Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/i5WlN7YDR6mhXPvWmraQOZU5v-Y.roa
File: i5WlN7YDR6mhXPvWmraQOZU5v-Y.roa (raw, json)
Hash identifier: DBueSNNmd61/4a/g9ZMLeEk3kjko6+GRB4Fi9sSUotI=
Subject key identifier: 8B:95:A5:37:B6:03:47:A9:A1:5C:FB:D6:9A:B6:90:39:95:39:BF:E6
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 01837B6E48E92DCDD8A5C132D19018F1AC27
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/i5WlN7YDR6mhXPvWmraQOZU5v-Y.roa
Signing time: Mon 26 Sep 2022 20:12:48 +0000
ROA not before: Mon 26 Sep 2022 20:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.94.144.0/20 maxlen: 24
84.247.4.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
213.159.136.0/21 maxlen: 24
185.200.204.0/22 maxlen: 24
193.17.225.0/24 maxlen: 24
88.135.96.0/20 maxlen: 24
84.247.40.0/22 maxlen: 24
89.40.220.0/23 maxlen: 24
86.106.152.0/22 maxlen: 24
86.104.20.0/22 maxlen: 24
176.223.172.0/22 maxlen: 24
94.24.24.0/22 maxlen: 24
195.128.136.0/24 maxlen: 24
86.104.248.0/22 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7b:6e:48:e9:2d:cd:d8:a5:c1:32:d1:90:18:f1:ac:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Sep 26 20:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b95a537b60347a9a15cfbd69ab690399539bfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:82:b7:c0:23:e9:e5:58:f1:de:4d:f1:c8:
e0:d2:69:a1:f4:14:fd:6b:cd:74:b4:4e:ee:c0:95:
f4:d6:df:35:07:a3:07:50:8e:b7:e9:b1:07:48:98:
62:46:1b:c3:3e:e8:78:a9:82:f9:0b:da:e2:fd:e1:
87:52:c7:8c:e0:1b:a4:c8:1a:b6:88:f4:a1:a4:c0:
bb:58:11:96:af:80:c2:6b:3c:a9:fb:5d:46:05:12:
e4:43:1f:d7:b0:b3:3c:97:3d:2e:77:04:66:bd:1a:
42:ac:ca:79:12:64:01:ec:16:66:e7:20:6d:0f:3c:
54:bd:66:18:b9:8a:61:d1:7d:8f:e2:a0:09:5b:61:
a8:f8:7c:a1:44:66:ce:de:bf:00:8e:12:ae:d5:6a:
d5:8f:08:4c:6c:90:bb:7a:0d:f7:50:07:f3:e4:1e:
ad:f6:35:19:2a:6b:01:69:d1:97:53:17:88:be:20:
15:a8:fa:73:15:0e:51:12:f9:9d:16:ba:80:d1:42:
8b:7c:eb:f0:bc:21:e9:5d:2c:df:94:03:24:09:c8:
a2:4d:22:2f:9b:a7:29:75:73:d4:a5:5c:1c:3b:77:
c4:74:8c:1f:cd:9e:c2:5e:bd:92:9c:5e:95:7d:09:
f1:13:60:2d:0a:5e:f1:14:3b:3e:19:dc:3d:12:df:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:95:A5:37:B6:03:47:A9:A1:5C:FB:D6:9A:B6:90:39:95:39:BF:E6
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/i5WlN7YDR6mhXPvWmraQOZU5v-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.4.0/22
84.247.40.0/22
86.104.20.0/22
86.104.248.0/22
86.106.152.0/22
88.135.96.0/20
89.40.220.0/23
91.227.240.0/23
94.24.24.0/22
109.94.144.0/20
176.223.172.0/22
185.200.204.0/22
192.109.205.0/24
193.17.225.0/24
195.128.136.0/24
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
81:ca:d3:7e:88:4f:9e:ad:2d:54:1d:29:dc:e5:86:f7:24:dd:
cc:6d:1b:96:c1:f5:fc:cc:a3:97:18:3d:28:11:d8:7a:db:8f:
64:78:46:15:60:10:6a:1b:03:96:d6:dc:a2:a8:52:95:8b:08:
ef:05:4d:4a:b5:b0:50:fa:f5:6a:77:2f:a5:25:35:1e:2b:16:
c0:72:73:d4:46:00:ac:18:d4:8a:a0:42:71:68:b4:84:3e:43:
0d:6f:96:d4:ef:bf:59:3c:5b:6e:5b:4d:66:bb:d9:99:20:fe:
74:37:9c:af:09:62:ca:bf:3d:92:58:9c:fc:29:e0:05:ea:0d:
92:66:4f:79:65:df:c4:0f:a9:02:d0:b7:15:69:60:8f:f5:3b:
28:7d:bf:47:40:17:91:14:e9:e6:f5:97:dd:35:f2:78:95:b7:
72:9e:ac:20:2b:be:a0:cd:68:5d:c3:41:0a:b8:84:7e:90:b1:
3f:eb:d3:d0:d5:66:30:cc:f8:e2:ff:b8:c5:b3:f1:cd:8f:6f:
12:51:a0:84:dc:d0:cc:e2:1c:e0:e3:b6:c1:f8:17:94:f7:16:
c8:d2:d1:92:6f:82:36:8d:5e:65:be:c4:4c:95:3b:d8:90:56:
3a:59:93:90:7c:c3:f5:78:b3:29:06:ea:db:1e:ef:b5:09:7c:
2b:52:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:58:38 2025 by rpki-client