Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/3rSRd0RZU7FekSH23KpB4AjQvCA.roa
File: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (raw, json)
Hash identifier: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=
Subject key identifier: DE:B4:91:77:44:59:53:B1:5E:91:21:F6:DC:AA:41:E0:08:D0:BC:20
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0194228D39B6DF4C82B80DD29B4D0602D146
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/3rSRd0RZU7FekSH23KpB4AjQvCA.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29286
IP address blocks: 46.164.152.0/23 maxlen: 23
46.164.160.0/22 maxlen: 22
77.222.136.0/24 maxlen: 24
80.91.171.0/24 maxlen: 24
80.91.182.0/24 maxlen: 24
88.81.248.0/24 maxlen: 24
91.204.95.0/24 maxlen: 24
93.183.197.0/24 maxlen: 24
93.183.215.0/24 maxlen: 24
93.183.228.0/24 maxlen: 24
93.183.229.0/24 maxlen: 24
185.8.40.0/24 maxlen: 24
185.8.41.0/24 maxlen: 24
185.8.42.0/23 maxlen: 23
188.0.64.0/23 maxlen: 23
188.0.66.0/24 maxlen: 24
193.108.50.0/24 maxlen: 24
193.108.51.0/24 maxlen: 24
194.146.197.0/24 maxlen: 24
195.69.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:39:b6:df:4c:82:b8:0d:d2:9b:4d:06:02:d1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deb49177445953b15e9121f6dcaa41e008d0bc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:44:7f:45:18:f0:26:8a:40:73:40:35:2d:
93:f4:b4:af:be:f3:e2:b5:a4:73:f5:e1:52:4e:f5:
ae:7d:a4:91:80:65:3f:fd:fe:e2:c8:31:ee:dc:b9:
be:42:d1:bf:2e:04:90:7b:c9:4d:5f:43:4a:76:64:
67:47:ef:e0:eb:1d:9d:3c:0b:08:25:6b:b4:42:01:
f7:b8:e4:1b:2c:b1:0e:ea:37:f2:4b:65:5d:5b:ce:
23:a5:9d:c7:69:94:4b:62:fe:e6:c1:f7:19:3f:1a:
ca:12:4a:da:be:9a:01:93:22:67:68:7e:ed:0e:8c:
e8:3e:2f:18:7c:cf:b5:d6:c2:13:c1:14:17:3c:02:
e2:69:c6:6d:57:82:de:20:34:7d:9a:b1:cc:a0:41:
a7:f7:6e:36:6c:fb:9f:23:19:86:71:3a:9c:9e:d6:
e4:8e:5c:3b:a3:42:25:17:c4:d3:c5:e7:73:cd:3a:
4d:2f:a9:1d:82:4b:96:ab:84:d2:5f:43:2d:93:23:
3b:18:73:50:f7:9c:30:9e:bb:ef:ae:41:06:a5:7c:
9c:f9:6c:23:06:64:d9:8d:20:75:ef:72:3d:14:91:
f2:d1:b2:2f:5f:da:97:af:62:f8:19:6f:bc:29:72:
bc:89:39:06:aa:e3:02:78:71:73:e6:41:38:67:1f:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B4:91:77:44:59:53:B1:5E:91:21:F6:DC:AA:41:E0:08:D0:BC:20
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/3rSRd0RZU7FekSH23KpB4AjQvCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.164.152.0/23
46.164.160.0/22
77.222.136.0/24
80.91.171.0/24
80.91.182.0/24
88.81.248.0/24
91.204.95.0/24
93.183.197.0/24
93.183.215.0/24
93.183.228.0/23
185.8.40.0/22
188.0.64.0-188.0.66.255
193.108.50.0/23
194.146.197.0/24
195.69.176.0/24
Signature Algorithm: sha256WithRSAEncryption
66:87:c0:f9:d7:e6:e6:b7:eb:b5:e2:38:ae:e5:8d:34:f9:12:
a2:8c:b7:4a:ba:99:fc:0e:f8:b6:c5:e6:40:4a:eb:d2:f7:59:
c0:d4:72:10:1d:12:ea:ad:5f:b2:68:8b:d0:46:c2:36:0d:57:
4f:19:5e:95:ea:40:7e:e8:86:36:c6:60:a7:43:a6:14:81:4d:
1b:a8:bf:3f:ed:67:c0:bc:11:36:b8:45:a7:5c:cc:62:37:2c:
2f:85:d8:9b:b6:e5:8c:1b:31:a1:e0:61:d4:83:af:e9:e8:7e:
5c:d8:b4:47:26:79:b3:5f:6a:33:dd:bd:3c:d9:16:f7:0c:bf:
f0:39:66:6a:e0:38:cc:5d:80:b4:00:d3:8c:1c:ed:17:3a:98:
26:20:95:8f:89:00:e8:28:03:55:f5:5b:49:75:66:b1:5a:bf:
8c:4e:dd:f5:94:ba:5d:a9:6e:89:3b:c0:24:e5:7b:a3:b6:56:
fa:6e:5e:89:1d:54:ce:81:fd:0b:8e:95:24:ab:17:ab:4b:c5:
a3:60:56:bc:11:ac:d3:00:e6:d2:72:5a:a8:16:3f:bf:b3:e5:
c7:bf:2e:96:a0:b7:3c:db:81:9e:2b:b0:32:cf:2b:e3:eb:74:
bb:c7:f1:16:e1:eb:52:b4:a7:aa:58:b9:e0:bf:70:0a:ab:6c:
1a:ec:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:19:46 2025 by rpki-client