Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qkP1oepmEASNe2Hxm8XOVLQkS2s.roa
File: qkP1oepmEASNe2Hxm8XOVLQkS2s.roa (raw, json)
Hash identifier: XpDDmTe3+Rjh/47RC1cgX8CkIbS/lzyDcQkzjNpgmPM=
Subject key identifier: AA:43:F5:A1:EA:66:10:04:8D:7B:61:F1:9B:C5:CE:54:B4:24:4B:6B
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0ADAA1BF5AE884E6586A7CE82E6A9B
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qkP1oepmEASNe2Hxm8XOVLQkS2s.roa
Signing time: Sun 01 Jan 2023 11:15:05 +0000
ROA not before: Sun 01 Jan 2023 11:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49902
IP address blocks: 213.223.138.0/24 maxlen: 24
213.223.46.0/23 maxlen: 24
213.223.45.0/24 maxlen: 24
78.120.128.0/21 maxlen: 21
195.115.116.0/22 maxlen: 22
86.77.160.0/21 maxlen: 21
77.143.0.0/16 maxlen: 16
195.98.112.0/20 maxlen: 20
213.222.64.0/18 maxlen: 18
88.141.232.0/21 maxlen: 21
84.97.80.0/21 maxlen: 21
79.83.224.0/21 maxlen: 21
88.142.0.0/20 maxlen: 20
109.9.208.0/20 maxlen: 20
88.137.216.0/21 maxlen: 21
77.137.224.0/19 maxlen: 19
88.140.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:da:a1:bf:5a:e8:84:e6:58:6a:7c:e8:2e:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa43f5a1ea6610048d7b61f19bc5ce54b4244b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b2:0e:d1:7a:41:49:1f:ce:61:b8:58:f5:50:
a6:73:e3:cb:f5:9f:7b:3e:05:35:42:9e:94:26:ea:
4e:13:d9:e2:89:b8:e3:24:99:2b:e6:71:bb:65:92:
20:c8:57:db:5e:06:0c:86:9a:1d:68:6f:31:4d:8e:
43:31:e2:6a:ed:de:24:e3:cd:2f:37:52:18:f9:47:
31:86:8f:c6:5c:5d:51:bd:56:71:bc:49:a0:df:17:
1d:e8:e5:e3:34:89:90:79:10:55:81:fa:92:37:40:
e4:53:96:7d:28:ee:c0:a6:d1:38:3c:b4:dc:cf:06:
5b:80:a8:08:51:af:0c:89:39:0a:6e:9b:03:5e:8c:
9a:bf:dc:7b:63:e6:0d:87:34:4e:cf:3f:3c:45:9c:
4a:d1:06:9d:19:01:b1:b3:b7:5e:da:78:9f:db:e6:
57:46:bf:74:e4:ad:aa:ef:0e:42:1f:ba:fb:a9:e3:
c3:56:ae:4f:72:0a:e5:8e:22:a6:e7:3d:82:b4:ce:
46:35:79:4a:05:db:bf:51:8d:0d:9d:b9:7d:12:fc:
2f:9c:2f:04:59:40:60:72:e0:8a:26:72:09:4b:3f:
d4:71:36:3a:71:9a:38:26:8f:21:d7:e0:ab:5a:c4:
b2:2e:72:18:d0:07:2f:62:89:a4:df:b0:af:4e:e4:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:F5:A1:EA:66:10:04:8D:7B:61:F1:9B:C5:CE:54:B4:24:4B:6B
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/qkP1oepmEASNe2Hxm8XOVLQkS2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.224.0/19
77.143.0.0/16
78.120.128.0/21
79.83.224.0/21
84.97.80.0/21
86.77.160.0/21
88.137.216.0/21
88.140.104.0/21
88.141.232.0/21
88.142.0.0/20
109.9.208.0/20
195.98.112.0/20
195.115.116.0/22
213.222.64.0/18
213.223.45.0-213.223.47.255
213.223.138.0/24
Signature Algorithm: sha256WithRSAEncryption
61:aa:25:9a:7f:eb:47:fb:d2:eb:2f:05:83:8e:2e:c2:02:5f:
98:e6:ad:55:ff:34:41:73:28:89:35:01:10:1d:8f:2d:e7:f7:
e8:80:6a:ac:0d:a7:d4:08:34:86:e9:c3:79:5f:7e:aa:6b:c0:
35:48:1d:c4:32:cc:19:c5:d1:f7:e8:51:bf:dd:ba:e8:0c:f4:
52:13:5d:d1:ff:c8:4b:31:c6:85:03:10:0a:67:9c:69:57:60:
8b:c9:ea:74:95:67:40:82:e3:9b:c2:45:c8:c5:5b:c4:b1:4a:
a5:33:c8:89:a5:3a:34:92:5a:e6:f1:c7:06:74:23:06:6b:79:
cb:82:e2:53:32:77:a9:1d:a8:e4:bc:51:50:31:0b:99:d1:79:
b2:98:d7:3a:13:b6:a7:71:a7:2b:c0:43:04:cd:4d:15:f5:4d:
dc:7f:1e:77:4f:0b:06:cb:bd:d3:bb:6e:f4:a2:b0:35:25:cb:
fa:84:21:6a:11:1f:05:6f:1d:0b:c0:66:2c:2d:d1:e7:e1:8e:
97:66:c7:29:6b:98:cb:0b:70:59:14:d0:8d:02:50:c8:34:f2:
cf:0a:00:dd:9f:28:98:26:74:44:f4:98:a9:15:6f:f2:4f:ec:
5c:09:03:57:bc:0a:14:33:23:a5:79:ef:eb:f3:9a:25:2d:63:
06:d6:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:01:18 2025 by rpki-client