Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/AkeW0dNO6HwoGorE-RVkvkd5lYI.roa
File: AkeW0dNO6HwoGorE-RVkvkd5lYI.roa (raw, json)
Hash identifier: cFEnsrh1nsOvG/GU22O2yZ4HJtAwycOwC2PtRPjLqBI=
Subject key identifier: 02:47:96:D1:D3:4E:E8:7C:28:1A:8A:C4:F9:15:64:BE:47:79:95:82
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0195B8E377964ED07E322CA11F79E254B070
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/AkeW0dNO6HwoGorE-RVkvkd5lYI.roa
Signing time: Fri 21 Mar 2025 13:27:49 +0000
ROA not before: Fri 21 Mar 2025 13:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 86.38.145.0/24 maxlen: 24
86.38.191.0/24 maxlen: 24
89.117.212.0/24 maxlen: 24
89.117.214.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
217.9.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:e3:77:96:4e:d0:7e:32:2c:a1:1f:79:e2:54:b0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 21 13:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=024796d1d34ee87c281a8ac4f91564be47799582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:f2:49:4d:73:a3:3d:4e:96:bf:18:fb:be:
a6:0c:b5:17:2f:93:a1:97:c3:bc:43:d9:40:7f:ef:
e5:fb:9d:77:7f:1d:4d:b9:29:de:82:ce:59:a3:a2:
d3:d2:9e:e7:e0:2e:16:be:42:7b:91:dc:2e:67:7c:
9a:7e:09:8f:2a:d6:5f:60:1c:09:f1:21:d2:ed:13:
41:71:97:44:4c:97:9b:8a:31:d9:8a:9e:e6:9d:9f:
77:31:40:79:6f:51:b6:a8:a5:9f:a6:8e:e8:4f:25:
ed:7c:be:45:fe:bc:c9:ef:f3:ce:09:47:7e:22:ec:
c4:16:65:4a:59:3a:27:58:53:24:b4:c4:b5:ae:a8:
d5:d4:b6:34:9c:87:ca:31:c7:a2:60:f9:87:33:7b:
a8:cf:68:b6:a6:03:41:fb:a1:be:b6:6c:4a:d2:83:
dd:45:5f:d8:a6:79:42:e0:f0:13:87:47:fb:f0:95:
4d:9c:85:9c:ef:38:ba:cb:11:ce:eb:ad:fe:58:0c:
67:3a:83:23:15:1b:56:05:8e:c3:f1:62:8d:dc:94:
a6:9d:45:b6:b2:fb:f6:ca:db:c4:1f:87:a1:e5:48:
a8:17:8b:ad:00:6c:db:47:57:6c:dc:0a:eb:60:04:
26:05:35:04:72:c1:46:3a:fd:00:e8:42:54:4b:af:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:47:96:D1:D3:4E:E8:7C:28:1A:8A:C4:F9:15:64:BE:47:79:95:82
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/AkeW0dNO6HwoGorE-RVkvkd5lYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.145.0/24
86.38.191.0/24
89.117.212.0/24
89.117.214.0/24
89.117.251.0/24
217.9.246.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a7:b9:44:7d:99:ca:40:17:6b:0d:94:cd:1b:07:c7:b0:98:
6e:7a:ba:2e:29:86:61:e1:14:0e:77:bb:ca:f0:2d:de:c0:62:
76:c6:d1:8e:f8:5e:82:ec:f0:f2:0b:61:c8:39:d4:3a:a5:93:
a1:92:4f:b1:5e:77:f9:03:55:ea:2c:11:68:86:7d:bf:1b:ea:
fc:58:59:12:06:fb:b9:1a:a1:0f:e4:9e:78:ec:c5:ac:cb:ab:
d0:5c:ff:fb:fa:32:f3:0b:66:d3:d8:72:3f:11:19:3a:01:81:
1d:36:74:50:e7:8b:ca:b4:50:56:81:f4:90:e3:6e:37:6d:27:
7c:d3:9f:e3:fc:00:1a:3c:e3:f2:15:3f:56:da:a1:22:cc:cd:
0d:27:cc:52:30:80:7d:26:56:d8:6f:9c:06:2c:e1:c2:ea:ca:
e1:18:c3:f8:e5:2b:39:8a:6d:90:1d:66:7c:c1:f2:3e:f4:7a:
df:8b:5f:eb:ab:cf:ab:41:2d:b1:ee:39:9d:19:f9:08:ed:57:
ee:d2:db:1f:f2:eb:87:61:6d:1f:cd:a1:2d:56:56:41:cd:bf:
e6:e8:24:e2:d8:da:56:fd:a2:55:75:01:9f:c2:5a:a2:0d:47:
1b:e8:af:d4:88:ec:6b:f3:2c:5a:0f:60:aa:b7:95:26:27:63:
34:e0:4a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:27 2025 by rpki-client