Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa
File: L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa (raw, json)
Hash identifier: ZYuGlloJDpR2SY2TTczc6v50q6dosW6j6YAj25G96Pg=
Subject key identifier: 2F:4B:A3:9B:0C:E4:27:A4:51:1F:8E:5E:BA:00:23:31:80:B6:66:18
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA4545BA0A6AC2D76E24A32EDE01F1
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210906
IP address blocks: 86.104.227.0/24 maxlen: 24
89.47.34.0/24 maxlen: 24
162.218.157.0/24 maxlen: 24
193.200.96.0/23 maxlen: 23
194.29.70.0/24 maxlen: 24
194.29.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:45:45:ba:0a:6a:c2:d7:6e:24:a3:2e:de:01:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f4ba39b0ce427a4511f8e5eba00233180b66618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:2a:8a:5d:ba:de:2d:70:54:0d:6d:62:d4:
d2:4b:81:f5:9d:e0:10:f1:62:9a:d4:9e:27:25:71:
2f:14:28:c0:7e:40:68:e3:40:0d:70:54:3b:bb:31:
b8:61:c5:39:de:06:13:aa:1e:85:1e:74:c8:96:59:
85:c2:26:53:11:92:20:0c:8a:6b:46:92:03:cb:a9:
d3:c2:86:0c:ae:fb:ea:7e:cd:db:25:74:a3:69:24:
f4:80:42:35:49:a5:48:94:f7:23:da:f5:1b:d6:cb:
43:5b:19:f2:d3:70:d9:6f:c2:eb:d4:f3:57:86:79:
36:a1:fd:7c:db:e9:90:72:c1:f7:27:99:4d:73:bb:
e2:e7:52:8b:ea:35:0a:15:7f:a2:ed:cc:31:3d:a9:
0a:04:42:8f:b0:16:ab:64:1d:9f:e6:d4:63:5f:42:
15:c2:19:0f:d1:4e:85:88:ab:57:46:70:d4:72:10:
b7:29:58:d3:6b:07:35:bc:11:d6:44:84:e5:44:9e:
25:a5:e0:bf:81:3b:52:a1:76:5e:73:12:ea:27:3b:
20:fa:c9:c8:70:d9:1b:e4:41:fc:01:31:5f:2a:8d:
ae:03:20:fd:f7:5b:bc:33:04:83:6e:dd:56:62:53:
72:7e:57:aa:4c:f1:5f:83:c6:f4:d7:76:8b:4d:d1:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4B:A3:9B:0C:E4:27:A4:51:1F:8E:5E:BA:00:23:31:80:B6:66:18
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.227.0/24
89.47.34.0/24
162.218.157.0/24
193.200.96.0/23
194.29.70.0/24
194.29.80.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d2:71:6b:fb:5d:dc:89:42:23:50:65:35:0b:e1:e1:b9:ad:
17:3c:21:12:19:b1:00:cd:45:a0:5c:b3:60:61:d1:05:c9:f5:
61:b6:ff:bc:af:ee:d4:90:7d:07:4f:32:6b:98:74:2c:bd:d9:
97:d5:e1:6a:6e:70:2f:c5:87:68:20:f0:79:6f:30:2c:61:6c:
cb:99:55:08:c4:7a:57:42:fa:86:26:66:68:07:68:a1:4b:d5:
e8:73:1d:fb:be:9e:60:cf:b4:34:1a:2e:8a:7c:85:3e:90:80:
a7:4a:42:ce:1a:6f:40:bb:d1:f3:00:65:95:ed:c8:d8:04:84:
46:94:ed:27:82:2b:c9:5f:f1:b8:a7:49:82:04:27:a8:13:0e:
f6:b3:be:0c:60:c9:df:71:6b:64:01:b8:f3:c2:43:00:f6:86:
28:7b:2c:60:e7:d5:3c:9c:f3:6c:f1:7a:57:ba:7d:e6:cf:07:
e1:70:45:33:4e:d1:af:f5:2e:a7:17:85:0d:60:f1:c2:c8:9d:
70:be:bf:ef:ba:de:5f:b1:bf:d7:46:c6:51:95:63:20:d7:a6:
0a:fb:78:ab:e4:3e:d7:fb:68:56:f7:fc:b8:e2:62:61:ba:b7:
ec:a9:9b:2e:a7:0b:a6:ba:9d:50:4f:1e:f1:0d:bb:df:46:eb:
7e:a5:ec:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:31 2025 by rpki-client