Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/jEDq-V6Dv_pddHo3PtNMAB0h66A.roa
File: jEDq-V6Dv_pddHo3PtNMAB0h66A.roa (raw, json)
Hash identifier: 7yOAHayoashZa/UDRfYTrsQrs19Gr6tul8KvWE88yEE=
Subject key identifier: 8C:40:EA:F9:5E:83:BF:FA:5D:74:7A:37:3E:D3:4C:00:1D:21:EB:A0
Certificate issuer: /CN=81891b261c62dabf777e552eb5ec27d77e484139
Certificate serial: 02C2ADCB
Authority key identifier: 81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/jEDq-V6Dv_pddHo3PtNMAB0h66A.roa
Signing time: Mon 04 Apr 2022 12:59:16 +0000
ROA not before: Mon 04 Apr 2022 12:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 86.105.31.0/24 maxlen: 24
89.47.7.0/24 maxlen: 24
89.47.6.0/24 maxlen: 24
188.240.204.0/24 maxlen: 24
195.82.122.0/24 maxlen: 24
195.82.121.0/24 maxlen: 24
195.82.120.0/24 maxlen: 24
188.240.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46312907 (0x2c2adcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81891b261c62dabf777e552eb5ec27d77e484139
Validity
Not Before: Apr 4 12:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c40eaf95e83bffa5d747a373ed34c001d21eba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:e4:66:dd:ab:bf:34:83:c7:52:c0:0b:22:
4c:aa:3f:13:91:31:86:65:2c:be:6d:99:22:fc:36:
2a:c8:6d:23:a7:d9:60:fe:a0:63:bd:16:17:dd:9e:
0a:13:9f:ba:26:aa:f5:6b:80:51:99:dd:0a:d7:f2:
40:63:a6:e9:46:f2:78:18:24:7c:eb:6e:53:63:72:
b8:9a:ad:61:e1:57:76:2f:72:b3:ac:2c:41:6a:fb:
5c:08:85:59:1b:cd:20:89:b6:98:8b:49:e9:3a:92:
62:58:ef:24:98:29:ba:ac:9b:ef:47:aa:02:a8:85:
07:ae:4f:14:ed:bc:ad:b6:9b:65:7f:0d:bc:3a:2b:
f2:20:39:b5:c8:02:8c:42:4d:2e:03:13:61:12:20:
ae:fa:47:99:3c:ff:08:f9:c7:11:81:35:55:04:2a:
4e:44:84:c6:ad:18:ed:71:0d:cb:21:d9:f1:d1:90:
0c:56:30:a9:33:c1:66:f9:7f:7c:55:a3:6f:33:3f:
68:3b:00:06:1a:7b:da:50:78:4d:df:7e:10:44:44:
4e:f3:87:48:02:eb:f1:21:66:ff:e1:df:eb:7d:e2:
e7:2b:20:a2:b9:72:ca:1c:f7:97:4b:db:4f:03:64:
65:ba:a4:ec:72:b9:c5:5b:34:ff:df:18:e9:45:18:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:EA:F9:5E:83:BF:FA:5D:74:7A:37:3E:D3:4C:00:1D:21:EB:A0
X509v3 Authority Key Identifier:
keyid:81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/jEDq-V6Dv_pddHo3PtNMAB0h66A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.31.0/24
89.47.6.0/23
188.240.204.0/24
188.240.206.0/24
195.82.120.0-195.82.122.255
Signature Algorithm: sha256WithRSAEncryption
a6:b4:6e:e5:52:57:c8:c8:8e:08:5c:0d:ed:4d:4d:68:36:28:
dc:7f:4d:9f:e8:d9:b6:b3:c7:22:25:08:4e:40:e4:77:43:59:
c8:12:13:16:a3:e8:7b:47:dc:64:ad:83:e2:23:bf:8d:dc:f3:
a0:6b:09:e2:88:0c:5d:6e:01:94:3b:2c:f4:79:4c:70:d3:98:
fb:96:e0:7c:3f:4f:c4:3e:54:91:31:c2:30:15:9b:2c:6e:b8:
df:bc:db:c9:b8:05:72:de:46:0e:3d:13:98:3a:14:ab:3f:6e:
4c:e6:56:ec:e3:d9:08:f2:e9:3e:bb:af:7f:b2:ea:70:4c:84:
a2:ce:dc:51:fe:5a:e0:9f:71:96:bd:4f:3d:fb:96:c8:a5:1c:
76:2e:37:c4:86:0b:46:5e:3f:85:c8:47:02:f6:f9:95:03:1c:
7f:1d:04:0d:75:36:d9:89:a5:cc:e4:17:c9:d6:da:22:b2:db:
c1:7b:66:e5:d4:9e:cd:78:56:28:3c:49:87:80:fe:7f:3d:3d:
df:49:ab:16:b6:b5:4a:82:06:72:7d:99:97:60:e8:55:62:81:
ad:2c:59:fd:42:25:3c:9f:81:28:c1:d9:1d:a9:64:d2:f9:82:
70:64:21:d3:cf:80:6a:fb:3e:9f:7d:9d:9a:75:53:29:5d:12:
0f:35:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:25 2025 by rpki-client