Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/igP4iEXQkdOSy1H8V2yuMcFxssY.roa
File: igP4iEXQkdOSy1H8V2yuMcFxssY.roa (raw, json)
Hash identifier: dmwf5RqAO/7wKGzEmXNLoZOKMre4WWzc9d0X9X4hs+0=
Subject key identifier: 8A:03:F8:88:45:D0:91:D3:92:CB:51:FC:57:6C:AE:31:C1:71:B2:C6
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0194DEDF57F104A882778A9895C1B2D65F37
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/igP4iEXQkdOSy1H8V2yuMcFxssY.roa
Signing time: Fri 07 Feb 2025 05:26:06 +0000
ROA not before: Fri 07 Feb 2025 05:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39442
IP address blocks: 92.39.104.0/21 maxlen: 21
185.125.72.0/22 maxlen: 22
185.183.48.0/22 maxlen: 22
185.183.48.0/23 maxlen: 23
188.247.32.0/19 maxlen: 19
188.247.40.0/24 maxlen: 24
188.247.44.0/22 maxlen: 22
188.247.44.0/24 maxlen: 24
188.247.55.0/24 maxlen: 24
188.247.56.0/21 maxlen: 21
213.234.0.0/20 maxlen: 20
213.234.0.0/24 maxlen: 24
213.234.1.0/24 maxlen: 24
213.234.5.0/24 maxlen: 24
213.234.6.0/24 maxlen: 24
213.234.8.0/24 maxlen: 24
213.234.10.0/24 maxlen: 24
213.234.11.0/24 maxlen: 24
213.234.16.0/21 maxlen: 21
213.234.16.0/22 maxlen: 22
213.234.16.0/24 maxlen: 24
213.234.18.0/23 maxlen: 23
213.234.20.0/24 maxlen: 24
213.234.21.0/24 maxlen: 24
213.234.22.0/24 maxlen: 24
217.149.176.0/20 maxlen: 20
217.149.176.0/21 maxlen: 21
217.149.176.0/22 maxlen: 22
217.149.181.0/24 maxlen: 24
217.149.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:de:df:57:f1:04:a8:82:77:8a:98:95:c1:b2:d6:5f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Feb 7 05:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a03f88845d091d392cb51fc576cae31c171b2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:38:04:57:59:d0:77:bb:17:28:c6:ef:11:
3d:73:4f:3d:d3:3c:9f:b3:41:08:2b:63:43:68:f6:
e4:2c:84:04:0c:29:cf:7d:f8:41:80:8a:d6:4a:70:
61:cd:a2:82:21:d1:33:f1:5d:e2:57:9f:37:65:68:
fd:59:54:c0:a8:06:3e:38:a8:e6:c2:8b:ae:bf:80:
12:ad:5f:55:70:3a:ed:f8:4a:ee:34:5a:5c:4b:0a:
19:b2:f7:89:7f:62:fd:84:18:85:8c:d2:a9:b7:f5:
1f:5a:65:16:eb:41:58:aa:dc:92:d3:29:c1:3d:df:
94:b9:ef:14:6e:4d:b7:25:05:bb:46:d3:63:04:c2:
3c:4f:af:1f:d7:d0:fc:be:80:59:e0:54:53:56:ff:
79:79:2c:2d:0d:5a:97:34:2a:2b:2d:f8:28:fe:04:
ce:2f:47:a2:12:6b:c1:97:d9:dc:12:5f:eb:44:d2:
1c:8f:a9:a5:40:f6:2c:4b:84:05:00:56:ad:37:37:
6b:3f:80:3f:2f:e5:ea:ad:e0:38:7c:d4:f0:6e:aa:
f0:88:8f:e1:93:75:5e:74:96:3b:f0:b9:c0:c0:30:
af:3b:c0:28:aa:b8:eb:f2:67:4e:99:bd:f7:b7:33:
80:7a:bb:f7:46:06:44:03:f6:62:f9:80:eb:95:29:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:03:F8:88:45:D0:91:D3:92:CB:51:FC:57:6C:AE:31:C1:71:B2:C6
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/igP4iEXQkdOSy1H8V2yuMcFxssY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.104.0/21
185.125.72.0/22
185.183.48.0/22
188.247.32.0/19
213.234.0.0-213.234.23.255
217.149.176.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:72:09:38:e4:d0:21:1a:07:c0:38:23:57:30:51:b5:e8:0f:
9f:46:bf:b6:f6:f2:3f:56:50:fd:95:cc:cf:be:ad:f0:57:fe:
18:62:c2:46:3c:98:68:55:6c:2d:ff:40:76:d8:dd:02:21:a2:
6a:76:e1:ba:58:63:cd:20:36:eb:19:56:25:4b:fd:76:a6:24:
80:58:13:be:94:b3:73:1c:b9:88:bb:cb:b4:1a:0a:04:b7:86:
ad:42:46:31:ec:74:19:91:cc:f6:53:56:a9:43:c0:34:fa:d3:
fd:f2:46:aa:cd:2b:4a:ba:8c:0b:94:d1:d2:db:e5:75:d8:08:
bc:19:a3:0c:52:2b:73:5f:b0:6b:08:f4:88:8e:8b:a7:08:fb:
a3:b1:98:8b:f8:ba:ea:2f:16:48:e1:59:33:a2:6b:f8:38:d8:
22:76:fd:55:0f:d7:0f:eb:5c:20:1a:b9:5c:8c:f0:71:5e:a6:
5f:4c:1f:bf:64:e3:76:06:4b:a4:2c:a3:44:00:05:a6:49:c8:
cd:bd:34:5a:09:27:91:fb:77:24:88:7a:f5:4a:12:b5:08:59:
f4:93:61:c8:37:b1:da:d0:af:5e:55:6c:6c:b9:32:8d:01:d5:
eb:5c:af:97:2e:88:9c:5e:57:09:ba:89:65:4a:57:84:cb:8a:
26:39:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:46:38 2025 by rpki-client