Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/cpL4P5cQzZEct_Hpz4skotLImcw.roa
File: cpL4P5cQzZEct_Hpz4skotLImcw.roa (raw, json)
Hash identifier: OmO2jfiT7eU1naZUh17OvIR3tpiX6+jbLejl1D3RZnI=
Subject key identifier: 72:92:F8:3F:97:10:CD:91:1C:B7:F1:E9:CF:8B:24:A2:D2:C8:99:CC
Certificate issuer: /CN=81891b261c62dabf777e552eb5ec27d77e484139
Certificate serial: 01FB5D53
Authority key identifier: 81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/cpL4P5cQzZEct_Hpz4skotLImcw.roa
Signing time: Sat 01 Jan 2022 13:56:42 +0000
ROA not before: Sat 01 Jan 2022 13:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201337
IP address blocks: 86.105.31.0/24 maxlen: 24
89.47.7.0/24 maxlen: 24
188.240.206.0/24 maxlen: 24
195.82.122.0/24 maxlen: 24
188.240.204.0/24 maxlen: 24
195.82.120.0/24 maxlen: 24
195.82.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33250643 (0x1fb5d53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81891b261c62dabf777e552eb5ec27d77e484139
Validity
Not Before: Jan 1 13:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7292f83f9710cd911cb7f1e9cf8b24a2d2c899cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:71:4c:51:d4:c3:76:ed:46:b1:5c:d6:53:
f9:c5:3d:9d:40:c6:0e:2a:7f:9b:92:b6:22:e6:a2:
36:70:81:24:e7:24:21:24:d8:8e:c4:d5:be:16:90:
16:e1:79:72:e5:f2:19:53:c8:66:0c:60:28:b8:37:
99:12:44:03:b1:6e:df:7b:42:3d:e5:a2:52:7b:e2:
93:78:43:d7:0b:06:e4:95:68:93:0c:ea:71:a5:8f:
22:9a:3c:09:69:5d:0b:60:14:93:1b:d2:6b:64:df:
59:0f:11:86:a0:e6:f7:d3:77:d8:2c:92:3d:aa:cd:
55:71:78:4b:74:97:23:c4:af:2f:13:b9:10:f7:67:
bb:2c:e1:a2:4b:eb:ed:12:b2:fb:11:eb:5b:6b:fd:
71:d2:d0:c7:16:e6:29:8e:93:46:25:8e:82:f8:ed:
de:fc:b7:e1:39:ef:c7:26:28:9c:08:f7:10:6a:81:
0a:39:42:af:e5:76:1d:2a:aa:8e:20:52:00:1c:4b:
33:33:03:18:88:cb:a4:b0:6a:a3:83:17:9c:a6:2d:
18:27:2b:29:1d:6d:36:b3:6e:27:71:b8:eb:d9:4e:
63:53:99:0f:f9:5c:eb:0c:78:9a:90:1d:2b:44:24:
f5:60:a3:1f:19:60:a7:4c:63:a8:b8:c4:e7:c1:f2:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:F8:3F:97:10:CD:91:1C:B7:F1:E9:CF:8B:24:A2:D2:C8:99:CC
X509v3 Authority Key Identifier:
keyid:81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/cpL4P5cQzZEct_Hpz4skotLImcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.31.0/24
89.47.7.0/24
188.240.204.0/24
188.240.206.0/24
195.82.120.0-195.82.122.255
Signature Algorithm: sha256WithRSAEncryption
5b:98:45:d5:a5:99:43:16:3f:e8:f7:28:95:a2:8b:42:9d:7f:
73:bf:35:9d:12:f1:f4:73:f4:e1:31:53:39:22:e2:35:23:bd:
79:bf:c8:b9:31:2e:48:2a:bf:31:f3:b0:8d:92:36:35:80:68:
20:2e:16:fd:92:33:11:f5:cf:d3:eb:c8:3b:81:2f:4a:f9:79:
c7:26:9f:1d:cf:30:fc:8c:95:9d:03:dc:39:88:12:68:b9:93:
14:d7:fb:06:d1:4e:d8:d6:cc:36:2d:56:39:d0:3c:09:c0:68:
67:82:67:59:97:e5:95:0d:6e:fc:0a:ce:88:ea:0d:f4:ee:4e:
fd:8a:50:32:66:e5:3d:80:a5:15:72:8b:32:d7:d2:b7:eb:97:
04:60:d4:01:13:5e:e1:9f:13:31:a5:da:cc:0f:6f:4f:01:25:
1f:6a:e6:87:7c:61:3e:89:cd:0e:d6:c4:44:98:37:1a:25:02:
09:6c:06:f9:5c:6d:d7:a7:c2:e1:49:93:31:e2:1b:b1:49:8e:
b2:d7:22:3b:e2:cc:9f:04:78:27:44:c2:da:e7:7c:68:5c:b2:
06:35:0c:3e:db:5e:c5:20:44:e9:51:91:13:f0:39:f5:44:f2:
6a:9a:88:ea:b0:44:44:ca:b7:89:70:c3:2a:c0:62:79:c7:de:
b1:15:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:18 2025 by rpki-client