Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/f9tDxCRQQKiKVNZvFt7w9go0d-c.roa
File: f9tDxCRQQKiKVNZvFt7w9go0d-c.roa (raw, json)
Hash identifier: d1WfppTVopF+2HZlW475pWcypI5duCCHx+xEEJ6WcQg=
Subject key identifier: 7F:DB:43:C4:24:50:40:A8:8A:54:D6:6F:16:DE:F0:F6:0A:34:77:E7
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0194D5CBBE49A26D0E25E1A66A29138F80FA
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/f9tDxCRQQKiKVNZvFt7w9go0d-c.roa
Signing time: Wed 05 Feb 2025 11:08:06 +0000
ROA not before: Wed 05 Feb 2025 11:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:cb:be:49:a2:6d:0e:25:e1:a6:6a:29:13:8f:80:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Feb 5 11:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fdb43c4245040a88a54d66f16def0f60a3477e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:62:36:e2:f3:83:8b:6b:79:3e:60:42:54:
1d:46:17:4d:9c:e5:2b:37:e7:86:c8:e2:c9:27:37:
37:5a:8a:d5:e6:1a:75:09:ca:a3:bb:4a:45:49:69:
65:74:da:24:2e:55:c4:de:8a:dc:82:3e:d5:83:e8:
a6:ee:90:d7:fd:52:53:a7:b4:09:6f:1e:ce:35:ab:
38:e6:99:cb:cd:5d:33:0e:7c:99:04:27:34:55:b5:
04:3b:e9:56:99:7d:dc:b9:a1:ad:dd:1a:fd:6a:54:
32:a9:4b:e8:12:9b:ee:ad:40:72:d8:dc:19:3a:1b:
c1:95:33:bb:0f:c4:78:cf:86:88:3c:79:95:0b:76:
e8:11:3d:c3:f9:a8:af:d5:40:de:2a:c0:b4:8c:6a:
c7:30:d9:24:b7:6f:28:74:41:a8:d0:82:2a:f8:14:
ca:3f:b9:ff:6e:4a:25:42:e4:c1:ad:16:92:e4:64:
de:16:fe:56:2d:c1:df:c0:84:fe:ff:1e:1c:bc:9d:
bc:7e:cb:ef:f9:0b:8a:e5:4a:78:03:72:55:d2:50:
dc:eb:c3:dc:7a:b7:ad:da:fb:b8:cf:da:be:54:2b:
7d:f7:da:b9:04:b2:79:2c:29:28:14:b3:6a:3c:f2:
82:38:e3:9d:0d:5e:29:c0:d2:23:5c:c1:6e:69:e1:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DB:43:C4:24:50:40:A8:8A:54:D6:6F:16:DE:F0:F6:0A:34:77:E7
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/f9tDxCRQQKiKVNZvFt7w9go0d-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.46.0/24
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.215.95.0/24
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
8b:4f:ff:ce:2f:78:30:43:6e:70:1d:8b:d2:cd:fc:d9:8f:03:
da:15:3e:29:a7:43:e5:b3:a2:dd:b9:9a:91:57:2c:4a:56:8e:
ea:f4:86:9e:ef:c3:7d:cd:9c:9f:2a:c5:0d:f3:b2:31:e4:02:
a5:12:1f:97:6c:53:57:bd:d3:5c:aa:b7:5b:73:0d:56:61:4f:
8e:67:b4:77:32:25:ba:d2:8a:f8:27:86:56:a9:b9:bd:7b:38:
79:c2:50:59:44:50:94:c9:54:be:43:ca:6d:83:d3:96:33:d4:
37:0e:dc:b0:e7:f2:2a:f9:0e:e8:52:86:0f:df:28:36:e4:32:
2b:6c:32:de:79:b1:d7:17:ed:c5:e2:17:b2:c5:5c:e6:f1:ff:
cd:0e:d8:1e:98:96:b8:e7:82:d6:96:e0:71:cc:67:67:d7:4a:
8b:af:35:16:6b:37:2d:31:54:3a:da:2f:be:f1:fb:e4:98:26:
49:f9:9f:5b:14:ba:8f:41:52:75:3d:30:2c:57:94:9d:82:e9:
a5:4c:3f:8b:32:ca:49:bc:96:1d:76:3c:c0:c7:d7:ab:e9:4e:
07:62:16:6c:4f:e7:38:c5:95:8d:40:38:6d:9e:10:83:5e:e7:
78:da:ef:c9:3e:09:cd:15:49:75:f6:39:37:c8:52:34:5a:2b:
00:3f:1d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:56 2025 by rpki-client