Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/dG9V9FkdB-yoTg69h24jMFWlplg.roa
File: dG9V9FkdB-yoTg69h24jMFWlplg.roa (raw, json)
Hash identifier: z3TfWPhGYaeThejN1Fr20sRNu+LmgKA73SX64wdErMw=
Subject key identifier: 74:6F:55:F4:59:1D:07:EC:A8:4E:0E:BD:87:6E:23:30:55:A5:A6:58
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0194DB49FC034089DE989C88292BF2A8F5E4
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/dG9V9FkdB-yoTg69h24jMFWlplg.roa
Signing time: Thu 06 Feb 2025 12:44:06 +0000
ROA not before: Thu 06 Feb 2025 12:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39442
IP address blocks: 92.39.104.0/21 maxlen: 21
185.125.72.0/22 maxlen: 22
185.183.48.0/22 maxlen: 22
185.183.48.0/23 maxlen: 23
188.247.32.0/19 maxlen: 19
188.247.40.0/24 maxlen: 24
188.247.44.0/22 maxlen: 22
188.247.44.0/24 maxlen: 24
188.247.55.0/24 maxlen: 24
188.247.56.0/21 maxlen: 21
213.234.0.0/20 maxlen: 20
213.234.0.0/24 maxlen: 24
213.234.1.0/24 maxlen: 24
213.234.5.0/24 maxlen: 24
213.234.6.0/24 maxlen: 24
213.234.8.0/24 maxlen: 24
213.234.10.0/24 maxlen: 24
213.234.11.0/24 maxlen: 24
213.234.16.0/21 maxlen: 21
213.234.16.0/22 maxlen: 22
213.234.16.0/24 maxlen: 24
213.234.18.0/23 maxlen: 23
213.234.20.0/24 maxlen: 24
213.234.21.0/24 maxlen: 24
213.234.22.0/24 maxlen: 24
217.149.176.0/20 maxlen: 20
217.149.176.0/22 maxlen: 22
217.149.181.0/24 maxlen: 24
217.149.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:49:fc:03:40:89:de:98:9c:88:29:2b:f2:a8:f5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Feb 6 12:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=746f55f4591d07eca84e0ebd876e233055a5a658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:6a:a5:ce:c4:97:f1:5f:14:59:27:5d:11:
67:68:50:72:dd:0a:94:f1:d4:84:ef:b7:f9:5b:18:
6f:eb:18:c5:8f:82:fa:0b:80:f9:5c:bb:e8:74:b6:
cb:15:b6:d0:17:26:00:4b:f9:b2:45:bd:a3:b0:29:
31:f8:08:12:be:ae:b8:db:b5:23:5f:cb:2c:71:ac:
ae:79:8d:b0:1c:f4:cb:ad:a4:b5:0d:0c:59:1b:0e:
82:3c:07:7f:0a:b9:3b:b3:f0:ad:ce:3c:b2:10:b2:
0f:e4:b2:1b:93:c4:38:36:b5:98:d7:1e:26:43:77:
cd:04:c2:e4:6a:48:23:c6:e8:72:fe:7c:a7:5d:9f:
a6:0d:30:64:da:2f:0a:95:d9:e7:fe:b1:fc:e1:3c:
29:70:75:2b:d0:c8:6b:10:04:0e:7c:b0:f8:e7:29:
9e:4b:3a:ae:df:e0:04:66:3e:99:f6:39:06:59:05:
42:f0:b6:b6:a9:de:e4:b0:ec:0a:29:99:9b:46:80:
d1:92:cd:17:b5:25:ac:18:96:a3:5e:eb:15:ae:cd:
3a:e0:b1:47:43:33:9c:49:77:09:76:4c:36:d1:6c:
23:47:4e:32:f2:07:c0:04:a1:b6:40:a9:d4:57:0a:
65:3b:1a:b1:ff:45:f9:bd:1c:b4:b1:6c:8d:bd:c3:
1a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:55:F4:59:1D:07:EC:A8:4E:0E:BD:87:6E:23:30:55:A5:A6:58
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/dG9V9FkdB-yoTg69h24jMFWlplg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.104.0/21
185.125.72.0/22
185.183.48.0/22
188.247.32.0/19
213.234.0.0-213.234.23.255
217.149.176.0/20
Signature Algorithm: sha256WithRSAEncryption
40:dc:2e:b9:d9:eb:12:f4:1f:02:39:be:18:1b:58:70:d1:78:
ab:ba:69:32:e6:5f:76:6b:05:57:d2:1e:bd:7d:2c:43:22:a6:
5e:1e:1e:2d:45:93:00:75:cc:ec:8b:5b:67:aa:1c:f8:13:eb:
0a:01:ee:f6:e3:45:e4:92:9a:95:d2:2a:ee:16:34:14:a3:b9:
50:da:3f:76:82:22:66:4c:c4:76:9c:bc:4e:9c:0b:45:43:9f:
e9:05:90:56:65:5b:f3:c4:5d:48:ce:90:50:07:00:ad:04:e6:
6b:15:b5:6e:48:60:a2:1d:1e:54:73:48:07:53:a2:93:d7:a1:
4d:d6:64:b3:d7:4a:56:01:29:47:d3:b1:6b:41:a2:95:bd:c1:
e1:8a:8f:9c:e1:ca:94:9e:8c:06:46:71:9a:77:b1:ad:1e:7c:
e8:e2:18:11:2e:e2:06:36:0c:b9:c8:b9:48:76:97:8b:d7:d5:
bc:d5:74:84:47:fa:43:d3:d1:49:03:58:55:6a:bf:ad:c9:81:
3d:ef:70:36:f9:52:80:3d:7e:42:51:15:26:aa:27:92:d2:bb:
c9:d3:d1:40:86:1d:42:54:8b:0e:67:43:db:75:ae:8f:10:dc:
7d:7e:36:2d:34:f0:28:42:68:72:79:ec:53:b2:e2:98:54:74:
f4:84:f1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:43:36 2025 by rpki-client