:67:0b:98:ee:
53:20:63:b2:7b:5a:96:e1:b0:ef:4e:7d:f8:e6:60:
ca:46:3c:a3:10:5a:24:94:97:f7:59:df:17:bb:8b:
6a:76:4f:d0:37:8e:77:5c:90:14:74:6d:f0:85:4b:
48:38:f3:a3:2d:84:a8:48:7d:89:cc:e7:36:ca:6f:
dd:78:7e:42:7f:fa:fe:cc:5d:b6:ee:bd:df:ff:6e:
a4:cc:d6:44:5b:ee:0b:48:34:38:b4:1e:4f:e5:e7:
ba:f4:8f:e5:a8:3d:3a:5d:04:f5:ca:ed:f2:b8:42:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F0:F5:C0:88:23:AD:9F:53:F7:E7:D0:86:32:C5:52:B6:46:50:91
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.206.64.0/18
130.60.0.0/16
185.207.116.0/22
192.12.247.0/24
192.41.132.0-192.41.136.255
IPv6:
2001:67c:16dc::/48
2a0b:2040::/29
Signature Algorithm: sha256WithRSAEncryption
ac:1d:5c:3c:5c:87:68:ba:61:a6:c1:b7:1f:45:8b:49:1f:fe:
01:37:ff:93:03:90:4c:c3:01:a3:2a:53:37:b0:8b:f0:dc:92:
c4:02:35:fe:d1:ae:28:30:9b:55:05:56:ce:0b:26:10:81:67:
fd:7f:f3:c0:6f:a8:90:c5:36:72:b8:c1:8b:c3:91:22:c8:aa:
af:10:f2:24:3d:b4:b0:ba:42:9b:38:3a:26:14:11:b7:33:77:
13:01:05:a6:b9:4f:a1:2d:16:2f:5a:e8:22:50:73:20:30:33:
4d:1e:ca:aa:f4:ea:5b:0b:ac:10:97:20:15:e7:ba:47:d5:2b:
b1:74:6e:07:08:55:50:61:2f:d8:c6:78:c9:bc:aa:b5:0b:d4:
21:b7:cc:01:c9:fe:27:c2:27:e6:23:d2:bf:a4:a6:76:9f:eb:
cc:11:aa:c0:4c:ec:a0:e2:96:d0:af:32:ba:38:34:8b:b6:6a:
8a:e1:3c:25:8d:56:f3:80:a9:39:d9:c1:0c:1b:67:fb:d6:ff:
7c:18:dd:c7:c8:c6:d9:8b:6e:6c:d0:a7:1a:77:0c:7e:c0:07:
04:dd:3a:cf:69:2d:be:7b:07:90:a2:e8:9e:67:c6:dc:46:cb:
11:1c:f2:48:b5:96:ec:72:78:46:f7:ad:77:1d:9a:4a:85:59:
eb:5d:8e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:19:17 2025 by rpki-client