Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/n35_yU6kP-ODi9S14X5C_nLnhtI.roa
File: n35_yU6kP-ODi9S14X5C_nLnhtI.roa (raw, json)
Hash identifier: VYU2D0GHWc2R+PS3fiV9jFCYxtpzVhYQfAiG13POTRY=
Subject key identifier: 9F:7E:7F:C9:4E:A4:3F:E3:83:8B:D4:B5:E1:7E:42:FE:72:E7:86:D2
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018A409FCE1A87B6A08C34B94B900891AD8C
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/n35_yU6kP-ODi9S14X5C_nLnhtI.roa
Signing time: Tue 29 Aug 2023 09:28:49 +0000
ROA not before: Tue 29 Aug 2023 09:28:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210176
IP address blocks: 94.24.64.0/21 maxlen: 24
109.94.144.0/20 maxlen: 24
89.39.210.0/23 maxlen: 24
46.231.104.0/21 maxlen: 24
37.251.176.0/20 maxlen: 24
213.159.136.0/21 maxlen: 24
94.26.24.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
141.136.16.0/20 maxlen: 24
91.227.240.0/23 maxlen: 24
37.251.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:9f:ce:1a:87:b6:a0:8c:34:b9:4b:90:08:91:ad:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Aug 29 09:28:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f7e7fc94ea43fe3838bd4b5e17e42fe72e786d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:76:24:af:31:8c:69:ba:5a:6b:88:90:2a:
60:7d:26:d5:8c:2c:8a:ec:ee:80:56:84:55:4e:70:
8b:b1:9c:05:0d:f2:ca:c8:3e:10:e8:ed:f3:bc:8c:
68:1f:c9:ab:a3:65:5b:30:f9:fc:ed:c4:9a:62:45:
bb:9e:2c:71:c5:5a:aa:65:7c:09:ef:9c:7c:28:ee:
f7:12:f6:c1:c2:8b:a0:08:83:a4:32:fa:c5:9d:d3:
0c:e3:19:31:17:b1:7a:a5:ce:7e:35:5b:a3:33:64:
91:a2:01:86:ff:b8:46:05:d2:2c:3f:f3:f6:81:1e:
09:28:74:2e:49:a4:d9:6f:d5:32:9e:07:cc:81:d2:
f6:5a:e1:0d:3a:54:0d:02:ba:26:1a:e8:8b:5f:2b:
a0:70:4b:97:b5:d6:ea:e6:4d:88:8e:41:c8:af:53:
bd:ec:f6:75:40:a4:75:37:ea:d9:c2:32:42:f7:7c:
cf:53:22:a0:14:6d:d2:db:bc:d3:63:73:b6:a4:5e:
4a:29:dc:62:61:ed:3c:6d:2a:3b:b5:d7:db:ae:58:
db:a1:7c:d9:c4:1d:50:34:b2:da:f6:91:a2:7f:5f:
45:06:ca:cd:50:4b:9f:ed:db:83:58:c8:be:a9:12:
7e:5a:20:6e:84:64:64:27:42:88:63:b8:b9:52:21:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:7F:C9:4E:A4:3F:E3:83:8B:D4:B5:E1:7E:42:FE:72:E7:86:D2
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/n35_yU6kP-ODi9S14X5C_nLnhtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.176.0/20
37.251.240.0/21
46.231.104.0/21
89.39.210.0/23
89.40.220.0/23
91.227.240.0/23
94.24.64.0/21
94.26.24.0/23
109.94.144.0/20
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
86:59:04:ec:46:02:69:a1:99:a1:7d:b5:d8:04:15:b2:28:57:
46:df:58:cb:50:63:7c:54:3a:34:b9:90:4d:ce:00:7b:e7:46:
50:b8:1d:3d:a8:bc:24:15:0d:db:b0:22:6a:0c:17:88:94:65:
fd:c4:c1:d9:a2:c1:51:2f:c6:98:9b:9f:86:a3:23:61:6f:4d:
83:69:03:79:73:d0:33:f1:d2:3b:fc:ae:b4:a4:62:46:a2:e9:
26:9e:30:b6:2b:05:92:f3:5b:24:e5:03:93:b9:bd:45:4a:6f:
30:bd:c1:1c:10:21:88:5f:33:25:62:60:c3:d6:ca:0c:60:37:
74:00:e5:d1:7d:3a:8c:20:03:e2:65:09:df:9a:a2:6d:49:da:
15:ac:71:18:a2:ad:14:91:a3:32:87:5e:ee:42:78:2c:21:fe:
02:88:6d:e1:e0:aa:9c:d9:61:85:95:b0:51:46:70:0e:34:12:
bf:df:37:71:1e:df:18:7d:f0:ff:f7:5f:86:b6:47:41:0f:03:
70:2c:22:11:ad:66:18:f8:ba:fc:91:61:4e:34:fa:c3:97:d0:
99:bd:ea:b3:a1:d4:46:f4:4e:88:48:47:81:38:86:1c:0b:1a:
97:e3:5d:da:1f:81:59:10:61:ba:3a:25:0b:35:86:ef:91:39:
a1:02:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:00:30 2025 by rpki-client