Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa
File: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (raw, json)
Hash identifier: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=
Subject key identifier: 4D:ED:97:9C:E1:E8:17:79:31:11:79:73:51:90:73:7F:5C:04:40:0C
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 019428257DF1F7EFCC35A28DC1A8942C752D
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa
Signing time: Thu 02 Jan 2025 17:52:13 +0000
ROA not before: Thu 02 Jan 2025 17:52:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12654
IP address blocks: 84.205.64.0/24 maxlen: 24
84.205.65.0/24 maxlen: 24
84.205.66.0/24 maxlen: 24
84.205.67.0/24 maxlen: 24
84.205.69.0/24 maxlen: 24
84.205.70.0/24 maxlen: 24
84.205.75.0/24 maxlen: 24
84.205.76.0/24 maxlen: 24
84.205.80.0/24 maxlen: 24
84.205.81.0/24 maxlen: 24
84.205.82.0/24 maxlen: 24
84.205.85.0/24 maxlen: 24
84.205.86.0/24 maxlen: 24
84.205.88.0/24 maxlen: 24
84.205.91.0/24 maxlen: 24
84.205.92.0/24 maxlen: 24
93.175.144.0/24 maxlen: 24
93.175.146.0/24 maxlen: 24
93.175.152.0/24 maxlen: 24
93.175.153.0/24 maxlen: 24
93.175.154.0/25 maxlen: 25
93.175.154.128/28 maxlen: 28
2001:7fb:ee00::/48 maxlen: 48
2001:7fb:ee01::/48 maxlen: 48
2001:7fb:ee02::/48 maxlen: 48
2001:7fb:ee03::/48 maxlen: 48
2001:7fb:ee04::/48 maxlen: 48
2001:7fb:ee05::/48 maxlen: 48
2001:7fb:ef00::/48 maxlen: 48
2001:7fb:ef01::/48 maxlen: 48
2001:7fb:ef02::/48 maxlen: 48
2001:7fb:ef03::/48 maxlen: 48
2001:7fb:ef04::/48 maxlen: 48
2001:7fb:ef05::/48 maxlen: 48
2001:7fb:fb01:100::/56 maxlen: 56
2001:7fb:fb01:200::/64 maxlen: 64
2001:7fb:fd02::/48 maxlen: 48
2001:7fb:fd05::/48 maxlen: 48
2001:7fb:fe00::/48 maxlen: 48
2001:7fb:fe01::/48 maxlen: 48
2001:7fb:fe03::/48 maxlen: 48
2001:7fb:fe04::/48 maxlen: 48
2001:7fb:fe05::/48 maxlen: 48
2001:7fb:fe06::/48 maxlen: 48
2001:7fb:fe07::/48 maxlen: 48
2001:7fb:fe0a::/48 maxlen: 48
2001:7fb:fe0b::/48 maxlen: 48
2001:7fb:fe0c::/48 maxlen: 48
2001:7fb:fe0d::/48 maxlen: 48
2001:7fb:fe0e::/48 maxlen: 48
2001:7fb:fe0f::/48 maxlen: 48
2001:7fb:fe10::/48 maxlen: 48
2001:7fb:fe12::/48 maxlen: 48
2001:7fb:fe13::/48 maxlen: 48
2001:7fb:fe14::/48 maxlen: 48
2001:7fb:fe15::/48 maxlen: 48
2001:7fb:fe16::/48 maxlen: 48
2001:7fb:fe17::/48 maxlen: 48
2001:7fb:fe18::/48 maxlen: 48
2001:7fb:fe19::/48 maxlen: 48
2001:7fb:fe20::/48 maxlen: 48
2001:7fb:ff00::/48 maxlen: 48
2001:7fb:ff01::/48 maxlen: 48
2001:7fb:ff02::/48 maxlen: 48
2001:7fb:ff04::/48 maxlen: 48
2001:7fb:ff05::/48 maxlen: 48
2001:7fb:ff06::/48 maxlen: 48
2001:7fb:ff07::/48 maxlen: 48
2001:7fb:ff0a::/48 maxlen: 48
2001:7fb:ff0b::/48 maxlen: 48
2001:7fb:ff0c::/48 maxlen: 48
2001:7fb:ff0d::/48 maxlen: 48
2001:7fb:ff0e::/48 maxlen: 48
2001:7fb:ff0f::/48 maxlen: 48
2001:7fb:ff10::/48 maxlen: 48
2001:7fb:ff12::/48 maxlen: 48
2001:7fb:ff13::/48 maxlen: 48
2001:7fb:ff14::/48 maxlen: 48
2001:7fb:ff15::/48 maxlen: 48
2001:7fb:ff16::/48 maxlen: 48
2001:7fb:ff17::/48 maxlen: 48
2001:7fb:ff18::/48 maxlen: 48
2001:7fb:ff19::/48 maxlen: 48
