Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/VucIrIMH6pUfaLHpuYowF_D7-B0.roa
File: VucIrIMH6pUfaLHpuYowF_D7-B0.roa (raw, json)
Hash identifier: vbfo2N6x/seRpYz31mXrzlECtW/JhQh3AKdJ//hxOmc=
Subject key identifier: 56:E7:08:AC:83:07:EA:95:1F:68:B1:E9:B9:8A:30:17:F0:FB:F8:1D
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018CC56EC7AB1846BF3077D170E19A53929A
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/VucIrIMH6pUfaLHpuYowF_D7-B0.roa
Signing time: Mon 01 Jan 2024 14:30:20 +0000
ROA not before: Mon 01 Jan 2024 14:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393427
IP address blocks: 88.135.96.0/20 maxlen: 24
89.39.210.0/23 maxlen: 24
94.26.110.0/23 maxlen: 24
213.159.136.0/21 maxlen: 24
94.24.108.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c7:ab:18:46:bf:30:77:d1:70:e1:9a:53:92:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56e708ac8307ea951f68b1e9b98a3017f0fbf81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:8d:b1:ef:f6:26:d3:3d:f9:12:c0:ee:65:
26:6d:7c:e2:e9:9e:72:02:f5:dd:72:8c:3e:c9:fc:
1f:b2:34:bd:11:5b:95:b9:3d:79:ed:64:1b:6e:00:
ff:eb:47:a4:ec:f0:b5:10:f8:d8:85:c7:d1:27:3b:
8d:ac:8a:ed:cd:f8:80:8e:75:e6:be:c3:21:d6:e5:
76:82:e7:10:d8:e8:26:12:ac:73:c9:6e:70:e9:61:
28:49:b2:2e:84:02:d9:00:b0:48:a7:b3:7e:d3:b9:
b9:9f:bd:66:3a:eb:be:ec:10:e0:c7:9f:af:a0:aa:
9f:41:27:df:47:e4:2d:40:5b:54:06:80:fa:6e:2b:
8d:d1:9a:dd:b7:94:27:d2:22:50:cd:f4:0a:67:3e:
dd:1c:da:05:ee:2b:b6:f3:b5:97:3d:4e:19:eb:90:
30:a2:5d:d9:99:bd:b8:52:a5:88:02:34:cf:9b:5c:
ea:33:f0:81:9c:59:16:ba:b4:a5:13:b7:37:f1:6d:
d6:47:83:a5:6c:b7:34:dd:83:4d:13:6d:7c:4d:cf:
b8:01:41:eb:04:d5:8d:d1:0f:04:c0:92:d8:84:2c:
04:72:25:a8:80:a2:2d:21:61:2a:9a:86:33:2d:45:
71:b3:28:75:2b:ea:75:a6:d0:75:47:6b:42:a4:b4:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:08:AC:83:07:EA:95:1F:68:B1:E9:B9:8A:30:17:F0:FB:F8:1D
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/VucIrIMH6pUfaLHpuYowF_D7-B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
89.39.210.0/23
89.40.220.0/23
94.24.108.0/23
94.26.110.0/23
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
34:02:4d:a1:de:61:32:76:50:c6:bd:cd:23:fb:a1:28:ea:23:
4f:98:32:35:bd:a9:77:ee:2f:b4:a9:7e:8b:46:2e:26:6f:28:
73:c4:4f:41:60:cf:8c:7e:35:ee:7e:cf:9a:32:66:62:26:84:
4e:e9:1f:78:33:6f:5d:8c:36:f5:6c:2c:26:3b:f4:de:cb:fb:
7f:3b:58:50:50:53:3c:29:2a:5a:c4:7c:f4:ad:68:a5:14:16:
e3:9d:6f:be:6b:1e:cd:d7:d8:61:f0:14:b0:88:58:86:12:39:
91:5d:22:35:0d:6a:af:48:66:fa:68:db:92:5a:c9:42:ed:08:
99:1d:3f:e7:8e:1e:b4:f6:4b:50:93:74:65:50:a9:60:21:48:
79:25:88:4c:c6:90:f4:ec:17:83:65:c1:e1:f7:ca:07:0e:27:
bf:c1:a2:72:52:f3:7c:ae:b8:11:17:21:45:f4:0f:f1:0a:21:
08:7f:c6:1d:0d:38:24:56:61:ec:00:1b:c1:4c:70:89:20:0a:
9f:bd:48:8c:e8:a5:c3:2f:40:2e:25:2f:58:10:32:d3:55:81:
3a:b2:48:b6:df:a5:04:8a:be:eb:b3:66:79:32:b8:0b:21:8d:
4e:6c:b0:47:d5:9d:a8:ef:a2:0c:d7:69:28:20:c4:1a:1b:b2:
4d:3a:c5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:26:58 2025 by rpki-client