Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/8gUZqmscT0E5FlRJlJINO1lU_AE.roa
File: 8gUZqmscT0E5FlRJlJINO1lU_AE.roa (raw, json)
Hash identifier: LSPyJEL1LXfKXwFIF7ZiH81A7634MVZ0hBRLk0aghHc=
Subject key identifier: F2:05:19:AA:6B:1C:4F:41:39:16:54:49:94:92:0D:3B:59:54:FC:01
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 03FB61C8
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/8gUZqmscT0E5FlRJlJINO1lU_AE.roa
Signing time: Wed 25 May 2022 02:37:13 +0000
ROA not before: Wed 25 May 2022 02:37:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 31.11.40.0/21 maxlen: 24
84.247.4.0/22 maxlen: 24
213.159.136.0/21 maxlen: 24
37.251.200.0/21 maxlen: 24
46.19.104.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
37.251.240.0/21 maxlen: 24
193.17.225.0/24 maxlen: 24
84.247.40.0/22 maxlen: 24
141.136.16.0/20 maxlen: 24
176.223.172.0/22 maxlen: 24
86.104.20.0/22 maxlen: 24
176.223.176.0/22 maxlen: 24
109.94.144.0/20 maxlen: 24
192.109.205.0/24 maxlen: 24
185.200.204.0/22 maxlen: 24
88.135.96.0/20 maxlen: 24
46.231.104.0/21 maxlen: 24
37.251.176.0/20 maxlen: 24
89.40.220.0/23 maxlen: 24
86.106.152.0/22 maxlen: 24
94.24.24.0/22 maxlen: 24
195.128.136.0/24 maxlen: 24
86.104.248.0/22 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66806216 (0x3fb61c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: May 25 02:37:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f20519aa6b1c4f413916544994920d3b5954fc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:f4:c8:8c:87:52:d7:aa:89:50:c9:5a:3d:
53:28:34:48:04:6d:24:0b:18:b1:77:3d:35:76:b1:
51:ce:a0:29:08:5b:0e:d4:13:f9:28:3b:bd:12:5e:
e5:51:1d:5c:61:09:08:33:92:4a:d7:38:b8:34:48:
5a:8b:2c:2c:f1:44:8e:b8:5b:ef:0c:68:b2:fa:a4:
e5:2a:21:40:d3:b3:45:87:4e:2a:6c:c9:8c:86:7d:
4d:1d:8d:1a:5e:7f:78:ad:ee:42:5c:f6:95:f7:b6:
2f:e3:ef:a2:b3:df:52:a7:0a:e0:2a:8a:3e:c1:6d:
38:1b:54:b2:ac:e5:01:7a:70:e7:4f:08:9f:92:96:
68:59:12:95:7e:c0:84:a1:ae:0c:ee:15:43:51:43:
d7:65:2b:da:ab:3b:7e:b4:bc:ce:81:5c:7a:ff:a2:
91:27:d0:83:5c:58:90:f0:64:8d:53:91:1a:0b:ff:
8d:41:17:1a:fe:b3:87:55:bd:74:86:15:e0:4c:5a:
6f:a4:7b:7c:ea:55:98:5d:84:cb:80:09:c3:f1:b3:
02:5e:33:e7:7a:bc:7a:ee:2f:19:ef:1f:9b:4c:b7:
c2:09:6c:dc:92:59:70:49:7f:a5:1f:b8:fc:a5:19:
e4:71:86:43:26:2e:0c:b3:79:dc:31:69:29:97:1d:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:19:AA:6B:1C:4F:41:39:16:54:49:94:92:0D:3B:59:54:FC:01
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/8gUZqmscT0E5FlRJlJINO1lU_AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.40.0/21
37.251.176.0/20
37.251.200.0/21
37.251.240.0/21
46.19.104.0/21
46.231.104.0/21
62.122.40.0/21
84.247.4.0/22
84.247.40.0/22
86.104.20.0/22
86.104.248.0/22
86.106.152.0/22
88.135.96.0/20
89.40.220.0/23
91.227.240.0/23
94.24.24.0/22
109.94.144.0/20
141.136.16.0/20
176.223.172.0-176.223.179.255
185.200.204.0/22
192.109.205.0/24
193.17.225.0/24
195.128.136.0/24
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
29:40:26:7b:ff:52:33:39:9b:27:a5:1f:cb:bf:7b:10:9e:20:
50:58:6a:41:51:17:aa:5b:8c:24:ad:9c:c3:74:d9:ee:5c:c1:
3f:4b:bc:5f:bb:d9:40:43:b0:95:22:0d:82:ac:5e:8d:d8:3c:
e2:08:e1:9f:73:84:f4:10:d2:d2:b3:db:8c:bf:66:18:ea:da:
7d:77:1d:98:74:f4:47:e9:d9:20:9b:67:a6:86:c0:f2:91:a4:
5c:b2:8b:e1:3d:3d:ef:70:c9:1d:22:5a:da:d9:67:db:52:f3:
2d:91:a5:d0:38:76:94:50:61:2d:81:28:40:22:d8:7b:d7:2f:
32:cd:df:36:f5:9b:f5:ec:dd:12:ee:1a:85:8a:26:d6:d4:7b:
82:c7:62:3f:42:d3:cb:0f:40:69:46:43:05:b3:9a:e1:cd:ad:
34:14:ee:df:ae:06:d1:bc:76:ca:b4:c3:20:8d:36:18:f0:2e:
e5:24:e3:83:1c:c6:40:d1:7a:3d:eb:36:7a:06:cc:99:69:53:
66:dc:e4:d6:f8:63:5b:b5:01:b5:ca:3a:07:2c:64:c5:5b:9a:
59:98:fb:86:68:15:f9:8a:9b:3e:c3:87:d8:21:0f:f3:31:f6:
2a:fd:30:56:c4:55:01:4f:ea:1f:20:04:b2:80:a5:cf:50:c3:
98:8b:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:54:56 2025 by rpki-client