Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/3rfQ_edaTy6pQHxksqxn0jK_eF8.roa
File: 3rfQ_edaTy6pQHxksqxn0jK_eF8.roa (raw, json)
Hash identifier: JqVIHMP4kYbF0eq/UpcGtm3x6v8JBQrxs609Syck57c=
Subject key identifier: DE:B7:D0:FD:E7:5A:4F:2E:A9:40:7C:64:B2:AC:67:D2:32:BF:78:5F
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018A4FA36BC72C5A6A90C54B3BEBF3A52640
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/3rfQ_edaTy6pQHxksqxn0jK_eF8.roa
Signing time: Fri 01 Sep 2023 07:27:04 +0000
ROA not before: Fri 01 Sep 2023 07:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.46.248.0/22 maxlen: 24
94.24.64.0/21 maxlen: 24
91.245.216.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
192.64.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:a3:6b:c7:2c:5a:6a:90:c5:4b:3b:eb:f3:a5:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Sep 1 07:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deb7d0fde75a4f2ea9407c64b2ac67d232bf785f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:97:94:44:8e:06:bc:50:73:73:5f:b3:49:
46:94:6d:e2:3a:3c:9a:87:14:57:c7:cc:18:92:97:
d6:37:d6:d6:d1:f4:54:23:f5:9f:e5:2e:82:f9:41:
04:4d:b6:7e:c4:b9:f2:b8:d7:47:21:a9:14:41:dc:
45:29:c1:2f:36:28:9f:7f:76:ae:da:25:35:74:20:
b1:1c:07:95:3d:09:2e:1b:0a:ed:65:8c:54:b4:ad:
ca:b9:0a:0f:e6:20:74:0d:57:fc:fb:a4:68:00:75:
14:38:c2:d7:0d:c3:58:3c:13:87:e8:17:d0:18:44:
56:12:93:3d:ec:ad:94:8e:76:7a:b4:45:5e:91:43:
ab:ad:51:31:55:8f:c7:22:9d:c0:a8:2c:37:7a:b4:
78:0b:5b:6d:79:5f:7a:bc:4d:94:d4:58:9d:d3:0b:
ef:95:f7:ee:c8:4e:ab:c2:50:ce:59:00:98:be:75:
6e:12:cd:f0:7f:91:24:09:98:92:c7:83:4d:90:a5:
16:8f:f2:36:ca:82:dc:c9:72:0e:3e:2f:54:2b:a1:
e4:e5:0f:93:4e:ab:d0:73:1c:c7:88:b2:d6:4a:7f:
cf:9d:a0:e5:4e:3e:2e:6d:75:c3:08:af:5d:52:83:
21:2f:9e:2c:00:34:f9:6e:18:d1:9b:f0:48:d8:dc:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:D0:FD:E7:5A:4F:2E:A9:40:7C:64:B2:AC:67:D2:32:BF:78:5F
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/3rfQ_edaTy6pQHxksqxn0jK_eF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.248.0/22
91.245.216.0/23
94.24.64.0/21
94.26.24.0/23
192.64.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:83:f7:b8:ce:e4:b4:98:06:2c:70:ca:50:3a:08:55:f5:07:
63:07:d7:6f:30:e0:93:72:cf:26:79:e8:15:c1:50:46:14:d2:
9c:b2:89:a6:30:ff:a2:f8:a0:73:a5:91:27:e7:11:d4:b3:3d:
75:86:34:70:30:7f:2e:37:c1:6c:c3:68:16:48:0d:84:b9:c2:
aa:c5:4b:99:d5:54:22:00:cb:3f:e5:05:95:eb:ed:89:28:47:
06:96:37:b9:0f:da:83:0b:73:2f:88:1a:26:4c:f4:ec:e6:77:
9a:7f:61:b9:70:81:e2:60:05:0f:72:9e:44:b5:e2:f8:8d:2c:
97:b4:d1:d3:4a:fd:d9:db:6a:bb:18:2b:3a:1e:56:35:a4:2f:
6e:76:2f:45:ec:ff:fa:7f:d3:a1:46:84:ae:ac:61:7e:88:55:
1d:cd:46:84:aa:d7:c0:a2:cc:3c:44:81:83:ca:2c:9b:ed:7f:
cc:35:9e:e5:a9:b7:5e:ae:ae:e4:17:00:19:35:5a:7f:db:9c:
2a:f1:df:66:28:c2:13:59:d7:f0:c8:54:2d:16:2d:da:1c:9c:
50:39:f5:4e:d2:ac:af:cc:ed:e8:77:56:e1:c0:b1:e5:93:d5:
45:de:56:8f:4b:8b:cc:c4:e4:6c:13:b5:7c:08:a4:e8:47:c7:
3f:83:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:05:54 2025 by rpki-client