Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/aMqyaxreF594k7PUorM2R2DddiA.roa
File: aMqyaxreF594k7PUorM2R2DddiA.roa (raw, json)
Hash identifier: wdja3+g6QV3ELn2lN8+qRQkCfbch7pGIC+XPlbhhYdY=
Subject key identifier: 68:CA:B2:6B:1A:DE:17:9F:78:93:B3:D4:A2:B3:36:47:60:DD:76:20
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018C24A4AFB3CED44B7079C3CD8672E6382F
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/aMqyaxreF594k7PUorM2R2DddiA.roa
Signing time: Fri 01 Dec 2023 09:10:21 +0000
ROA not before: Fri 01 Dec 2023 09:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 88.135.96.0/20 maxlen: 24
89.39.210.0/23 maxlen: 24
94.26.110.0/23 maxlen: 24
213.159.136.0/21 maxlen: 24
94.24.108.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:a4:af:b3:ce:d4:4b:70:79:c3:cd:86:72:e6:38:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Dec 1 09:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68cab26b1ade179f7893b3d4a2b3364760dd7620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:28:7c:3f:0f:9a:87:f6:56:ff:80:b6:9e:
ea:74:14:7e:6e:6f:be:19:f3:04:d3:e8:65:ce:fb:
4f:e1:27:7b:a3:dc:0e:a6:98:86:c1:e3:0c:b1:ea:
cb:fb:d3:7b:95:b0:ef:fd:4e:c3:cc:ee:76:38:56:
57:65:8a:8f:89:de:b0:cd:07:43:ec:8a:70:0b:9a:
94:e5:a8:11:d0:b3:a6:64:47:72:8e:b4:b4:42:3e:
cc:d6:e6:89:4b:1d:ab:35:b8:a3:78:c3:e8:80:75:
62:f1:b7:18:fd:c2:92:9c:33:66:38:41:61:12:88:
5f:c8:83:7c:ac:c8:bc:71:7b:65:c5:08:b1:35:3c:
0e:1e:22:f0:be:30:d6:98:e8:99:20:0d:b0:7b:65:
1e:f0:32:4d:6e:fd:55:f3:a5:49:ef:19:1a:3a:2c:
05:14:c5:a6:70:73:a1:79:6e:d3:7c:22:ac:52:77:
2e:87:71:10:b6:c5:71:f9:68:29:6f:c3:be:b4:52:
5d:67:31:b4:e5:c8:6d:8e:e9:31:df:ea:89:1e:3d:
59:4c:3d:89:be:a2:93:bd:f9:0b:0c:9a:ab:4c:53:
25:71:08:59:ad:35:40:1f:e9:22:fc:16:8f:a3:a5:
10:88:13:11:ab:97:26:25:09:93:fa:26:4c:5d:31:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CA:B2:6B:1A:DE:17:9F:78:93:B3:D4:A2:B3:36:47:60:DD:76:20
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/aMqyaxreF594k7PUorM2R2DddiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/20
89.39.210.0/23
89.40.220.0/23
94.24.108.0/23
94.26.110.0/23
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:44:f0:e0:ba:fa:78:30:fc:16:f4:8a:ce:50:03:36:be:50:
92:e6:56:71:0a:81:64:30:f3:83:b6:60:38:fa:5e:4d:b3:13:
eb:a6:39:39:ac:7b:f5:35:6f:70:a3:be:73:a8:d0:eb:76:bb:
d8:e2:81:76:ae:cc:21:9c:69:13:a1:b9:fd:2a:77:2c:dd:a4:
66:d9:38:6b:bc:4c:92:f6:e5:e1:9c:11:7d:5a:90:0c:2e:d2:
9e:58:fe:aa:67:b8:ea:15:18:6b:87:63:fb:83:69:06:10:c0:
d4:58:4a:5a:8c:81:a8:17:ff:24:32:17:f8:3d:60:d0:f1:64:
68:81:4a:47:f5:1a:86:7e:ee:f5:72:54:cc:e1:0f:73:78:3e:
bf:bc:bb:0c:95:22:a0:df:9c:3e:ed:f5:f9:3c:15:14:19:05:
ac:94:df:4a:cd:77:ab:8e:09:35:40:69:da:77:ba:94:1c:c2:
08:92:89:e9:2e:c7:b5:9b:dd:68:9d:82:2d:d6:1b:07:20:20:
9b:9d:ff:92:90:c3:b3:47:b6:82:2c:f5:b0:14:c4:02:08:c0:
b1:66:46:17:98:73:36:1a:29:3b:99:48:cf:9a:a8:23:37:0f:
81:a6:d4:a4:39:af:d8:22:d1:56:4c:f7:7d:5f:d5:e8:d3:e4:
54:ea:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:06:07 2025 by rpki-client