Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/cn-oXj_T-RfCKsQxrw6E8Ys-CgQ.roa
File: cn-oXj_T-RfCKsQxrw6E8Ys-CgQ.roa (raw, json)
Hash identifier: 3NJ5fBtNUF5n7GronNY2Bv83Oykj7G7TI/8gRlMpuMo=
Subject key identifier: 72:7F:A8:5E:3F:D3:F9:17:C2:2A:C4:31:AF:0E:84:F1:8B:3E:0A:04
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5F0FABA96FF3A8407A83B1BC77A62
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/cn-oXj_T-RfCKsQxrw6E8Ys-CgQ.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42388
IP address blocks: 144.208.214.232/29 maxlen: 29
144.208.243.0/24 maxlen: 24
185.81.206.64/26 maxlen: 26
185.81.206.128/26 maxlen: 26
185.81.208.0/24 maxlen: 24
188.172.219.64/32 maxlen: 32
188.172.235.188/32 maxlen: 32
188.172.248.0/24 maxlen: 24
213.227.160.0/24 maxlen: 24
213.227.168.222/32 maxlen: 32
213.227.191.0/24 maxlen: 24
217.146.18.0/24 maxlen: 24
217.146.22.170/32 maxlen: 32
217.146.26.216/32 maxlen: 32
2a00:11c0:5:613::1000/128 maxlen: 128
2a00:11c0:d::1a/128 maxlen: 128
2a00:11c0:e:ffff:1::1000/128 maxlen: 128
2a00:11c0:48:13::/64 maxlen: 64
2a00:11c0:63:350::1000/128 maxlen: 128
2a00:11c0:82:359::1000/128 maxlen: 128
2a00:11c0:aa1::/48 maxlen: 48
2a00:11c0:1010::/48 maxlen: 48
2a00:11c0:11c0::/48 maxlen: 128
2a05:8900:aa1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f0:fa:ba:96:ff:3a:84:07:a8:3b:1b:c7:7a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=727fa85e3fd3f917c22ac431af0e84f18b3e0a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:3b:45:69:c9:ed:0f:25:42:df:7b:53:cc:
7b:23:25:15:35:89:28:79:f6:e3:18:85:9a:61:f1:
7c:e6:52:44:68:c8:6b:1d:16:f8:9a:7a:fb:02:86:
db:1f:23:30:35:55:c2:d2:97:29:be:75:b5:73:d3:
09:92:75:29:cc:ee:f1:f2:17:22:11:90:b7:a7:c8:
8f:bf:f3:c2:bb:c8:33:06:51:53:4d:63:02:7c:bd:
8f:50:f4:7b:29:31:78:6f:81:df:96:8c:e7:f2:d9:
4d:7e:5a:2b:e7:99:24:bd:35:3f:97:fa:a3:a5:38:
33:01:c6:e3:70:d3:6a:f8:ea:35:ad:7e:cc:cf:6d:
ed:46:be:20:30:d9:04:7e:a8:f2:14:7a:0f:84:39:
db:b9:e8:6b:e9:0b:2e:13:6a:c2:2e:c5:81:76:eb:
07:1e:54:52:7f:25:80:2f:20:4c:5d:5d:69:e6:b7:
bc:c9:84:f9:c6:77:34:66:23:c2:67:10:7e:96:dd:
1a:10:1f:b3:ba:05:7e:be:d5:d3:ea:e7:24:6f:ad:
91:35:c8:c0:03:2a:70:5b:08:f5:16:40:c0:da:42:
8e:cf:32:3e:55:c7:ba:55:0c:43:54:0e:80:80:b6:
5d:9d:fd:d1:a0:2b:66:6d:b3:ee:46:e9:82:09:87:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:A8:5E:3F:D3:F9:17:C2:2A:C4:31:AF:0E:84:F1:8B:3E:0A:04
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/cn-oXj_T-RfCKsQxrw6E8Ys-CgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.214.232/29
144.208.243.0/24
185.81.206.64-185.81.206.191
185.81.208.0/24
188.172.219.64/32
188.172.235.188/32
188.172.248.0/24
213.227.160.0/24
213.227.168.222/32
213.227.191.0/24
217.146.18.0/24
217.146.22.170/32
217.146.26.216/32
IPv6:
2a00:11c0:5:613:0:0:0:1000/128
2a00:11c0:d:0:0:0:0:1a/128
2a00:11c0:e:ffff:1:0:0:1000/128
2a00:11c0:48:13::/64
2a00:11c0:63:350:0:0:0:1000/128
2a00:11c0:82:359:0:0:0:1000/128
2a00:11c0:aa1::/48
2a00:11c0:1010::/48
2a00:11c0:11c0::/48
2a05:8900:aa1::/48
Signature Algorithm: sha256WithRSAEncryption
08:89:5a:41:9b:a9:75:52:a4:fd:09:02:bf:c7:41:be:03:64:
3f:11:10:3a:7b:b5:cc:b8:9d:10:5a:01:9e:b8:ed:1f:3e:0a:
30:f2:d3:cd:b9:81:a1:70:fa:e1:ad:27:31:6f:ae:e2:7d:91:
ac:01:49:32:4e:fc:6e:ee:ff:23:62:67:f8:a7:28:f5:6c:76:
8e:e2:7d:10:39:ee:6f:28:2b:7a:60:3b:4b:e3:18:fc:50:68:
e1:9e:84:8e:fd:01:45:3d:95:31:54:d7:07:1e:91:3d:c8:54:
fb:b8:a3:78:e0:42:75:94:2c:d9:b8:6e:68:bd:07:a7:5c:24:
b7:f4:b1:44:11:44:37:cf:ca:a8:23:3d:41:a0:a8:81:78:ee:
6c:28:4d:66:bd:ef:bf:32:65:71:12:73:e0:7d:a2:c6:7a:b2:
b0:2d:45:5a:1b:b1:6e:1c:d2:40:f1:89:0c:a3:86:b6:e8:a5:
20:b3:4d:14:5b:03:d6:93:a4:c2:5a:9c:4e:63:2b:2e:a4:ef:
57:7a:f8:bf:b5:f6:bb:df:56:77:12:92:2b:d4:75:62:6e:2b:
c9:b1:98:09:0b:f6:49:2d:1e:a6:1d:9c:c7:d6:61:43:8d:c1:
cc:ea:8e:de:66:e2:1b:d0:ca:9b:83:9b:e6:e8:0e:9c:b4:74:
ee:45:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:31:44 2025 by rpki-client