Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/8cg6ls0eHu6-sPH76NoZH2FkNOI.roa
File: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (raw, json)
Hash identifier: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=
Subject key identifier: F1:C8:3A:96:CD:1E:1E:EE:BE:B0:F1:FB:E8:DA:19:1F:61:64:34:E2
Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial: 0194266B2C9B4127FB413898D11CB54EB2FA
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/8cg6ls0eHu6-sPH76NoZH2FkNOI.roa
Signing time: Thu 02 Jan 2025 09:49:05 +0000
ROA not before: Thu 02 Jan 2025 09:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49892
IP address blocks: 94.143.128.0/21 maxlen: 21
94.143.128.0/24 maxlen: 24
94.143.129.0/24 maxlen: 24
94.143.130.0/24 maxlen: 24
94.143.131.0/24 maxlen: 24
94.143.132.0/24 maxlen: 24
94.143.133.0/24 maxlen: 24
94.143.134.0/24 maxlen: 24
94.143.135.0/24 maxlen: 24
185.169.216.0/22 maxlen: 22
185.169.216.0/24 maxlen: 24
185.169.217.0/24 maxlen: 24
185.169.218.0/24 maxlen: 24
185.169.219.0/24 maxlen: 24
2a04:6a40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2c:9b:41:27:fb:41:38:98:d1:1c:b5:4e:b2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
Validity
Not Before: Jan 2 09:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1c83a96cd1e1eeebeb0f1fbe8da191f616434e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:66:8e:45:6f:5a:c4:c9:44:f5:ab:13:df:
a5:2d:b2:68:a0:48:70:be:b2:b9:dc:78:3a:e6:69:
5b:5a:2d:64:31:a1:c1:82:3f:aa:34:bf:5c:4a:1d:
b8:ba:10:b8:04:43:43:f6:f5:0e:c3:46:f1:d9:ae:
64:00:e6:b7:a4:51:20:01:03:60:a4:5b:57:09:4d:
27:f9:1c:06:fd:07:8f:a3:72:25:77:e1:9f:49:82:
4d:6f:58:04:68:16:e9:3f:24:d9:fa:49:5f:b3:53:
0b:ad:98:07:73:84:73:34:65:ec:d3:b8:84:51:9a:
db:3c:d2:3f:e8:62:14:f0:9a:48:ea:04:aa:3c:fd:
cf:69:e3:c6:ae:a0:c7:2e:4a:a1:8f:28:f0:ab:28:
e6:30:47:64:4b:8d:a0:9f:4e:c4:62:be:92:8a:34:
42:c7:98:20:3c:61:57:e4:33:87:14:2b:3a:86:43:
47:6b:ca:1f:d3:8e:3c:cb:b6:b1:58:0b:6a:6e:a9:
6c:d6:76:8c:69:2c:b2:04:79:b6:4e:7f:d2:6d:25:
45:81:ff:68:5d:cf:e7:c9:75:03:52:30:13:52:cc:
19:b1:0d:74:f2:d1:88:32:ab:d7:62:a0:3d:ca:9c:
e8:a0:1b:55:6a:d7:bd:f5:89:32:9e:34:70:f4:67:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:3A:96:CD:1E:1E:EE:BE:B0:F1:FB:E8:DA:19:1F:61:64:34:E2
X509v3 Authority Key Identifier:
keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/8cg6ls0eHu6-sPH76NoZH2FkNOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.128.0/21
185.169.216.0/22
IPv6:
2a04:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
57:13:90:08:5a:35:5c:f5:ae:b9:cc:df:44:c3:ff:7b:e9:a2:
69:5c:96:ac:87:32:50:e0:37:15:2e:e8:40:40:fb:a5:84:e0:
cd:fa:b3:d8:c5:c7:92:40:89:f3:8b:98:cc:40:b1:2e:db:98:
2f:90:68:5e:7b:c6:9e:15:39:4b:78:d8:02:a3:32:36:0c:1c:
b4:7e:f3:fb:32:5c:87:3c:1a:1d:a8:e8:27:13:ab:25:24:6a:
2c:73:d5:b7:14:58:77:72:61:bc:04:b1:16:ff:9b:eb:7f:71:
69:de:ab:03:bb:2c:fb:b4:7b:9c:11:60:18:bf:db:db:30:7c:
52:5c:fb:41:17:8e:a8:06:db:9f:6c:fc:8c:49:25:31:2e:9d:
16:ff:5f:c3:3c:41:7c:7f:c7:1b:2c:71:d8:42:b9:95:1b:37:
a5:8b:f2:22:20:ec:c6:1d:ae:20:73:5f:a4:3c:e4:76:be:4d:
4e:dd:3e:70:fb:2c:44:09:9e:60:29:89:11:f1:20:c7:96:10:
b3:90:c4:55:ca:72:22:70:6d:44:f1:d4:18:0f:3f:21:94:4f:
33:22:2e:93:a7:2e:ee:78:da:97:5d:3c:5d:c6:2e:23:80:73:
d3:ad:2d:9c:ac:6c:8c:36:9b:33:4b:7d:44:60:e1:4a:5e:62:
54:0f:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:18 2025 by rpki-client