Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/748b2SOpFsqv1KgOK-YxsVOsLRY.roa
File: 748b2SOpFsqv1KgOK-YxsVOsLRY.roa (raw, json)
Hash identifier: wPUC9emWJXFVS9AiizuJNogQ73H7yr7GbQPyMZRqqRY=
Subject key identifier: EF:8F:1B:D9:23:A9:16:CA:AF:D4:A8:0E:2B:E6:31:B1:53:AC:2D:16
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 01856F4292B2996D8D065DEA81DE23743D4A
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/748b2SOpFsqv1KgOK-YxsVOsLRY.roa
Signing time: Sun 01 Jan 2023 21:35:12 +0000
ROA not before: Sun 01 Jan 2023 21:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.94.144.0/20 maxlen: 24
84.247.4.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
185.200.204.0/22 maxlen: 24
193.17.225.0/24 maxlen: 24
84.247.40.0/22 maxlen: 24
89.40.220.0/23 maxlen: 24
86.106.152.0/22 maxlen: 24
86.104.20.0/22 maxlen: 24
176.223.172.0/22 maxlen: 24
94.24.24.0/22 maxlen: 24
195.128.136.0/24 maxlen: 24
86.104.248.0/22 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:92:b2:99:6d:8d:06:5d:ea:81:de:23:74:3d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 21:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef8f1bd923a916caafd4a80e2be631b153ac2d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:cc:df:9a:6d:ee:8f:19:eb:28:bd:14:a5:
33:d5:88:e3:d1:22:1e:5d:ad:da:12:dd:ff:3c:0e:
05:a6:94:f3:db:68:56:5f:ab:2c:aa:31:75:46:b8:
7c:86:b8:9e:6a:ed:9b:9d:ac:55:b1:97:41:f3:7f:
41:1f:79:f2:25:43:6a:2e:2f:05:df:a0:5e:34:66:
7d:eb:f5:95:e4:14:f3:f0:81:07:a4:de:52:e3:4d:
bc:20:be:33:62:d6:5b:68:0a:e1:85:84:c0:7e:ac:
cd:44:a6:2a:b1:d1:85:cb:78:35:fe:b6:5d:90:cd:
f3:5b:1e:08:33:c0:bc:c7:d3:7b:f9:4e:d5:c7:61:
06:a2:d9:ce:36:b3:80:de:e0:37:54:ad:7f:91:ba:
39:99:c7:f0:31:60:90:29:13:6d:6d:9b:c5:0a:95:
34:db:2f:fa:a8:2f:8a:ae:6e:f5:ed:99:46:4c:78:
f6:c7:59:39:80:0d:06:10:3e:ce:51:7d:63:c2:79:
a2:4a:8a:c8:73:ca:a8:9f:5b:04:b2:3d:49:ee:49:
3a:ab:fc:c2:bd:e2:d8:68:2e:e1:a7:5e:00:02:99:
dc:27:b4:b3:32:00:6d:89:7e:04:60:99:9d:db:4d:
9d:fc:0d:54:a2:af:c2:4b:10:ba:81:5e:77:39:d1:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8F:1B:D9:23:A9:16:CA:AF:D4:A8:0E:2B:E6:31:B1:53:AC:2D:16
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/748b2SOpFsqv1KgOK-YxsVOsLRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.4.0/22
84.247.40.0/22
86.104.20.0/22
86.104.248.0/22
86.106.152.0/22
89.40.220.0/23
91.227.240.0/23
94.24.24.0/22
109.94.144.0/20
176.223.172.0/22
185.200.204.0/22
192.109.205.0/24
193.17.225.0/24
195.128.136.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c6:f8:8a:17:f2:d8:9f:e8:b6:57:db:a2:52:7d:e6:dd:70:
d3:fe:fa:b7:81:93:db:a2:fc:fc:b6:0d:71:b6:b5:4c:85:dd:
60:29:97:05:25:a0:01:81:1a:19:85:a4:f1:db:3a:4b:22:6b:
bb:0d:1e:e1:68:d3:0f:bf:08:be:d7:f3:be:56:0f:b3:a3:4c:
f4:cd:70:ad:8a:15:89:44:74:ac:e9:19:73:8d:7d:00:e6:14:
7d:17:26:86:1c:e8:30:75:3d:4a:81:77:4c:72:0d:7e:77:54:
74:17:50:33:b9:d3:4c:8b:74:ff:cb:9b:a2:ff:b0:c5:08:77:
96:e7:4c:ad:b9:a0:fa:45:f5:0a:26:47:9b:f0:0c:f4:ae:6f:
c2:52:6f:46:36:87:98:5b:a8:1a:36:67:f2:17:2e:df:2a:68:
e2:22:4e:8d:5c:8a:d9:20:dc:f0:82:69:cb:ca:1d:cb:07:25:
c5:bb:ef:3c:d4:a5:12:04:aa:e5:ad:12:2f:80:6a:21:1d:8b:
e3:34:45:c7:c4:c8:7e:1c:c0:b9:6b:94:61:8b:a3:49:a3:22:
f1:32:fe:1c:50:c4:79:78:c9:40:d1:67:56:09:a7:25:17:ca:
09:3b:e4:ee:bd:38:a1:47:82:3d:ed:ad:19:fb:6a:fa:e2:3f:
f7:19:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:46:45 2025 by rpki-client