Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/O9yiQLVEBd-NcJHF-CtuMWuUQcs.roa
File: O9yiQLVEBd-NcJHF-CtuMWuUQcs.roa (raw, json)
Hash identifier: 9tK+SkxoqMXZGYXgh9to47Jr0S1+VU20uWG/tkGOBQ0=
Subject key identifier: 3B:DC:A2:40:B5:44:05:DF:8D:70:91:C5:F8:2B:6E:31:6B:94:41:CB
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019425FC9860083F665AEDE9DA586613A73F
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/O9yiQLVEBd-NcJHF-CtuMWuUQcs.roa
Signing time: Thu 02 Jan 2025 07:48:18 +0000
ROA not before: Thu 02 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15626
IP address blocks: 5.34.182.0/23 maxlen: 23
5.34.182.0/24 maxlen: 24
5.34.183.0/24 maxlen: 24
46.28.64.0/21 maxlen: 21
46.28.67.0/24 maxlen: 24
82.118.17.0/24 maxlen: 24
82.118.18.0/24 maxlen: 24
193.238.152.0/23 maxlen: 23
193.238.153.0/24 maxlen: 24
217.12.192.0/21 maxlen: 21
217.12.199.0/24 maxlen: 24
217.12.204.0/23 maxlen: 23
217.12.210.0/23 maxlen: 23
217.12.210.0/24 maxlen: 24
217.12.212.0/22 maxlen: 22
217.12.215.0/24 maxlen: 24
217.12.216.0/23 maxlen: 23
217.12.220.0/22 maxlen: 22
217.12.221.0/24 maxlen: 24
217.12.222.0/24 maxlen: 24
217.12.223.0/24 maxlen: 24
2a02:27a8::/32 maxlen: 32
2a02:27a8:feed::/48 maxlen: 48
2a02:27ad::/32 maxlen: 32
2a05:9407::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:98:60:08:3f:66:5a:ed:e9:da:58:66:13:a7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jan 2 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bdca240b54405df8d7091c5f82b6e316b9441cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:ba:46:c1:ac:44:00:e0:33:df:89:46:60:
95:fc:8d:b7:ea:89:6b:30:ef:56:18:ff:ce:18:e2:
f9:1b:99:24:98:37:43:b6:3f:ed:a8:1b:27:bc:25:
df:9d:e8:2e:21:28:3c:dd:06:5b:0b:dd:d8:f1:57:
aa:ff:d6:7d:dc:97:da:5e:01:93:ab:28:0e:90:bf:
99:6d:43:c8:a9:84:95:7e:0f:bf:90:c5:76:fb:25:
ab:1f:75:63:82:dc:7d:ba:82:d1:f3:5d:76:14:80:
94:d9:89:15:64:a3:ae:fc:2e:97:cd:96:12:dd:7e:
31:fb:dd:63:a4:48:0c:01:d7:18:7f:7c:13:64:8c:
01:e1:72:16:2e:29:61:ef:48:67:2e:e4:6d:df:f8:
a8:44:d9:8f:3d:f3:83:6d:1d:65:d1:14:c4:3e:b3:
a2:0b:0e:32:ca:b0:8f:1b:31:bd:ee:7c:5d:26:e2:
4c:dc:a3:d9:2a:81:28:71:e9:2f:fd:25:e4:6b:7f:
bd:03:fa:9a:7f:be:63:3c:56:39:57:b7:d5:85:d1:
f6:6b:24:47:5a:20:8a:73:03:81:e3:3f:fb:3b:ec:
af:77:19:33:c5:16:d3:da:b6:4f:01:72:03:b5:0a:
a7:62:22:c7:a3:4b:53:16:02:c6:97:0a:68:c9:de:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DC:A2:40:B5:44:05:DF:8D:70:91:C5:F8:2B:6E:31:6B:94:41:CB
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/O9yiQLVEBd-NcJHF-CtuMWuUQcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.182.0/23
46.28.64.0/21
82.118.17.0-82.118.18.255
193.238.152.0/23
217.12.192.0/21
217.12.204.0/23
217.12.210.0-217.12.217.255
217.12.220.0/22
IPv6:
2a02:27a8::/32
2a02:27ad::/32
2a05:9407::/32
Signature Algorithm: sha256WithRSAEncryption
0b:da:2f:d9:bb:cd:53:08:44:8b:5a:13:2b:27:51:28:ee:a3:
b5:92:dd:bc:45:92:bb:ee:ee:a6:ec:07:16:17:f0:c4:b3:d1:
82:fb:37:bc:88:c5:91:cb:d6:48:aa:27:11:cd:88:af:50:5c:
84:ad:ae:91:eb:3e:ab:36:a9:d4:f5:d5:fd:06:85:96:e4:d4:
7c:bf:d1:3b:65:70:ad:c6:7b:7b:03:24:c9:66:eb:ca:df:d0:
2d:cc:09:a2:cc:40:a2:22:bf:49:02:3d:fa:08:06:ca:67:c2:
26:aa:ae:e4:de:e5:4e:70:80:66:93:a7:a2:e3:7a:01:26:c5:
30:90:16:c5:4b:8f:27:85:96:c5:28:c7:ab:e8:d9:eb:c1:94:
a5:4d:23:34:75:26:2b:b4:9d:c6:79:15:21:22:bf:0a:6f:14:
27:df:3e:d4:4f:d7:48:ea:64:d4:46:7f:9e:49:33:c7:60:11:
8e:37:02:16:77:03:a8:f0:e7:0b:04:3c:c1:da:9b:b9:0b:3e:
5e:d7:c5:98:5c:5a:62:db:d7:1a:54:b7:0e:7c:fb:bd:46:59:
cc:1e:65:d6:ae:9b:32:24:ff:a1:ba:e7:43:4e:97:3d:76:ad:
73:48:6f:80:25:1c:b5:44:a8:54:77:43:ad:b6:6a:cb:05:dd:
0b:58:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:08 2025 by rpki-client