Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/ENRpPKVVeuPSvspcgSN4si87fJ4.roa
File: ENRpPKVVeuPSvspcgSN4si87fJ4.roa (raw, json)
Hash identifier: abk1k33X/v8bR63+3PIom7EAwOkBeMmNDFvmc1Ja7IU=
Subject key identifier: 10:D4:69:3C:A5:55:7A:E3:D2:BE:CA:5C:81:23:78:B2:2F:3B:7C:9E
Certificate issuer: /CN=425c6104aae83931281e004fad5d9f76232c0978
Certificate serial: 0184ECE4E70CE0BFF0CD43E563C2547CBC91
Authority key identifier: 42:5C:61:04:AA:E8:39:31:28:1E:00:4F:AD:5D:9F:76:23:2C:09:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlxhBKroOTEoHgBPrV2fdiMsCXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/ENRpPKVVeuPSvspcgSN4si87fJ4.roa
Signing time: Wed 07 Dec 2022 14:02:15 +0000
ROA not before: Wed 07 Dec 2022 14:02:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209375
IP address blocks: 89.33.135.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:e4:e7:0c:e0:bf:f0:cd:43:e5:63:c2:54:7c:bc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425c6104aae83931281e004fad5d9f76232c0978
Validity
Not Before: Dec 7 14:02:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10d4693ca5557ae3d2beca5c812378b22f3b7c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:77:89:29:79:16:fa:76:93:0d:9c:fb:4d:d4:
cb:98:31:96:82:de:3e:7e:62:48:05:53:aa:d9:4e:
a7:0d:db:5d:64:49:f7:51:e9:a8:8a:ee:fd:e9:06:
04:b8:70:9c:7b:b6:c5:ed:95:76:9e:52:dd:50:fc:
9a:0d:5f:5d:f0:7e:4d:7f:95:d8:4e:a2:55:40:f5:
70:52:73:a5:1f:1c:83:d2:ac:29:f9:3d:b9:2e:71:
6e:6b:27:59:e4:38:fd:31:14:c8:f5:d4:46:6e:c9:
ee:34:50:7d:1a:a0:4e:99:ac:6d:37:3c:a0:b4:4a:
c9:02:c5:88:c4:ed:2a:ea:36:fd:6f:b4:4c:64:60:
98:08:8f:f8:99:6c:06:84:ed:19:3b:72:c2:dd:9f:
4c:d1:9a:a5:9f:33:cf:be:06:ab:fa:8f:82:18:f7:
4a:12:2d:e7:6c:c8:54:46:76:18:3a:f8:b1:ee:4c:
f9:f2:1b:16:ae:2d:59:a2:00:ad:58:53:0c:7f:b5:
4a:53:62:5f:2e:03:2e:52:9b:b3:7f:4a:70:5f:ba:
27:a1:5e:12:8b:97:58:09:6a:58:f5:15:60:d1:8f:
77:b3:36:91:b6:69:f0:c3:7d:20:23:71:4c:01:20:
bd:9f:01:7e:62:f9:98:57:2a:89:83:13:c6:80:54:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:69:3C:A5:55:7A:E3:D2:BE:CA:5C:81:23:78:B2:2F:3B:7C:9E
X509v3 Authority Key Identifier:
keyid:42:5C:61:04:AA:E8:39:31:28:1E:00:4F:AD:5D:9F:76:23:2C:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlxhBKroOTEoHgBPrV2fdiMsCXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/ENRpPKVVeuPSvspcgSN4si87fJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/QlxhBKroOTEoHgBPrV2fdiMsCXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.168.0/24
89.33.135.0/24
93.114.244.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9f:10:fa:1a:39:da:40:33:54:80:ce:c5:29:e5:99:7d:01:
d3:35:e6:74:da:ec:3c:2d:d3:b3:88:ca:c0:c7:6f:53:ab:66:
ae:ec:39:e3:9b:ab:6d:48:9b:28:38:e3:76:a7:e1:50:a6:6c:
81:cb:36:56:6d:5d:5f:76:e4:5e:fd:2b:47:2d:67:01:9b:f4:
51:33:f5:89:37:85:be:aa:db:83:e3:76:09:a2:43:da:3c:55:
e5:a2:98:1f:69:51:75:cf:3b:a6:91:5a:d8:ce:89:3d:48:76:
d5:da:65:63:54:fb:96:ce:a8:c0:50:a6:8a:66:c8:84:da:60:
d5:08:07:11:78:22:c1:8a:10:25:99:d2:4d:ca:9d:1a:51:64:
50:b0:86:60:18:cc:64:ee:63:d7:64:72:b2:78:86:11:86:82:
aa:15:fd:fe:06:6d:3b:c7:82:f9:53:7c:8d:53:1e:b8:97:4c:
39:b8:1a:a9:8e:e3:c3:d8:00:17:4a:9b:1f:da:0e:65:da:32:
4f:7d:c0:08:f9:3d:f1:2a:8a:6c:99:82:c8:b2:bd:24:52:54:
08:58:0e:cd:76:74:2a:8d:d3:2b:8b:87:3b:3c:32:1c:1f:83:
c4:05:5a:4a:c3:84:38:08:71:0a:3b:e4:b5:cc:3e:4e:07:3e:
92:6d:d1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:56:14 2025 by rpki-client