Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/1e2jF7yI-V3kszCcFeMjrO9sV4A.roa
File: 1e2jF7yI-V3kszCcFeMjrO9sV4A.roa (raw, json)
Hash identifier: NXI+yM0S1fIgaS4X7j5/COWZsW0T/B2dJ4TvosO5tMI=
Subject key identifier: D5:ED:A3:17:BC:88:F9:5D:E4:B3:30:9C:15:E3:23:AC:EF:6C:57:80
Certificate issuer: /CN=81891b261c62dabf777e552eb5ec27d77e484139
Certificate serial: 018262B01E8673C5A9792D2EBA1C81335F31
Authority key identifier: 81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/1e2jF7yI-V3kszCcFeMjrO9sV4A.roa
Signing time: Wed 03 Aug 2022 07:51:25 +0000
ROA not before: Wed 03 Aug 2022 07:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201337
IP address blocks: 86.105.31.0/24 maxlen: 24
86.105.28.0/24 maxlen: 24
89.47.7.0/24 maxlen: 24
89.47.6.0/24 maxlen: 24
195.82.122.0/24 maxlen: 24
188.240.204.0/24 maxlen: 24
195.82.120.0/24 maxlen: 24
195.82.121.0/24 maxlen: 24
188.240.205.0/24 maxlen: 24
188.240.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:b0:1e:86:73:c5:a9:79:2d:2e:ba:1c:81:33:5f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81891b261c62dabf777e552eb5ec27d77e484139
Validity
Not Before: Aug 3 07:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5eda317bc88f95de4b3309c15e323acef6c5780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:40:b6:7c:a1:5f:5b:0b:d8:88:97:c1:c9:
34:58:4b:fc:fc:91:24:15:af:ce:53:cf:7a:c0:26:
3e:e2:30:af:d2:a8:ec:89:0a:03:b0:fe:d8:2b:74:
0d:65:2f:7c:c4:83:20:fd:e2:29:c2:50:2e:71:c9:
13:51:30:a4:90:f7:fc:c7:1c:1f:4a:b2:32:81:d9:
da:b3:ee:f9:65:fe:f3:4f:ff:58:a0:3a:01:cb:4b:
82:0c:43:b3:c3:e1:ae:9e:ff:8a:43:2a:66:8b:a8:
c7:9e:a3:cd:e6:8a:ac:0a:6f:52:b8:7d:f5:d3:38:
ed:68:77:e3:b6:52:ba:7c:37:7b:02:94:05:22:b8:
c6:85:16:d1:e1:40:e0:dc:05:47:2f:ca:14:3d:ae:
7c:cd:c1:7f:30:e9:27:3e:16:a3:c5:5e:b5:7d:12:
65:c4:79:51:14:de:65:dd:ba:b2:86:70:78:ae:c3:
6c:30:22:68:7a:05:9e:f5:57:64:bf:bb:0e:9a:c9:
92:7c:49:b2:6e:03:95:5b:86:1d:f6:4e:0b:43:bf:
de:2f:f4:35:68:52:75:eb:ce:29:68:4b:b0:cc:d2:
b0:a3:94:17:0e:be:6f:c9:69:cf:49:ed:97:5b:64:
b7:09:90:90:70:c5:f3:af:91:a8:24:67:4f:24:78:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:ED:A3:17:BC:88:F9:5D:E4:B3:30:9C:15:E3:23:AC:EF:6C:57:80
X509v3 Authority Key Identifier:
keyid:81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/1e2jF7yI-V3kszCcFeMjrO9sV4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.28.0/24
86.105.31.0/24
89.47.6.0/23
188.240.204.0-188.240.206.255
195.82.120.0-195.82.122.255
Signature Algorithm: sha256WithRSAEncryption
7c:f8:f5:6f:a3:57:22:db:a0:c9:97:76:fb:b4:2f:da:a9:e4:
54:91:f3:a5:f8:99:ee:56:e7:c8:94:ac:a8:3e:1b:a9:07:a1:
14:b3:ef:fa:20:41:bd:73:ca:b0:5e:f9:de:a4:46:4f:da:29:
87:4f:28:80:8f:a9:73:bd:0c:c8:ee:82:66:63:97:e4:a3:a8:
2c:ba:eb:35:c6:2a:9b:77:35:e4:b2:3f:7f:e0:7f:27:3c:44:
90:af:c2:4e:fa:87:14:73:83:05:96:c9:85:38:a3:01:6c:22:
b3:6c:bc:fe:9f:5b:94:e8:23:82:b7:67:11:ea:b6:2f:ed:ee:
e5:9e:f9:85:00:40:a7:fb:2e:47:4d:86:4c:6c:cb:e5:8a:47:
0d:75:39:4d:7d:f5:7e:8a:3d:46:13:cb:6f:52:7c:d3:e1:60:
a6:4c:88:b3:5b:93:6c:3a:a8:51:d7:48:3c:53:33:8c:af:65:
f4:d7:e6:40:cf:b0:4a:b4:84:4d:19:a0:61:60:bd:a1:89:27:
f0:c0:66:d0:91:5e:af:fe:b1:69:3d:e2:83:8d:f6:35:a0:24:
be:89:41:8b:1c:cf:0c:39:86:ec:45:92:6e:cc:d0:35:bd:e3:
77:5b:fa:9f:18:80:31:1a:4b:16:da:ae:1b:aa:87:17:5e:fe:
14:36:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:30:49 2025 by rpki-client