Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/slBsXtz7795w3yRrBkqLem8xqHU.roa
File: slBsXtz7795w3yRrBkqLem8xqHU.roa (raw, json)
Hash identifier: 5yWAk8XQrCPSEHVp+aatykW6cmd4i6mFqWQz2EgVaEI=
Subject key identifier: B2:50:6C:5E:DC:FB:EF:DE:70:DF:24:6B:06:4A:8B:7A:6F:31:A8:75
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 05289244
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/slBsXtz7795w3yRrBkqLem8xqHU.roa
Signing time: Thu 19 May 2022 05:06:18 +0000
ROA not before: Thu 19 May 2022 05:06:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25408
IP address blocks: 109.167.243.0/24 maxlen: 24
109.167.192.0/24 maxlen: 24
109.167.192.0/18 maxlen: 18
77.244.16.0/20 maxlen: 20
77.244.17.0/24 maxlen: 24
77.244.31.0/24 maxlen: 24
77.244.30.0/24 maxlen: 24
194.24.240.0/24 maxlen: 24
194.24.241.0/24 maxlen: 24
84.52.64.0/18 maxlen: 18
84.52.77.0/24 maxlen: 24
84.52.79.0/24 maxlen: 24
84.52.99.0/24 maxlen: 24
195.177.122.0/24 maxlen: 24
195.177.121.0/24 maxlen: 24
195.177.120.0/24 maxlen: 24
195.177.120.0/22 maxlen: 22
195.177.123.0/24 maxlen: 24
185.202.212.0/22 maxlen: 22
185.202.214.0/23 maxlen: 23
109.167.128.0/18 maxlen: 18
91.202.220.0/22 maxlen: 22
62.182.89.0/24 maxlen: 24
62.182.88.0/21 maxlen: 21
194.246.112.0/24 maxlen: 24
195.64.141.0/24 maxlen: 24
195.64.140.0/23 maxlen: 23
194.246.113.0/24 maxlen: 24
2a00:1c78::/29 maxlen: 29
2a00:1c78::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86544964 (0x5289244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: May 19 05:06:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2506c5edcfbefde70df246b064a8b7a6f31a875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:d7:81:16:a0:5a:ed:88:f1:63:a8:c3:95:
d6:cf:46:ee:a2:2e:2f:5d:31:83:0b:da:76:2d:46:
4c:a1:54:92:ff:8d:49:94:2b:36:13:5d:71:b5:7a:
72:c0:93:b4:d0:ac:d9:73:ca:fd:00:67:b9:c2:e4:
b6:d3:03:44:b3:53:5f:e0:61:f4:ca:93:59:ca:a5:
c7:23:f4:f0:8e:17:17:0c:5f:3a:4d:7d:f5:a2:64:
39:18:c4:47:1b:1a:0a:3f:ec:34:5f:7a:13:b7:90:
e3:30:68:69:8b:79:eb:5e:d4:a5:63:d3:a2:f5:bf:
80:ca:f8:b4:91:0e:86:7d:44:ba:1c:8d:1a:9d:a3:
39:83:6e:14:fa:45:d3:03:49:68:f1:b3:69:dc:25:
fd:79:3a:44:92:21:b0:27:61:51:00:52:98:69:1c:
19:eb:46:d0:4a:42:cc:f0:39:58:8a:8b:92:de:33:
6c:af:7c:e3:32:39:91:16:fc:86:92:1c:01:af:74:
db:18:db:34:07:4e:27:e1:d8:c5:65:f8:f2:3b:82:
bc:d4:4a:f6:25:07:62:fe:26:51:3d:20:d3:cf:93:
89:45:e3:4e:b2:9f:4c:6f:0b:c2:9f:f4:cb:fe:f8:
60:3c:d5:59:a3:40:6a:8f:71:56:53:14:d3:96:bc:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:50:6C:5E:DC:FB:EF:DE:70:DF:24:6B:06:4A:8B:7A:6F:31:A8:75
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/slBsXtz7795w3yRrBkqLem8xqHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.88.0/21
77.244.16.0/20
84.52.64.0/18
91.202.220.0/22
109.167.128.0/17
185.202.212.0/22
194.24.240.0/23
194.246.112.0/23
195.64.140.0/23
195.177.120.0/22
IPv6:
2a00:1c78::/29
Signature Algorithm: sha256WithRSAEncryption
80:97:3c:00:9a:a7:33:40:13:c5:2c:b8:fe:7d:8c:50:7a:e1:
63:f6:9e:f0:21:76:49:da:0d:bc:f8:54:38:ff:81:7e:cc:75:
4e:c8:ad:da:25:ba:19:1c:32:02:96:7a:35:1b:a6:90:44:2e:
57:84:39:37:e7:23:d2:1b:0c:d1:02:14:d9:60:f5:9e:50:c4:
aa:e3:ce:dc:d4:41:78:a1:e3:d4:35:11:2b:ab:90:32:b6:d9:
a8:c3:54:d7:b3:56:61:82:69:c4:be:7e:9e:bc:1b:56:5e:80:
cd:2e:b2:0c:54:20:0a:90:29:17:1f:f6:23:ba:75:d9:b8:05:
37:0c:50:0e:2a:6b:34:14:5a:dc:b1:c6:95:f7:c4:f3:2d:20:
7b:99:58:45:a3:11:50:34:a2:f4:e7:c8:f3:fd:d4:41:52:e7:
47:4c:40:13:56:83:e8:c0:e1:26:fc:0e:3d:1c:d4:38:85:98:
09:fa:6e:d6:36:37:c0:8e:47:1a:3b:2e:81:84:33:f4:89:bc:
e7:88:7f:a3:a7:ad:fe:01:74:a0:cc:12:ad:ae:5c:64:cb:24:
f8:b5:b2:95:7d:9d:b9:a6:2e:40:84:b2:6b:e0:b8:fb:5f:e4:
d7:eb:8e:dc:f0:03:11:1d:a9:4b:21:f4:af:31:7d:bb:98:d3:
ba:6e:6d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:44:24 2025 by rpki-client