Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cDbb1fLsVVGzsGUKJjEfyGLMHJw.roa
File: cDbb1fLsVVGzsGUKJjEfyGLMHJw.roa (raw, json)
Hash identifier: LnxvTDerf9nWvMp2rDp78xpEKiBqAFklaO/MZSXvIRE=
Subject key identifier: 70:36:DB:D5:F2:EC:55:51:B3:B0:65:0A:26:31:1F:C8:62:CC:1C:9C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01955314CDE781D6E12843C3B981AC95B3DC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cDbb1fLsVVGzsGUKJjEfyGLMHJw.roa
Signing time: Sat 01 Mar 2025 19:00:27 +0000
ROA not before: Sat 01 Mar 2025 19:00:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.88.0/24 maxlen: 24
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.215.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:53:14:cd:e7:81:d6:e1:28:43:c3:b9:81:ac:95:b3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 1 19:00:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7036dbd5f2ec5551b3b0650a26311fc862cc1c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:3d:11:f1:6c:f5:cf:c8:1d:0e:46:5d:64:
94:1e:87:fc:e0:d5:3c:98:a6:da:94:c4:e8:53:a2:
76:bc:b0:32:7e:fd:82:f5:42:39:02:fa:ad:2e:16:
a2:85:26:fa:44:32:47:92:a0:22:5b:ad:fc:2f:1c:
82:59:c9:a7:31:46:52:72:29:65:bb:56:82:7f:11:
14:13:31:86:d2:80:9c:04:04:8b:d9:74:d7:3a:cd:
24:7a:42:34:06:6f:fc:79:65:69:8d:11:98:83:18:
46:67:3d:86:a8:aa:f6:41:7e:39:e3:f4:87:3c:7d:
0a:82:32:8d:e8:a7:f0:0d:11:fe:32:53:fa:80:c6:
25:af:f1:da:fd:4e:fb:20:ed:ce:05:fb:97:40:52:
64:8a:59:0f:64:de:c7:53:2a:a5:d8:79:8a:f4:f4:
1a:08:fc:0b:7a:d9:80:ee:65:f9:e8:8a:66:14:04:
2f:41:e2:33:01:b0:a6:e2:16:44:a4:4d:84:19:10:
07:47:f0:c4:d1:55:2f:91:24:d6:4c:35:5b:81:7b:
1a:66:34:40:4c:48:b1:bc:c7:7c:28:85:ab:f0:b4:
3f:74:d1:b6:1d:d7:34:c6:f5:ee:20:ad:7c:f2:73:
f4:f9:fe:97:02:ab:c0:c8:df:ed:c9:a8:4d:cb:63:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:36:DB:D5:F2:EC:55:51:B3:B0:65:0A:26:31:1F:C8:62:CC:1C:9C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cDbb1fLsVVGzsGUKJjEfyGLMHJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.215.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
55:05:b6:2c:16:e5:67:b7:04:0b:70:c7:5e:49:36:e6:eb:7d:
71:09:b7:43:3b:c6:a5:e6:f6:6d:35:0f:25:fb:91:01:a8:04:
65:ca:c4:34:5c:3a:22:1c:b9:17:2f:ae:8e:bd:c8:cd:e5:d6:
7a:1a:de:fe:74:ef:23:40:40:b7:b3:95:27:5f:39:0a:b2:9c:
58:a6:87:1b:be:27:1d:fe:ee:bf:f5:cf:f2:fb:e4:af:41:32:
3c:96:a3:3a:61:0b:9a:6e:1c:e9:e5:9a:77:7b:07:2a:0a:cb:
66:72:e6:44:f7:c7:e6:46:5e:7f:d4:4f:f8:e7:28:75:2b:96:
59:14:67:b1:2e:be:30:e6:38:d2:bd:96:6a:63:8d:36:80:e6:
6d:46:29:a9:37:c1:ea:44:d4:06:7b:0d:44:e8:57:99:8f:35:
fc:79:24:11:5f:88:56:50:31:f5:44:b3:b3:0b:d6:be:f8:e3:
4a:5b:66:16:7c:00:8b:4b:8f:43:03:ec:c3:a6:2f:e1:b1:e8:
33:a0:51:9e:ad:01:9c:5a:3d:0b:e2:27:14:e5:74:e3:45:b6:
11:c4:dd:3d:18:96:f1:cc:80:1a:62:6d:9c:42:31:cf:f8:59:
4a:86:1a:be:59:0b:61:4f:10:03:2d:44:76:31:ff:e0:2c:0c:
9f:84:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:15:24 2025 by rpki-client