Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/R8UnuSnkRquVE6rhLZawgYINpmA.roa
File: R8UnuSnkRquVE6rhLZawgYINpmA.roa (raw, json)
Hash identifier: Q42lrJM7c9A62nscxet3YMt8RHwBQC9DoP7Of0a4ljU=
Subject key identifier: 47:C5:27:B9:29:E4:46:AB:95:13:AA:E1:2D:96:B0:81:82:0D:A6:60
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018AEA50D3D4F5972CD0380CEEE9F61B76EF
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/R8UnuSnkRquVE6rhLZawgYINpmA.roa
Signing time: Sun 01 Oct 2023 08:18:00 +0000
ROA not before: Sun 01 Oct 2023 08:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 88.135.96.0/20 maxlen: 24
89.39.210.0/23 maxlen: 24
94.26.110.0/23 maxlen: 24
213.159.136.0/21 maxlen: 24
94.24.108.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
141.136.16.0/20 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:50:d3:d4:f5:97:2c:d0:38:0c:ee:e9:f6:1b:76:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Oct 1 08:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47c527b929e446ab9513aae12d96b081820da660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7e:41:4a:ec:2a:0b:d4:27:b7:d2:60:15:35:
28:57:72:81:ca:e7:7d:c7:89:eb:fb:a4:d0:9e:b2:
64:0f:10:84:67:56:da:cc:92:2c:ec:9e:ea:f2:22:
ed:17:6a:2e:ee:c0:0a:57:12:46:af:92:41:7f:e0:
cc:99:9e:ee:f5:a2:96:a7:ba:78:2e:1b:57:1c:e8:
44:17:cb:03:69:68:8e:18:28:f0:db:4e:ca:dc:59:
0b:2c:99:77:9f:8b:38:28:b1:ce:d2:e9:ef:cd:da:
50:20:b9:b0:31:97:e3:20:28:81:90:b1:7e:40:b2:
ef:3c:3b:0c:72:3c:d9:54:be:65:1f:92:bb:87:a2:
31:55:1a:49:c2:dc:0a:71:6c:22:8e:7b:81:48:b1:
fa:b2:f9:d1:3b:a7:01:61:40:fe:04:85:07:70:d2:
25:04:a4:8a:a2:f4:b7:4f:20:b7:21:3e:d6:c3:ce:
19:5b:ed:ec:21:16:28:92:72:04:be:66:50:a6:8a:
e6:95:25:2b:07:f1:8e:39:2a:8c:3b:b3:c3:ab:b2:
7f:c0:9c:d0:db:74:15:3c:f8:38:79:a5:df:c2:0a:
a1:ae:a5:b1:0a:15:14:b9:8f:cb:73:17:0e:df:94:
6e:33:04:0b:59:fb:73:c2:9e:2b:f1:f9:e6:eb:8e:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C5:27:B9:29:E4:46:AB:95:13:AA:E1:2D:96:B0:81:82:0D:A6:60
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/R8UnuSnkRquVE6rhLZawgYINpmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
89.39.210.0/23
89.40.220.0/23
91.227.240.0/23
94.24.108.0/23
94.26.110.0/23
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
77:50:c5:a8:26:8f:ef:6c:89:73:c1:e4:be:4b:3d:27:62:c5:
b3:57:0c:5a:5a:a7:39:b7:04:61:d2:be:18:42:73:21:7c:f6:
f2:c8:61:6e:c7:01:65:64:9d:d6:a9:65:d9:04:00:47:70:6f:
bf:d6:b5:6e:cf:a9:2d:fc:c2:35:6e:f0:76:5b:0e:49:92:25:
5e:f9:91:89:0b:35:ea:cc:d6:01:1d:ef:2d:b1:f6:ba:52:bd:
3e:52:2e:47:d8:c4:6c:95:20:f3:54:cb:a5:c3:22:38:27:ac:
21:d3:2b:73:cb:0e:bb:58:89:ab:39:57:8c:64:9f:0b:41:96:
65:e0:73:19:f0:37:df:78:00:cf:6b:9b:6e:6e:54:07:4b:50:
3b:43:e2:73:f6:81:18:bc:09:fa:08:86:20:20:5c:72:cc:f0:
d6:32:71:85:6c:b3:89:33:c3:89:f9:33:b1:d1:41:3c:48:4a:
c0:c4:a5:47:60:37:b8:5d:3e:70:10:c0:6b:03:91:00:87:82:
a6:35:7a:0d:5d:a1:92:8c:cb:11:c7:81:ad:7e:a0:c1:d3:b9:
a8:30:9e:14:14:50:bb:66:6c:7d:20:39:86:8e:ea:27:99:3f:
be:54:3c:af:fd:44:72:fe:42:73:a2:bb:7d:ed:0d:9e:35:90:
6e:22:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:43:08 2025 by rpki-client