Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/8f6CLs7fYruTpFXCVHtkq-xdPMU.roa
File: 8f6CLs7fYruTpFXCVHtkq-xdPMU.roa (raw, json)
Hash identifier: OKWy/3XXTUPEtj0F9LvHLvr49+G/WrB1fkAw+CrDe8M=
Subject key identifier: F1:FE:82:2E:CE:DF:62:BB:93:A4:55:C2:54:7B:64:AB:EC:5D:3C:C5
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA45E5C4B5013DCF041378C952167C
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/8f6CLs7fYruTpFXCVHtkq-xdPMU.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 86.104.215.0/24 maxlen: 24
89.32.200.0/24 maxlen: 24
89.32.204.0/24 maxlen: 24
89.33.83.0/24 maxlen: 24
103.47.52.0/22 maxlen: 22
162.218.158.0/24 maxlen: 24
188.215.5.0/24 maxlen: 24
194.26.149.0/24 maxlen: 24
212.102.116.0/24 maxlen: 24
2a07:4a80::/29 maxlen: 29
2a0a:eb00::/29 maxlen: 29
2a0a:eb00::/30 maxlen: 30
2a0f:c840::/29 maxlen: 29
2a11:3bc0::/29 maxlen: 29
2a11:3bc0::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:45:e5:c4:b5:01:3d:cf:04:13:78:c9:52:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1fe822ecedf62bb93a455c2547b64abec5d3cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:3e:5e:b7:f3:75:e8:b6:54:5d:fc:d1:e4:
e9:1b:57:76:eb:94:81:06:8d:f0:ae:63:dc:53:98:
8a:38:b8:49:57:eb:81:8e:80:28:63:7e:8b:6c:04:
27:c2:58:ab:ed:ec:b2:86:9d:f6:80:6c:c0:de:bb:
a8:63:f5:c5:b4:dc:37:c7:0d:76:b9:ed:af:95:88:
20:7b:a1:1f:ff:26:68:39:be:f9:c7:e9:b6:75:d7:
34:cd:97:0d:2a:1e:26:da:67:4a:72:28:3f:d6:06:
b3:0f:bd:75:c9:ad:3b:68:59:92:55:0b:99:3d:55:
84:50:c7:1e:d8:7e:40:80:7c:7d:ee:5c:c9:10:fd:
e8:71:b5:b8:7b:0b:11:4d:6f:c2:df:82:91:f9:9d:
87:a4:4b:39:a5:b3:76:8d:dc:e4:58:3f:2d:3d:67:
9e:25:ab:03:bd:15:7d:c2:69:d5:cc:ea:b0:03:d0:
c1:85:80:a1:6e:0f:35:44:fa:e6:4a:27:b8:5b:e8:
3e:c8:82:89:7e:2c:5c:5f:3f:88:64:a0:d6:fa:1b:
1e:6a:64:b4:24:86:20:98:80:e8:f6:c5:a8:c0:60:
3e:fa:a4:30:10:d6:0a:8e:97:9c:b0:d3:14:8e:3a:
38:e5:bd:64:ef:cd:6e:4d:a9:85:e0:c9:0c:89:0f:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FE:82:2E:CE:DF:62:BB:93:A4:55:C2:54:7B:64:AB:EC:5D:3C:C5
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/8f6CLs7fYruTpFXCVHtkq-xdPMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.215.0/24
89.32.200.0/24
89.32.204.0/24
89.33.83.0/24
103.47.52.0/22
162.218.158.0/24
188.215.5.0/24
194.26.149.0/24
212.102.116.0/24
IPv6:
2a07:4a80::/29
2a0a:eb00::/29
2a0f:c840::/29
2a11:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:96:88:fb:cf:bd:33:72:47:d9:70:91:b3:47:99:81:f0:df:
36:48:39:74:d3:b2:83:0a:b2:87:a4:aa:ac:ce:89:1a:dc:84:
56:e3:c1:1d:6c:d8:3e:45:45:0a:2d:d6:49:76:8a:13:6f:42:
12:b1:64:71:2b:c9:78:cd:17:fa:e1:cd:12:72:dc:61:bd:72:
21:c4:36:08:28:05:e8:be:63:0a:a2:ac:e5:29:3f:1f:14:25:
f3:9a:69:c5:3d:fb:70:e2:ce:20:a3:45:6c:1f:15:48:33:ec:
56:21:89:f6:54:bf:51:43:3c:e6:3a:e3:e4:3d:ef:b1:01:6e:
00:95:da:c3:80:e6:1a:10:ee:5c:f9:42:e0:c4:cc:70:25:84:
77:41:96:cd:8b:0f:9a:95:d6:74:63:b0:c6:4c:14:c1:5b:82:
be:be:cf:eb:a7:b2:e0:36:2d:f7:9f:f9:33:96:37:13:20:e9:
0e:b5:f4:c0:29:8c:55:03:2a:cf:79:6a:90:12:29:6d:81:f9:
80:1b:a5:c8:0c:a4:e2:eb:19:e5:5c:74:74:45:15:36:67:4b:
c2:67:59:0f:42:a1:e1:7c:4d:13:17:6f:21:0e:05:9c:9a:47:
a3:4e:4d:bc:0a:0a:34:30:ed:61:40:bd:e7:a4:9f:55:0e:36:
8c:a5:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:19:20 2025 by rpki-client