Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/tuo7ctaFDzjc_yPbpLfbp-6Kkw4.roa
File: tuo7ctaFDzjc_yPbpLfbp-6Kkw4.roa (raw, json)
Hash identifier: V9nN2XUlmLZB9Zjyba64g0v15jfrlBKFY/KZo94Hjr4=
Subject key identifier: B6:EA:3B:72:D6:85:0F:38:DC:FF:23:DB:A4:B7:DB:A7:EE:8A:93:0E
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 044613BD
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/tuo7ctaFDzjc_yPbpLfbp-6Kkw4.roa
Signing time: Sun 26 Jun 2022 08:18:22 +0000
ROA not before: Sun 26 Jun 2022 08:18:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 31.11.40.0/21 maxlen: 24
109.94.144.0/20 maxlen: 24
84.247.4.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
185.200.204.0/22 maxlen: 24
213.159.136.0/21 maxlen: 24
37.251.200.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
193.17.225.0/24 maxlen: 24
88.135.96.0/20 maxlen: 24
46.231.104.0/21 maxlen: 24
37.251.176.0/20 maxlen: 24
84.247.40.0/22 maxlen: 24
89.40.220.0/23 maxlen: 24
86.106.152.0/22 maxlen: 24
141.136.16.0/20 maxlen: 24
176.223.172.0/22 maxlen: 24
86.104.20.0/22 maxlen: 24
94.24.24.0/22 maxlen: 24
176.223.176.0/22 maxlen: 24
195.128.136.0/24 maxlen: 24
86.104.248.0/22 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71701437 (0x44613bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jun 26 08:18:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6ea3b72d6850f38dcff23dba4b7dba7ee8a930e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:09:8a:2d:c1:f3:8c:34:dd:bb:1c:70:e0:
06:eb:b1:df:25:aa:f8:a6:c6:5f:02:cd:ac:18:70:
22:89:f2:37:74:77:d7:58:7a:b9:42:81:9d:29:c3:
97:15:65:28:12:50:f3:c9:a9:15:09:6d:dd:31:ef:
9a:e3:2d:f9:4d:1d:bd:5a:bf:4a:e1:be:1b:db:36:
80:15:5f:cc:ed:90:42:a5:70:e1:9e:ca:09:ce:2b:
d3:e3:b8:6b:9a:a2:a9:2e:51:28:cf:6e:e9:a9:c2:
7e:b2:ef:72:e3:9c:85:da:57:8a:22:c2:10:95:10:
16:a2:cd:b4:a6:e6:57:4b:0f:59:a9:53:25:25:21:
65:d9:89:8c:a1:d0:02:46:05:fc:60:19:09:9e:3e:
b9:91:19:10:89:7a:29:3d:b0:a8:3a:58:09:53:c0:
82:8d:22:76:52:7a:df:9a:18:f5:f6:9f:63:14:ef:
fc:9e:de:4f:76:42:95:cd:91:39:90:5e:62:0e:53:
87:53:b6:75:f7:67:30:46:17:75:81:26:64:ac:ec:
98:06:f3:e7:93:4f:ab:0b:25:62:4b:6a:87:03:2a:
cf:07:6a:3d:ff:1e:db:b6:e8:e1:40:90:56:4b:8b:
38:f3:11:5c:32:f1:58:aa:6c:74:5c:81:12:d4:84:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EA:3B:72:D6:85:0F:38:DC:FF:23:DB:A4:B7:DB:A7:EE:8A:93:0E
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/tuo7ctaFDzjc_yPbpLfbp-6Kkw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.40.0/21
37.251.176.0/20
37.251.200.0/21
46.231.104.0/21
62.122.40.0/21
84.247.4.0/22
84.247.40.0/22
86.104.20.0/22
86.104.248.0/22
86.106.152.0/22
88.135.96.0/20
89.40.220.0/23
91.227.240.0/23
94.24.24.0/22
109.94.144.0/20
141.136.16.0/20
176.223.172.0-176.223.179.255
185.200.204.0/22
192.109.205.0/24
193.17.225.0/24
195.128.136.0/24
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:dd:97:82:be:18:6d:54:6b:32:78:cd:e8:53:55:5b:1c:36:
6d:bf:c6:f5:a6:e1:19:d4:fe:b5:8c:63:d8:ed:2e:7c:e0:27:
4f:cb:89:60:d9:08:16:ba:6a:d5:92:9b:f2:e8:13:d4:60:3c:
48:00:da:b6:51:73:47:13:3b:33:55:41:fe:a3:5e:aa:11:9e:
45:ff:a8:aa:2a:b6:60:b2:6a:ee:e4:10:d8:c3:bc:ed:2f:6e:
09:dd:e6:6d:4c:80:2f:95:1a:24:82:26:a0:ee:07:8e:bb:98:
a2:7c:f4:bc:5e:01:31:ca:83:4f:60:3a:cf:55:47:50:41:22:
b6:59:79:2e:15:8c:f6:07:47:2d:9c:92:5c:63:79:26:94:1a:
48:f5:8b:68:27:fc:ee:7e:e8:22:22:70:51:c3:3c:7e:dc:0d:
2e:d7:67:e8:d5:d4:6e:1a:69:8e:df:1b:c8:bd:a4:25:11:c9:
7f:ae:62:3e:6b:b9:4c:b3:a5:71:58:3e:04:00:e1:88:be:18:
c9:bc:00:ab:8a:9f:7a:84:ed:7a:98:36:79:67:0d:9a:65:33:
1e:5c:89:b7:39:de:17:d8:6a:ed:f9:58:76:9e:42:dd:4d:08:
f2:d6:63:a1:b9:1a:fe:5b:b7:9f:4b:d5:2a:15:e8:19:8a:8d:
5f:10:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:40:17 2025 by rpki-client