Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/eFIvbNPOh4Zsd1micvCcj4DSkYc.roa
File: eFIvbNPOh4Zsd1micvCcj4DSkYc.roa (raw, json)
Hash identifier: ZIrJGrw98/Vg0Iqi3LtDi2GylEVNZe3Pb2ks19wPsN8=
Subject key identifier: 78:52:2F:6C:D3:CE:87:86:6C:77:59:A2:72:F0:9C:8F:80:D2:91:87
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 018384133AC40BF3961A69BD4840ACC3D058
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/eFIvbNPOh4Zsd1micvCcj4DSkYc.roa
Signing time: Wed 28 Sep 2022 12:29:56 +0000
ROA not before: Wed 28 Sep 2022 12:29:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 85.8.180.0/23 maxlen: 24
185.242.232.0/22 maxlen: 24
185.242.232.0/23 maxlen: 23
185.242.234.0/23 maxlen: 23
185.245.40.0/22 maxlen: 24
185.247.182.0/23 maxlen: 23
185.247.180.0/23 maxlen: 23
185.247.180.0/22 maxlen: 24
185.239.84.0/23 maxlen: 23
185.239.84.0/22 maxlen: 24
185.239.86.0/23 maxlen: 23
93.90.72.0/22 maxlen: 24
93.90.74.0/23 maxlen: 24
109.206.244.0/22 maxlen: 24
91.132.48.0/22 maxlen: 24
185.249.63.0/24 maxlen: 24
93.177.76.0/22 maxlen: 24
185.243.240.0/22 maxlen: 24
84.252.102.0/23 maxlen: 24
2a0c:f480::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:84:13:3a:c4:0b:f3:96:1a:69:bd:48:40:ac:c3:d0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Sep 28 12:29:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78522f6cd3ce87866c7759a272f09c8f80d29187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:ed:7f:64:ee:19:dc:9c:91:53:54:c2:d5:
23:35:28:fb:38:52:2e:60:c7:66:d3:c3:fd:34:61:
59:bf:ac:cd:aa:34:51:8c:93:55:bd:89:64:d9:91:
08:31:6b:f1:2f:81:95:94:c3:03:03:8d:f9:25:a9:
91:78:ad:68:54:fa:fe:28:4f:d0:20:72:0e:22:60:
25:03:05:cc:fe:7f:d1:ef:7b:2f:e0:47:ec:78:0c:
62:bc:16:9f:42:77:5d:0f:35:a6:1a:dc:f6:59:ec:
db:db:08:b3:ee:8f:ae:14:13:fd:06:02:eb:ae:fd:
2a:1a:c0:e7:4b:99:45:cd:23:c4:1c:9b:84:36:47:
59:22:3d:f3:ed:64:22:2f:59:ac:e6:fc:44:2c:71:
d5:7a:2b:32:d0:df:02:4b:56:b0:c3:a2:4b:72:5e:
66:0a:ab:dc:f5:f2:e2:3a:0f:1a:7e:19:34:9d:e1:
8c:67:26:b6:79:02:4f:aa:4f:e4:49:71:97:10:db:
fe:90:85:93:4a:ab:68:f7:84:98:10:44:f0:f7:b0:
0e:1e:b7:2a:34:1e:46:6b:00:e2:23:dc:81:6f:c6:
d5:63:e2:62:4c:0f:94:01:81:76:fe:d7:b3:ea:ab:
af:47:f5:ba:2a:67:df:ea:07:56:dc:6a:1b:00:90:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:52:2F:6C:D3:CE:87:86:6C:77:59:A2:72:F0:9C:8F:80:D2:91:87
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/eFIvbNPOh4Zsd1micvCcj4DSkYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.102.0/23
85.8.180.0/23
91.132.48.0/22
93.90.72.0/22
93.177.76.0/22
109.206.244.0/22
185.239.84.0/22
185.242.232.0/22
185.243.240.0/22
185.245.40.0/22
185.247.180.0/22
185.249.63.0/24
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
1b:36:29:63:a5:19:14:0a:ff:5a:3d:5f:20:4b:c9:95:1f:1f:
44:64:20:23:19:4c:58:ab:ff:18:6a:9e:cc:8a:cf:8d:39:94:
53:d9:30:b3:38:d6:8c:c8:ee:2e:40:2e:f7:a9:33:04:2f:d6:
49:6d:2a:a0:0e:7b:30:e8:c4:05:af:96:c8:e2:f0:13:7f:0d:
7b:37:7a:75:b1:e2:06:da:3d:9d:2f:78:bc:eb:63:d9:03:cf:
13:69:c2:13:73:f4:1a:c7:d9:52:b6:f5:9c:6b:11:5a:70:f8:
27:32:d4:4a:f5:28:7f:61:9c:4b:72:54:47:b3:7a:59:54:3d:
80:58:50:db:8b:25:a1:43:a3:0a:bc:9f:a8:0d:8a:fa:bc:4b:
9a:99:10:8b:2c:8f:86:2a:30:8d:f9:35:29:72:44:d7:71:ce:
e2:b4:db:a9:50:0a:e1:59:8c:e5:fb:9b:af:e6:97:a2:38:02:
e3:52:ac:b0:84:fa:38:a1:89:56:3f:ba:69:e0:66:85:9e:32:
e2:5b:9e:da:ff:1a:71:1f:db:35:06:c0:cc:b2:75:23:e2:7b:
47:a7:df:c1:af:a9:1f:5c:60:5d:16:35:54:54:cd:34:25:d0:
2f:61:d5:7b:42:26:3a:bd:f5:f6:1a:fc:e0:d0:e8:c7:22:fa:
d1:15:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:07 2025 by rpki-client