Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/8TR2tdB6-v2cg_5gIN8cbUhaQ24.roa
File: 8TR2tdB6-v2cg_5gIN8cbUhaQ24.roa (raw, json)
Hash identifier: D+Tra8utkjVR9mIf5Mve0+zh7R43Ix3km/y1ThiOvQ0=
Subject key identifier: F1:34:76:B5:D0:7A:FA:FD:9C:83:FE:60:20:DF:1C:6D:48:5A:43:6E
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0189C1AF1022074D0A8C0DCF71B5ECD723BE
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/8TR2tdB6-v2cg_5gIN8cbUhaQ24.roa
Signing time: Fri 04 Aug 2023 17:53:42 +0000
ROA not before: Fri 04 Aug 2023 17:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 88.135.100.0/22 maxlen: 24
88.135.104.0/21 maxlen: 24
213.159.136.0/21 maxlen: 24
141.136.16.0/20 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:af:10:22:07:4d:0a:8c:0d:cf:71:b5:ec:d7:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Aug 4 17:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f13476b5d07afafd9c83fe6020df1c6d485a436e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:81:03:72:39:d1:b7:6c:7d:63:99:7a:e1:
94:ae:ed:c3:90:a9:66:19:b7:21:f6:67:20:d4:d4:
b7:e9:a5:ef:b5:fe:62:15:cf:78:84:8f:15:42:81:
e0:0e:54:75:c0:fe:fd:8f:85:c8:41:b0:c3:8e:07:
c4:0a:c2:72:a4:96:73:5f:fe:44:c6:38:c1:99:cd:
8c:e4:f8:73:62:b6:26:a2:6c:23:07:31:0d:1f:57:
71:22:91:99:67:fa:60:68:bd:30:e8:60:c5:11:d5:
4c:e0:20:d3:64:f0:03:87:92:b3:42:7b:b6:8e:2f:
15:9f:6d:3a:a1:2f:ca:66:a6:d6:1c:cf:e1:06:b6:
14:4d:54:a4:9c:ba:d4:45:44:a5:d6:01:14:4a:c9:
be:75:9a:e1:5f:06:8f:60:08:b1:bc:1a:cb:e5:f7:
d2:29:20:ed:0e:f7:b7:3c:ce:fc:cf:19:d2:7e:e8:
0d:f6:68:53:5c:af:3e:b9:90:6a:a1:42:9b:2a:8e:
d5:f6:4f:b1:59:81:96:97:43:da:ad:26:24:9e:8c:
6e:37:4a:41:db:2c:86:53:a0:95:1a:11:6e:ed:f6:
87:fa:06:e2:45:75:b3:e6:a2:8c:55:00:b0:fb:16:
92:e7:24:4f:74:70:b0:df:6a:2d:19:bf:17:72:7e:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:76:B5:D0:7A:FA:FD:9C:83:FE:60:20:DF:1C:6D:48:5A:43:6E
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/8TR2tdB6-v2cg_5gIN8cbUhaQ24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.100.0-88.135.111.255
91.227.240.0/23
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
07:24:b9:49:b6:9f:91:2e:6d:c6:55:ee:89:55:9f:fc:a5:dd:
52:e7:0b:3a:d6:9d:02:06:6a:77:37:09:10:b5:5d:da:a1:ce:
0b:fa:1b:4f:e9:09:24:16:89:00:99:05:ac:e1:98:86:29:dc:
cf:b5:4f:4e:d8:85:75:fb:58:0e:05:b3:f5:6a:e8:5f:53:e4:
cb:9b:d8:e7:14:90:6a:1d:64:2e:cd:fc:3a:2c:c8:0e:58:ff:
39:bd:69:a4:5f:c1:ae:cf:9c:cf:14:52:33:2d:91:cc:77:a9:
d6:48:b2:d7:2c:54:59:09:da:42:c8:d4:53:a4:c3:9a:e1:33:
7d:34:7c:e9:ad:95:45:10:50:90:c1:51:ee:ec:1a:8d:98:7d:
0c:9f:ce:7e:a7:f0:ca:1f:93:46:b2:f9:6a:40:7c:f8:f7:7a:
d6:78:c8:77:d9:6a:6a:9c:d9:eb:54:c1:c8:84:5a:2e:08:ce:
25:b9:42:f9:1b:9f:0e:41:da:08:59:f3:b3:d4:62:d0:ec:d0:
0b:83:36:4f:12:87:c4:35:65:4b:21:e4:17:39:9b:f4:c9:fe:
6c:ff:82:14:d1:c9:eb:6e:b1:09:49:34:c3:08:a3:d8:fd:f0:
e8:06:01:cf:bc:b5:e6:51:11:86:62:97:17:e7:4e:dc:fb:3b:
b9:4e:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:48:34 2025 by rpki-client