Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa
File: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (raw, json)
Hash identifier: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=
Subject key identifier: F9:2B:3C:CB:9E:C4:86:4E:91:D7:92:39:D0:DF:C9:6B:83:6E:64:58
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 019427B5331B9B52A677169AE24DC9027291
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa
Signing time: Thu 02 Jan 2025 15:49:34 +0000
ROA not before: Thu 02 Jan 2025 15:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25311
IP address blocks: 86.105.206.0/23 maxlen: 24
89.34.180.0/22 maxlen: 24
89.47.208.0/20 maxlen: 24
188.209.96.0/20 maxlen: 24
195.182.220.0/23 maxlen: 24
2a01:4700:8000::/33 maxlen: 48
2a03:9c20:2002::/48 maxlen: 56
2a03:9c20:3000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:33:1b:9b:52:a6:77:16:9a:e2:4d:c9:02:72:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 2 15:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f92b3ccb9ec4864e91d79239d0dfc96b836e6458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:c7:0c:54:d6:8a:59:3e:7e:0a:75:7a:82:
f1:f2:05:b0:c0:e1:b0:08:9b:b9:6f:18:60:7a:fc:
3a:50:a8:fd:38:bd:28:48:d9:5c:0e:9b:5f:7d:3a:
1a:ec:d6:ae:ab:c1:42:17:8d:bd:b3:8d:13:9d:88:
05:e6:a2:c7:63:ab:68:4d:61:dc:53:30:91:62:f3:
50:dd:68:7d:51:21:39:8e:94:d7:e3:c1:59:8f:d1:
b5:3b:a0:fd:e4:8b:e2:e0:f1:67:0e:1a:eb:e8:c1:
8a:b9:75:3c:5e:7b:0c:4b:f2:af:f0:32:88:25:e6:
12:d3:50:9b:f5:e2:02:1d:44:42:a6:23:97:2d:88:
e3:df:be:56:d6:08:57:2c:ab:7f:05:11:c1:f5:8d:
cd:6b:75:ed:64:12:52:70:ba:20:f9:7f:76:fa:2d:
ac:f6:d5:3a:57:55:ca:59:4d:0e:58:c1:2e:f8:e8:
dc:db:e4:f9:cf:73:ab:0f:4a:e3:b0:86:af:42:2a:
a5:b6:7f:f2:45:5d:c3:b2:59:15:d6:be:d5:6d:1a:
7c:43:dd:fa:7c:4a:25:6c:8e:83:39:e0:15:17:16:
40:f0:6a:67:85:79:95:fb:ea:75:fb:ab:73:74:7e:
c2:21:67:de:5b:b5:5c:e2:51:89:ba:33:ab:50:2a:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2B:3C:CB:9E:C4:86:4E:91:D7:92:39:D0:DF:C9:6B:83:6E:64:58
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.206.0/23
89.34.180.0/22
89.47.208.0/20
188.209.96.0/20
195.182.220.0/23
IPv6:
2a01:4700:8000::/33
2a03:9c20:2002::/48
2a03:9c20:3000::/36
Signature Algorithm: sha256WithRSAEncryption
61:26:76:8c:5b:6b:3a:76:12:f9:a2:a9:64:0e:67:05:93:e0:
74:f7:b1:99:6e:65:52:36:59:1d:30:df:ad:30:6b:26:41:50:
ff:9d:07:5a:ff:94:16:ff:6a:d8:38:9e:25:60:e4:02:ca:56:
c2:18:e6:3f:9e:18:e1:db:d5:de:f3:f5:f6:d2:e0:83:cb:72:
db:9b:58:9f:31:39:8b:81:85:f6:01:08:a2:a9:fe:b3:a1:13:
c4:02:3a:72:95:38:eb:b2:bb:51:ab:cf:ec:94:67:25:2b:6d:
27:86:b7:10:27:07:40:72:f0:3a:c4:03:43:1f:cd:75:57:8b:
d0:f4:71:32:fa:47:db:06:c0:7d:7d:4f:1d:5c:02:ce:a8:97:
b9:e4:f7:71:e6:ec:57:68:5e:aa:c0:cc:6e:3c:cb:0d:c5:a0:
87:c1:d8:70:b9:23:73:ce:bb:98:bc:e6:ff:ab:2f:17:16:63:
9c:ce:01:9b:bb:54:72:8a:e3:5c:20:95:cc:1e:99:41:94:27:
94:8a:a0:dc:c4:f9:e7:e6:38:69:1e:3f:b6:48:16:8d:70:e1:
ac:f3:7e:26:c9:54:b3:58:27:5e:31:62:9d:88:65:fc:db:75:
66:7d:7f:24:80:32:d0:c0:18:da:e4:0c:0c:e4:41:4d:53:af:
a4:8b:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:41 2025 by rpki-client