Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/_C0EPscqvOy4hQULICnG6BljiT4.roa
File: _C0EPscqvOy4hQULICnG6BljiT4.roa (raw, json)
Hash identifier: y6EM5ZHzYxsfA8eH8oWRhY9msB39NvknUQiF8L6iNO4=
Subject key identifier: FC:2D:04:3E:C7:2A:BC:EC:B8:85:05:0B:20:29:C6:E8:19:63:89:3E
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018A4FA7161D8750D8A4834478F4376FC6F6
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/_C0EPscqvOy4hQULICnG6BljiT4.roa
Signing time: Fri 01 Sep 2023 07:31:04 +0000
ROA not before: Fri 01 Sep 2023 07:31:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 88.135.96.0/20 maxlen: 24
89.39.210.0/23 maxlen: 24
94.26.110.0/23 maxlen: 24
213.159.136.0/21 maxlen: 24
94.26.24.0/23 maxlen: 24
94.24.108.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
141.136.16.0/20 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:a7:16:1d:87:50:d8:a4:83:44:78:f4:37:6f:c6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Sep 1 07:31:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc2d043ec72abcecb885050b2029c6e81963893e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:6d:51:18:39:8d:a2:75:05:19:e3:47:b3:
ff:a9:c4:ac:ad:32:41:5b:f5:4f:56:8d:cf:ad:05:
68:15:f8:ca:e6:40:9f:19:87:f0:e7:23:42:74:1c:
59:15:e9:58:bb:be:ba:6b:4b:44:ca:4e:6e:33:3d:
c5:2d:e5:2b:7f:a4:9a:bd:c1:18:31:de:ce:71:9e:
36:4e:c2:e2:39:21:ea:dd:3a:af:0e:2c:8d:39:ec:
e9:e1:b6:60:02:b6:36:03:01:6f:20:d9:4d:e5:70:
c7:e4:1e:e3:7d:3e:15:c4:b6:4e:97:6a:91:5a:ca:
ef:6f:6f:7d:b8:cb:94:d5:88:4b:be:a2:d1:20:a1:
2b:5a:89:7d:d7:ee:8a:cb:3b:67:ac:21:34:8f:85:
fa:d0:9e:58:03:f6:e3:7a:44:05:ce:e0:df:53:7c:
4a:e1:03:c8:df:d4:89:11:b9:09:bf:70:9d:1f:7e:
1e:ec:8f:34:d9:d5:0d:55:27:db:fd:ce:46:7c:21:
1c:60:8f:d7:c0:f1:56:70:fb:10:c2:df:09:7a:b5:
3e:df:7e:d2:66:38:bd:82:08:9d:f2:2a:23:e1:59:
32:6a:d9:4b:71:f6:8f:c3:a0:d5:9a:63:55:f5:70:
e7:5e:d6:11:93:7e:5c:d8:17:ea:9d:16:00:04:17:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:04:3E:C7:2A:BC:EC:B8:85:05:0B:20:29:C6:E8:19:63:89:3E
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/_C0EPscqvOy4hQULICnG6BljiT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
89.39.210.0/23
89.40.220.0/23
91.227.240.0/23
94.24.108.0/23
94.26.24.0/23
94.26.110.0/23
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:d3:fb:ba:2c:f9:03:97:52:7f:db:4a:7f:57:0c:30:8a:45:
84:c3:95:34:14:2b:b5:4a:49:a3:b5:c0:d1:44:43:53:66:c0:
ac:fc:83:1d:e2:a0:aa:f7:c2:67:8f:52:1a:cf:26:d5:d2:7d:
a6:e0:39:8c:f8:a9:f5:bd:b5:34:19:f0:bb:f0:78:01:73:77:
c4:d4:88:74:ec:59:4b:75:77:7b:92:b1:16:57:20:4e:e6:31:
06:a3:d9:b0:ec:1e:70:8b:64:37:d1:74:e3:ec:e0:ac:25:c3:
3b:39:5c:9b:4c:2e:fc:ca:f4:01:b7:8b:1f:ff:a3:20:64:83:
34:2b:4a:10:26:aa:68:f6:b7:62:b5:2c:2d:37:48:8d:a2:5b:
f1:a0:12:f6:55:de:01:db:92:95:7d:c9:cf:e5:d2:d0:df:54:
57:31:8f:ca:ba:f4:c8:ec:af:69:ff:70:0b:4e:ea:68:79:c1:
8d:c5:f4:51:db:97:a3:7b:bc:a7:36:46:a1:71:1c:19:c9:6f:
0a:a5:fb:14:72:c3:6e:04:c4:e9:6d:2c:bc:24:7f:71:e9:66:
f2:0c:4e:57:03:6c:54:e2:fa:c0:7b:f6:d7:7e:57:3b:ac:c3:
56:d1:b6:21:d8:22:fe:55:7e:a2:31:1f:20:39:4d:84:20:00:
fe:a6:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:42:01 2025 by rpki-client