Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/jF1jvWdDvh5tn8vIZ80JVkw9-T8.roa
File: jF1jvWdDvh5tn8vIZ80JVkw9-T8.roa (raw, json)
Hash identifier: kVMBv4CgAmGqOar5dZv8X5EIS/tCG/28Sau4lsMJ3qo=
Subject key identifier: 8C:5D:63:BD:67:43:BE:1E:6D:9F:CB:C8:67:CD:09:56:4C:3D:F9:3F
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018D1C31DC2884A65D97EF60DC128A298754
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/jF1jvWdDvh5tn8vIZ80JVkw9-T8.roa
Signing time: Thu 18 Jan 2024 10:50:46 +0000
ROA not before: Thu 18 Jan 2024 10:50:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25003
IP address blocks: 80.74.96.0/19 maxlen: 19
80.74.96.0/22 maxlen: 22
80.74.96.0/23 maxlen: 23
80.74.100.0/22 maxlen: 22
80.74.100.0/23 maxlen: 23
80.74.104.0/22 maxlen: 22
80.74.106.0/23 maxlen: 23
80.74.108.0/22 maxlen: 22
80.74.108.0/23 maxlen: 23
80.74.110.0/23 maxlen: 23
80.74.112.0/22 maxlen: 22
80.74.116.0/22 maxlen: 22
80.74.116.0/23 maxlen: 23
80.74.118.0/24 maxlen: 24
80.74.120.0/22 maxlen: 22
80.74.124.0/22 maxlen: 22
91.143.224.0/20 maxlen: 20
91.143.224.0/22 maxlen: 22
91.143.224.0/23 maxlen: 23
91.143.226.0/23 maxlen: 23
91.143.228.0/24 maxlen: 24
91.143.232.0/22 maxlen: 22
91.143.232.0/23 maxlen: 23
92.61.224.0/20 maxlen: 20
92.61.234.0/23 maxlen: 23
94.188.128.0/17 maxlen: 17
94.188.128.0/22 maxlen: 22
94.188.130.0/23 maxlen: 23
94.188.133.0/24 maxlen: 24
94.188.138.0/23 maxlen: 23
94.188.140.0/24 maxlen: 24
94.188.152.0/22 maxlen: 22
94.188.155.0/24 maxlen: 24
94.188.158.0/24 maxlen: 24
94.188.161.0/24 maxlen: 24
94.188.162.0/24 maxlen: 24
94.188.163.0/24 maxlen: 24
94.188.165.0/24 maxlen: 24
94.188.166.0/24 maxlen: 24
94.188.173.0/24 maxlen: 24
94.188.175.0/24 maxlen: 24
94.188.176.0/23 maxlen: 23
94.188.178.0/23 maxlen: 23
94.188.178.0/24 maxlen: 24
94.188.186.0/23 maxlen: 23
94.188.191.0/24 maxlen: 24
94.188.192.0/24 maxlen: 24
94.188.197.0/24 maxlen: 24
94.188.199.0/24 maxlen: 24
94.188.221.0/24 maxlen: 24
94.188.242.0/24 maxlen: 24
94.188.244.0/23 maxlen: 23
94.188.246.0/23 maxlen: 23
94.188.248.0/22 maxlen: 22
94.188.248.0/23 maxlen: 23
94.188.252.0/23 maxlen: 23
94.188.254.0/23 maxlen: 23
2a02:23b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:31:dc:28:84:a6:5d:97:ef:60:dc:12:8a:29:87:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 18 10:50:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c5d63bd6743be1e6d9fcbc867cd09564c3df93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:25:52:f8:78:69:ed:95:3b:64:74:a9:35:
42:d9:52:64:31:ee:99:2b:32:20:11:3a:70:c1:18:
c8:6d:c4:99:42:b9:75:f7:8b:4f:70:d1:22:b2:36:
37:c5:fd:b8:12:f3:99:2e:4e:35:c5:1d:03:18:4b:
0e:c5:95:5a:50:a0:a7:67:eb:83:fb:14:0a:43:73:
cc:96:7e:65:cb:3e:25:9c:9f:72:ad:e1:b8:bd:f6:
af:fd:49:97:56:3a:90:1a:37:e5:27:48:34:52:37:
cf:5b:87:fd:4e:dc:a7:bb:d6:d3:8f:fe:97:34:7d:
c9:30:0e:41:b6:32:bb:95:3d:8d:3e:73:d6:34:d6:
79:d4:10:5b:c1:03:21:ab:96:08:3b:56:5f:61:ca:
3a:44:76:ac:43:8c:b7:db:c6:03:b8:9c:76:76:af:
1d:1d:81:4b:69:60:c2:bc:0a:09:48:d1:33:ab:eb:
fa:51:ff:80:fb:03:8a:1a:d1:00:90:05:86:07:b2:
d7:34:a6:ae:c7:5d:b3:b1:6f:35:a4:b2:e9:20:90:
82:5d:be:ad:9e:71:8a:35:45:4b:cd:31:ad:54:db:
2d:b2:cd:23:0d:9a:b8:95:7f:e4:03:3f:ef:cf:23:
55:3e:64:98:8b:1a:89:70:10:e5:ef:14:0c:ee:fa:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5D:63:BD:67:43:BE:1E:6D:9F:CB:C8:67:CD:09:56:4C:3D:F9:3F
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/jF1jvWdDvh5tn8vIZ80JVkw9-T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.96.0/19
91.143.224.0/20
92.61.224.0/20
94.188.128.0/17
IPv6:
2a02:23b8::/32
Signature Algorithm: sha256WithRSAEncryption
60:3d:38:1a:3a:4d:e5:d4:ac:b7:07:3b:26:10:db:61:68:0e:
4f:ae:07:25:c6:37:2c:f6:ae:14:b5:22:17:94:b8:28:ec:9e:
88:1e:71:2a:28:4b:7a:00:11:76:7c:ed:90:fc:94:58:99:a3:
63:d7:f2:a9:bb:dd:7a:40:b0:36:8c:c0:30:4b:3c:a0:b0:f7:
cf:af:13:74:93:97:41:5b:5e:cf:19:5f:09:d0:18:ee:43:34:
2d:e0:b5:a9:01:66:09:96:bc:89:64:5b:dd:4e:3c:cc:7d:9a:
41:7b:bb:e2:a1:74:ae:f9:4a:f4:13:76:9d:e8:9e:e5:3f:a6:
b9:58:20:21:10:87:3a:6b:dc:e4:e0:db:80:8f:d7:5d:c3:1f:
96:25:ed:99:df:2d:96:be:eb:4d:99:ac:c1:a8:83:b0:1b:2d:
4d:58:4f:5c:7d:67:d7:89:d0:5c:fc:33:cb:6d:b3:24:b6:0a:
7b:b5:19:85:02:e6:9e:04:23:8e:22:d0:7e:92:82:3c:bc:bb:
84:da:4a:33:39:53:14:d8:e5:eb:90:84:fb:e5:4c:c2:23:9c:
12:00:66:c4:c7:68:13:bf:10:87:86:9f:a1:68:ca:37:f2:1d:
2c:6e:8d:47:8a:b0:0f:46:09:f0:0f:4a:15:ca:1e:ae:53:67:
3e:00:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:53 2025 by rpki-client