Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/e3IOwfjF-8eAeTAL3EwT6nBHS-E.roa
File: e3IOwfjF-8eAeTAL3EwT6nBHS-E.roa (raw, json)
Hash identifier: sNK3VReL8FHwJw8RpzkeryL3c/pppTqdejO+hjG+CQc=
Subject key identifier: 7B:72:0E:C1:F8:C5:FB:C7:80:79:30:0B:DC:4C:13:EA:70:47:4B:E1
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3AD825070824F8A89CD77571B803F
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/e3IOwfjF-8eAeTAL3EwT6nBHS-E.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 94.131.2.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.98.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.103.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.112.0/24 maxlen: 24
94.131.113.0/24 maxlen: 24
94.131.114.0/24 maxlen: 24
94.131.115.0/24 maxlen: 24
94.131.116.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
94.131.118.0/24 maxlen: 24
94.131.119.0/24 maxlen: 24
94.131.120.0/22 maxlen: 24
95.164.0.0/22 maxlen: 24
95.164.4.0/22 maxlen: 24
95.164.8.0/22 maxlen: 24
95.164.16.0/22 maxlen: 24
95.164.21.0/24 maxlen: 24
95.164.22.0/24 maxlen: 24
95.164.23.0/24 maxlen: 24
95.164.32.0/21 maxlen: 24
95.164.44.0/22 maxlen: 24
95.164.51.0/24 maxlen: 24
95.164.60.0/22 maxlen: 24
95.164.68.0/24 maxlen: 24
95.164.69.0/24 maxlen: 24
95.164.84.0/22 maxlen: 24
95.164.88.0/24 maxlen: 24
95.164.89.0/24 maxlen: 24
95.164.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ad:82:50:70:82:4f:8a:89:cd:77:57:1b:80:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b720ec1f8c5fbc78079300bdc4c13ea70474be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:b2:2b:25:7e:ca:74:af:ce:ba:0c:3d:b9:
ef:c7:bd:8c:d2:87:6e:61:2f:dc:91:d9:3e:53:bc:
08:3f:5b:a6:03:75:9f:39:5d:30:dc:62:db:d5:9c:
dd:f2:c0:a5:91:19:0f:f1:ef:1c:76:af:87:15:bd:
9f:39:bf:eb:e7:7f:b0:d2:c5:18:17:c2:d6:47:83:
f3:79:f9:09:e9:c9:83:0a:49:67:2d:fc:1a:bc:39:
d3:d3:f8:6c:10:b5:00:d8:09:d0:41:32:78:8c:c0:
28:6c:e5:68:41:3f:9a:32:4d:53:60:57:5f:c7:cf:
53:5e:d1:b7:d4:f7:57:ad:26:d1:e7:ed:cf:f4:ae:
47:a2:99:f1:08:3c:b5:d9:96:ce:b3:09:1f:e2:3a:
84:f3:79:97:00:f1:79:c4:2c:c1:9c:63:32:d8:90:
e4:42:c7:b6:8c:60:d2:4f:59:77:b3:75:9f:67:d0:
95:01:bd:19:fc:cc:1e:16:f3:e2:55:f3:c2:75:41:
bc:2c:6b:07:b9:e9:78:48:78:4d:2f:ae:27:9f:ee:
4f:7d:51:a2:43:11:23:e5:e6:dd:80:6f:7d:ea:c8:
2a:08:70:49:5b:d0:35:6c:b8:f8:a1:ef:d2:cc:60:
f2:f8:a7:ed:1a:02:86:f7:bf:59:44:a7:1a:2a:53:
23:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:72:0E:C1:F8:C5:FB:C7:80:79:30:0B:DC:4C:13:EA:70:47:4B:E1
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/e3IOwfjF-8eAeTAL3EwT6nBHS-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.2.0/23
94.131.96.0-94.131.123.255
95.164.0.0-95.164.11.255
95.164.16.0/22
95.164.21.0-95.164.23.255
95.164.32.0/21
95.164.44.0/22
95.164.51.0/24
95.164.60.0/22
95.164.68.0/23
95.164.84.0-95.164.89.255
95.164.112.0/21
Signature Algorithm: sha256WithRSAEncryption
46:ef:c8:c7:9d:c3:96:b6:ad:30:a4:47:4b:c5:ca:6f:b1:19:
c2:d7:77:cc:6d:9f:0d:81:8a:74:72:fa:af:e1:d8:12:5d:53:
d9:23:01:a7:66:cc:c0:97:02:18:d0:65:5c:f9:9d:58:47:bd:
79:91:3b:28:7e:7b:b4:63:a6:29:dd:54:6c:c7:cd:02:fc:5a:
25:d6:f5:79:9a:c9:56:00:d5:8b:a9:8f:07:84:45:ae:51:8c:
ea:0a:b0:a0:c0:a4:e6:6c:12:d6:e9:d5:92:d1:c0:ce:2a:5e:
8b:aa:9b:a3:93:09:41:47:18:30:bf:ec:6e:de:0e:01:0e:1e:
bd:0b:74:07:b1:82:97:74:c6:87:51:6c:b1:dc:92:c8:8d:cb:
ae:f0:c9:44:ed:89:5b:85:a0:11:dc:2e:44:7a:fb:5e:90:6b:
3f:5a:d8:91:f9:3a:09:eb:aa:33:8e:08:46:86:fe:91:b1:6d:
d3:e7:99:c6:53:8e:06:5c:ee:91:6f:7f:03:c2:ab:65:ba:66:
d9:28:0d:a1:e2:f0:6a:a1:d8:9b:55:6b:b8:5f:7c:2b:49:77:
f6:1b:7c:77:b9:8e:07:15:eb:13:fb:68:6d:ba:2f:78:8b:af:
55:ca:f0:23:53:e6:14:c3:e0:e7:b5:17:b0:71:5d:f8:25:88:
8c:47:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:08 2025 by rpki-client