Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/oDuQtsfWsb20exJBO7QurYBeWk8.roa
File: oDuQtsfWsb20exJBO7QurYBeWk8.roa (raw, json)
Hash identifier: gEKk7yZspSpg2oEhPVCqnu3t/dgmJib8oW+i8A65aR0=
Subject key identifier: A0:3B:90:B6:C7:D6:B1:BD:B4:7B:12:41:3B:B4:2E:AD:80:5E:5A:4F
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019482BBB246F5D3766B5788B30BD49D9C31
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/oDuQtsfWsb20exJBO7QurYBeWk8.roa
Signing time: Mon 20 Jan 2025 08:02:06 +0000
ROA not before: Mon 20 Jan 2025 08:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202940
IP address blocks: 89.208.0.0/21 maxlen: 21
89.208.4.0/22 maxlen: 24
89.208.56.0/21 maxlen: 22
89.208.128.0/21 maxlen: 21
89.208.134.0/23 maxlen: 24
141.226.120.0/22 maxlen: 24
147.234.23.0/24 maxlen: 24
147.236.104.0/21 maxlen: 23
147.236.116.0/23 maxlen: 24
147.236.120.0/21 maxlen: 21
147.236.125.0/24 maxlen: 24
147.236.144.0/20 maxlen: 24
147.236.176.0/20 maxlen: 24
147.236.183.0/24 maxlen: 24
185.108.80.0/22 maxlen: 24
185.149.252.0/22 maxlen: 24
185.167.108.0/22 maxlen: 24
185.175.32.0/22 maxlen: 23
185.180.100.0/22 maxlen: 24
185.180.100.0/24 maxlen: 24
185.180.100.0/27 maxlen: 32
185.180.102.0/24 maxlen: 24
185.180.103.0/24 maxlen: 24
185.182.76.0/22 maxlen: 24
185.184.244.0/22 maxlen: 23
188.191.224.0/21 maxlen: 21
188.191.224.0/22 maxlen: 22
188.191.224.0/24 maxlen: 24
188.191.224.0/27 maxlen: 32
188.191.228.0/22 maxlen: 22
217.175.80.0/20 maxlen: 20
217.175.84.0/22 maxlen: 22
217.175.88.0/21 maxlen: 23
2a00:7c40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:bb:b2:46:f5:d3:76:6b:57:88:b3:0b:d4:9d:9c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jan 20 08:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a03b90b6c7d6b1bdb47b12413bb42ead805e5a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:bf:1a:ff:75:19:b2:f8:15:2a:b3:6c:36:
f8:ab:2a:18:fc:e8:f3:f8:d5:29:63:52:43:23:ee:
ea:42:b3:6b:f4:15:f4:62:f3:8f:2a:1f:40:7f:42:
ba:2c:e3:5f:2e:9a:67:88:62:31:86:cb:76:79:1d:
4f:2c:83:19:f7:fe:a7:f3:61:d7:4f:8d:ed:30:47:
97:84:13:19:ff:c1:d2:be:ca:03:0f:22:0f:8a:e7:
ca:2e:64:55:b5:1e:b5:35:d7:42:30:1b:59:40:29:
67:7a:ee:ec:b6:6d:09:b8:dc:fb:77:50:69:0c:b4:
26:f9:c6:69:74:2a:46:67:54:9d:bf:94:cb:32:e2:
e0:cc:4f:c7:9d:09:d4:2a:13:60:a5:7f:64:4c:54:
3c:fe:cd:dc:4e:a2:5c:35:5e:45:46:ce:c1:da:f0:
45:76:1d:07:eb:e2:87:0b:8b:a5:9e:64:0b:10:39:
70:27:67:57:f7:3a:01:b8:fb:eb:86:7e:03:8f:e7:
99:b6:38:dd:0b:4c:82:be:0c:63:ba:89:16:e3:b0:
20:99:10:8b:3d:67:fb:72:00:86:e5:62:c2:3d:0c:
cf:4f:f1:c0:12:98:a7:fd:03:02:54:fd:50:19:a8:
77:68:8c:79:cf:3f:05:8d:aa:39:64:33:d9:81:6d:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3B:90:B6:C7:D6:B1:BD:B4:7B:12:41:3B:B4:2E:AD:80:5E:5A:4F
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/oDuQtsfWsb20exJBO7QurYBeWk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.208.0.0/21
89.208.56.0/21
89.208.128.0/21
141.226.120.0/22
147.234.23.0/24
147.236.104.0/21
147.236.116.0/23
147.236.120.0/21
147.236.144.0/20
147.236.176.0/20
185.108.80.0/22
185.149.252.0/22
185.167.108.0/22
185.175.32.0/22
185.180.100.0/22
185.182.76.0/22
185.184.244.0/22
188.191.224.0/21
217.175.80.0/20
IPv6:
2a00:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
10:f5:96:c3:8d:e3:9e:64:db:53:aa:4e:fb:21:12:75:17:a5:
62:74:3a:f8:7f:7c:e8:b5:02:7f:bb:88:84:97:26:ae:7a:1e:
1b:6e:b9:14:93:a1:71:51:a8:0b:61:8d:70:37:db:dd:bb:f8:
cb:31:46:7a:79:9e:39:4f:7c:55:64:3c:6b:d1:05:32:d0:ef:
bb:d7:ad:25:e9:9e:28:6f:7f:4c:2f:ae:d2:90:ec:b0:b0:22:
18:e2:c9:25:15:8e:a0:2f:53:a9:54:54:66:b4:b3:77:10:a5:
92:f8:2b:f7:9d:2e:eb:ab:9b:11:70:18:ee:a2:9c:f5:a5:9e:
77:35:13:1d:ce:03:7d:01:7e:12:92:6d:e6:28:38:58:3b:6b:
d9:7d:f1:4e:71:b7:c6:bb:74:3f:52:72:6a:db:9c:9d:5c:5e:
fd:9e:bb:fe:0f:b6:a0:2f:0d:0a:73:ff:b1:13:25:16:df:4b:
17:fc:62:10:e2:23:5c:5c:7c:ef:0a:0b:f2:16:e1:18:43:3c:
7c:ec:3b:3c:6c:96:63:37:b6:38:b0:3b:18:d8:0a:df:62:56:
1b:2e:ac:f6:58:e1:c4:62:63:b2:f9:4f:0c:c3:a5:4f:6a:c0:
a9:e5:06:bb:46:bd:4a:41:3c:d2:d2:3e:e2:c9:1e:b5:89:72:
43:99:9c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:11 2025 by rpki-client