Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/O1mXPA4sjdsbD8fUvy2_8ae-sUo.roa
File: O1mXPA4sjdsbD8fUvy2_8ae-sUo.roa (raw, json)
Hash identifier: c57KPxoDDHJAdsQ6XLRI8hwFxFvotbx0kTaM/GtzBlA=
Subject key identifier: 3B:59:97:3C:0E:2C:8D:DB:1B:0F:C7:D4:BF:2D:BF:F1:A7:BE:B1:4A
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 04F57C88
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/O1mXPA4sjdsbD8fUvy2_8ae-sUo.roa
Signing time: Thu 28 Apr 2022 05:06:04 +0000
ROA not before: Thu 28 Apr 2022 05:06:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25408
IP address blocks: 109.167.243.0/24 maxlen: 24
109.167.192.0/24 maxlen: 24
109.167.192.0/18 maxlen: 18
77.244.16.0/20 maxlen: 20
77.244.17.0/24 maxlen: 24
77.244.31.0/24 maxlen: 24
77.244.30.0/24 maxlen: 24
194.24.240.0/24 maxlen: 24
194.24.241.0/24 maxlen: 24
84.52.64.0/18 maxlen: 18
84.52.79.0/24 maxlen: 24
84.52.99.0/24 maxlen: 24
195.177.122.0/24 maxlen: 24
195.177.121.0/24 maxlen: 24
195.177.120.0/24 maxlen: 24
195.177.120.0/22 maxlen: 22
195.177.123.0/24 maxlen: 24
185.202.212.0/22 maxlen: 22
185.202.214.0/23 maxlen: 23
109.167.128.0/18 maxlen: 18
91.202.220.0/22 maxlen: 22
62.182.89.0/24 maxlen: 24
62.182.88.0/21 maxlen: 21
194.246.112.0/24 maxlen: 24
195.64.141.0/24 maxlen: 24
195.64.140.0/23 maxlen: 23
194.246.113.0/24 maxlen: 24
2a00:1c78::/29 maxlen: 29
2a00:1c78::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83197064 (0x4f57c88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Apr 28 05:06:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b59973c0e2c8ddb1b0fc7d4bf2dbff1a7beb14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:07:ec:87:88:ee:e9:e5:31:9f:9c:6d:8c:
b3:8a:ee:3c:2b:cd:71:a3:10:10:52:12:ef:bf:eb:
7e:90:63:24:c0:88:2a:19:30:14:32:21:8d:fc:62:
3c:7c:97:1c:59:3f:ff:ed:35:45:59:a3:d8:f9:9e:
d4:f8:43:1d:35:2d:85:2d:46:02:2a:49:b3:c1:3d:
86:99:4d:0b:cd:90:a3:dc:03:b1:33:27:d9:5f:1d:
0b:43:e9:18:74:be:21:11:04:19:83:da:22:64:03:
68:b4:eb:a4:37:88:17:64:ed:55:e0:89:1b:cd:a6:
09:8a:29:2c:20:95:02:48:99:b5:5f:47:00:da:a3:
3c:d2:b8:06:44:3b:83:65:75:0e:db:a1:55:a9:37:
b2:09:2c:84:85:d9:bd:19:43:59:4b:df:f0:81:54:
0a:b8:a4:53:ec:dc:2f:1b:9f:d9:fd:05:1b:98:68:
74:fd:be:64:b8:6d:3b:f8:c3:37:c1:76:64:7a:11:
88:57:53:cd:a5:49:1f:7d:30:e8:75:d1:72:cf:a8:
00:ee:94:bd:18:3a:31:51:4a:9b:dd:19:90:7d:9d:
31:75:29:75:ba:5f:00:e5:62:09:30:e4:7f:82:e1:
cb:3e:ca:31:d5:b2:5d:04:b6:f0:dd:9c:3c:8d:98:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:59:97:3C:0E:2C:8D:DB:1B:0F:C7:D4:BF:2D:BF:F1:A7:BE:B1:4A
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/O1mXPA4sjdsbD8fUvy2_8ae-sUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.88.0/21
77.244.16.0/20
84.52.64.0/18
91.202.220.0/22
109.167.128.0/17
185.202.212.0/22
194.24.240.0/23
194.246.112.0/23
195.64.140.0/23
195.177.120.0/22
IPv6:
2a00:1c78::/29
Signature Algorithm: sha256WithRSAEncryption
1b:68:fb:9d:36:45:25:d8:2e:28:ec:91:8b:64:d8:bb:06:c7:
ea:0d:da:03:8d:eb:c9:c6:71:1c:b6:54:fc:d5:ad:7c:6f:ea:
33:63:10:ba:a1:fd:44:ce:1b:d7:71:91:70:46:51:0d:b7:c1:
bd:ee:ac:ea:71:83:94:60:f2:76:0d:87:2d:55:7f:59:e1:5e:
b5:05:02:81:d2:21:fa:47:b0:a4:c3:c9:f7:2c:08:b3:dd:5a:
8a:35:3b:44:1c:95:48:74:4d:10:df:28:4b:cf:00:20:22:85:
c7:a3:d7:7e:11:6b:1e:46:6a:d6:e2:05:95:53:35:53:ca:1a:
d0:9e:fd:01:06:65:c5:54:84:2a:ad:0c:34:f7:53:33:25:3b:
bd:e2:a2:cb:6e:da:7d:05:fb:8b:b3:62:f7:e0:5d:9f:dc:56:
60:01:c7:48:16:f5:b9:38:80:4d:4b:cf:03:54:02:9b:88:ed:
17:c8:62:9f:04:8e:19:f4:cc:62:1f:39:1d:bd:2c:de:97:de:
14:85:c8:28:c5:43:41:d2:00:bb:44:97:ea:6e:7d:fe:04:50:
b2:66:94:69:c0:c4:2b:40:fa:62:6d:7b:f6:1d:02:5e:18:28:
07:fe:68:c0:1a:be:90:2e:9e:7c:72:7f:1f:50:cf:e0:3c:6d:
6f:8f:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:37:19 2025 by rpki-client