Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/3VEFDsHucPphc-vhhdl2MZbPquo.roa
File: 3VEFDsHucPphc-vhhdl2MZbPquo.roa (raw, json)
Hash identifier: mysOgAI+xCeZbgORwSANYxqCSmdlT4omoiVOrQ8hIN0=
Subject key identifier: DD:51:05:0E:C1:EE:70:FA:61:73:EB:E1:85:D9:76:31:96:CF:AA:EA
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018268B4EACC77BA3CF818AA5D7F1EA66B8B
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/3VEFDsHucPphc-vhhdl2MZbPquo.roa
Signing time: Thu 04 Aug 2022 11:54:23 +0000
ROA not before: Thu 04 Aug 2022 11:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31363
IP address blocks: 195.91.208.0/24 maxlen: 24
195.91.209.0/24 maxlen: 24
195.91.210.0/24 maxlen: 24
195.91.211.0/24 maxlen: 24
195.91.213.0/24 maxlen: 24
195.91.215.0/24 maxlen: 24
195.91.217.0/24 maxlen: 24
195.91.218.0/24 maxlen: 24
195.91.219.0/24 maxlen: 24
195.91.222.0/24 maxlen: 24
195.91.223.0/24 maxlen: 24
195.91.224.0/24 maxlen: 24
195.91.220.0/24 maxlen: 24
195.91.221.0/24 maxlen: 24
195.91.225.0/24 maxlen: 24
195.91.226.0/24 maxlen: 24
195.91.232.0/24 maxlen: 24
195.91.233.0/24 maxlen: 24
195.91.229.0/24 maxlen: 24
195.91.230.0/24 maxlen: 24
195.91.231.0/24 maxlen: 24
195.91.228.0/24 maxlen: 24
195.91.236.0/24 maxlen: 24
195.91.237.0/24 maxlen: 24
195.91.238.0/24 maxlen: 24
195.91.234.0/24 maxlen: 24
195.91.235.0/24 maxlen: 24
195.91.239.0/24 maxlen: 24
195.91.240.0/24 maxlen: 24
195.91.246.0/24 maxlen: 24
195.91.243.0/24 maxlen: 24
195.91.244.0/24 maxlen: 24
195.91.245.0/24 maxlen: 24
195.91.241.0/24 maxlen: 24
195.91.242.0/24 maxlen: 24
195.91.247.0/24 maxlen: 24
86.62.125.0/24 maxlen: 24
195.91.149.0/24 maxlen: 24
195.91.168.0/24 maxlen: 24
195.91.169.0/24 maxlen: 24
195.91.170.0/24 maxlen: 24
195.91.171.0/24 maxlen: 24
195.91.172.0/24 maxlen: 24
195.91.173.0/24 maxlen: 24
195.91.174.0/24 maxlen: 24
195.91.175.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:b4:ea:cc:77:ba:3c:f8:18:aa:5d:7f:1e:a6:6b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Aug 4 11:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd51050ec1ee70fa6173ebe185d9763196cfaaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:38:e6:2f:a3:7c:23:28:85:84:65:55:5e:b8:
00:85:81:02:c4:eb:2d:d0:f7:58:38:42:3d:78:c5:
c3:4a:a6:74:0b:3f:ba:03:45:9b:ce:9d:50:a2:c7:
55:3c:ad:be:e0:78:1f:3c:01:fd:75:24:8c:a1:4c:
56:47:08:7b:d1:57:80:37:6b:13:92:4d:3b:64:4e:
5b:8b:53:9b:d0:42:5b:a0:e2:35:9b:2e:b2:74:0f:
2a:78:e0:71:8f:25:62:6c:3b:fc:f0:e1:fc:e9:14:
bb:29:36:15:22:21:87:77:d7:b1:31:48:b4:73:34:
cd:17:6c:92:c3:44:be:9b:b2:fd:48:ad:aa:74:81:
a7:8b:64:e8:31:48:c2:53:e9:91:93:b2:33:2c:b5:
e2:f6:11:c9:97:8e:99:4d:33:58:e9:36:1c:3f:f4:
c6:ef:df:f3:af:5b:c6:be:a0:3e:50:2c:78:c2:b0:
db:29:5f:a9:c8:7e:58:99:1c:b3:79:ff:1d:65:9d:
55:63:8a:ab:dd:3b:b1:c4:0e:bf:d0:e6:a4:69:84:
e6:15:28:12:8e:9d:a9:a8:1b:a8:28:d7:05:35:74:
11:26:f6:9a:a5:84:ce:6e:11:1d:b7:3e:6e:f8:38:
3c:d4:f1:d1:b7:f0:c8:cf:1c:bd:81:9b:d7:10:4e:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:51:05:0E:C1:EE:70:FA:61:73:EB:E1:85:D9:76:31:96:CF:AA:EA
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/3VEFDsHucPphc-vhhdl2MZbPquo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.125.0/24
195.91.149.0/24
195.91.168.0/21
195.91.208.0/22
195.91.213.0/24
195.91.215.0/24
195.91.217.0-195.91.226.255
195.91.228.0-195.91.247.255
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
5e:fe:44:cf:2a:4e:dc:11:05:f1:cc:66:d0:aa:ac:75:2d:86:
5c:5d:cd:06:ab:22:5a:5d:32:17:59:ad:2a:2f:b4:c6:7c:4b:
5f:8e:09:19:32:23:2d:dc:fe:6b:fa:af:cc:2a:dd:c2:a3:80:
15:6c:5c:e8:8d:0e:a5:c7:1c:2f:e0:c2:00:0c:76:7d:b6:7a:
cb:e1:9f:60:99:55:36:29:70:9f:ee:48:a4:e3:ff:59:be:77:
94:ff:3b:18:7e:52:25:77:b3:0c:3a:04:d9:de:82:46:00:b2:
8d:32:b3:5a:b4:c3:39:89:4d:f0:cc:2e:79:07:28:13:1f:3c:
87:a1:2c:4e:f3:c4:ec:88:ad:32:d8:d3:2a:78:3a:49:df:b4:
a9:3e:a3:dc:fb:32:19:82:f0:ca:7a:1e:e0:14:b8:08:f9:3c:
3f:35:69:f2:2f:50:02:39:8a:fb:44:20:78:52:a1:b6:76:18:
23:87:d8:d1:68:41:bc:e9:af:23:28:1d:2f:91:e9:7f:07:03:
05:2b:de:24:ce:c8:25:28:27:f1:98:73:75:dd:64:cf:a7:30:
a0:9d:ce:3c:bc:db:c3:96:7d:9c:fd:a3:75:44:dd:d0:a9:82:
f4:9b:f6:8d:8b:de:21:23:fd:13:7e:ae:dc:e0:42:7f:22:7a:
8c:90:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:08 2025 by rpki-client