2001:7fb:ff20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:7d:f1:f7:ef:cc:35:a2:8d:c1:a8:94:2c:75:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 2 17:52:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ded979ce1e81779311179735190737f5c04400c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:2e:00:8d:19:81:a7:ca:56:90:48:84:13:
e8:19:87:e1:89:56:e7:60:56:40:ff:26:65:f4:b0:
37:fc:a7:ea:e7:b0:07:10:ca:38:8c:ac:2f:7c:d3:
da:6b:f2:69:64:02:2f:03:7c:09:94:a8:b3:a4:37:
5a:a0:f6:78:7b:d1:66:d0:af:ef:c0:3d:f5:ae:2e:
c5:fe:db:71:a5:50:42:ac:94:db:8c:ee:70:60:68:
99:e8:70:05:11:54:bd:68:97:7a:8e:c0:a4:40:2f:
86:46:32:6b:2e:64:f1:1e:4d:62:ce:87:84:20:ac:
0f:f9:44:e1:20:c4:2a:15:a0:14:b8:1f:ee:20:e4:
e7:dd:ab:d2:b1:ab:76:20:bb:41:12:02:62:f8:99:
5e:ee:51:b5:d1:44:f4:7a:37:d0:23:0a:ce:f5:62:
21:80:55:83:96:52:0a:82:45:f0:d7:5f:fd:9e:0a:
96:8f:29:87:d7:a6:a6:82:0b:f5:6e:67:84:94:d6:
17:eb:69:02:03:48:8f:5e:59:9e:d3:22:95:91:17:
41:06:26:37:0b:ff:66:76:bd:4e:a0:e4:df:09:6c:
f9:f3:49:a0:98:07:6f:55:f6:79:a7:71:8d:90:7e:
92:37:ab:be:fa:49:d8:c6:34:7f:3d:2d:ec:99:3b:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:ED:97:9C:E1:E8:17:79:31:11:79:73:51:90:73:7F:5C:04:40:0C
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.64.0/22
84.205.69.0-84.205.70.255
84.205.75.0-84.205.76.255
84.205.80.0-84.205.82.255
84.205.85.0-84.205.86.255
84.205.88.0/24
84.205.91.0-84.205.92.255
93.175.144.0/24
93.175.146.0/24
93.175.152.0-93.175.154.143
IPv6:
2001:7fb:ee00::-2001:7fb:ee05:ffff:ffff:ffff:ffff:ffff
2001:7fb:ef00::-2001:7fb:ef05:ffff:ffff:ffff:ffff:ffff
2001:7fb:fb01:100::-2001:7fb:fb01:200:ffff:ffff:ffff:ffff
2001:7fb:fd02::/48
2001:7fb:fd05::/48
2001:7fb:fe00::/47
2001:7fb:fe03::-2001:7fb:fe07:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe0a::-2001:7fb:fe10:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe12::-2001:7fb:fe19:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe20::/48
2001:7fb:ff00::-2001:7fb:ff02:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff04::/46
2001:7fb:ff0a::-2001:7fb:ff10:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff12::-2001:7fb:ff19:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff20::/48
Signature Algorithm: sha256WithRSAEncryption
7a:28:aa:4b:b4:c3:a7:76:da:41:78:22:24:73:d8:a1:64:2f:
68:11:ff:0e:38:fa:c8:fe:18:04:40:92:c8:6c:65:7b:ce:5e:
5f:fd:be:b3:66:d4:ac:c7:25:7a:a8:ae:b7:80:f9:14:2a:12:
68:67:b3:25:f5:12:4d:6c:aa:a7:cc:86:6e:ed:70:cb:f6:c3:
cc:4c:e7:dc:e9:bc:94:fa:32:20:e8:0f:9d:3e:46:5d:a6:f6:
1b:5f:4f:c5:0f:87:0e:4b:75:09:58:ec:b1:c0:f0:55:6d:ea:
f1:61:68:ba:2a:fc:35:1e:f4:16:39:2c:b7:a9:47:57:a3:08:
8e:85:7c:df:40:45:32:a5:ad:9c:07:96:d9:74:83:e3:f8:b2:
44:23:6b:6e:37:d5:cd:e7:81:ae:09:b5:89:a6:20:79:9a:a0:
2d:1b:f7:7c:c4:20:60:98:3f:93:7f:62:f3:c6:57:da:e2:fc:
f7:e5:5b:34:56:f6:d6:ac:05:af:af:47:f4:87:2b:b6:fc:89:
dc:31:5b:23:91:ed:b6:35:c7:de:fc:4f:eb:25:cf:4d:76:8e:
10:40:50:54:05:28:ec:68:d0:4e:93:87:96:c4:1c:72:3a:d4:
bd:92:53:55:80:58:58:04:a8:4c:4d:17:bc:a4:19:5a:33:97:
66:18:50:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:14 2025 by rpki-client