Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/j0tsqTn3ayL3vokhRt3jI5dXtD4.roa
File: j0tsqTn3ayL3vokhRt3jI5dXtD4.roa (raw, json)
Hash identifier: b6q+1zuDDnF+ykxuqyr2nK0yK8JofIJ/4dPpG7TvhQ8=
Subject key identifier: 8F:4B:6C:A9:39:F7:6B:22:F7:BE:89:21:46:DD:E3:23:97:57:B4:3E
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019422FB6634D4BDE041D11BBA8A8BF36232
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/j0tsqTn3ayL3vokhRt3jI5dXtD4.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 85.204.181.0/24 maxlen: 24
86.105.58.0/24 maxlen: 24
86.105.211.0/24 maxlen: 24
86.107.164.0/24 maxlen: 24
89.39.97.0/24 maxlen: 24
93.113.70.0/24 maxlen: 24
93.119.201.0/24 maxlen: 24
93.119.232.0/24 maxlen: 24
94.176.72.0/23 maxlen: 24
94.176.74.0/24 maxlen: 24
94.176.79.0/24 maxlen: 24
188.208.124.0/24 maxlen: 24
188.208.125.0/24 maxlen: 24
188.209.223.0/24 maxlen: 24
188.214.136.0/24 maxlen: 24
188.214.137.0/24 maxlen: 24
188.214.138.0/24 maxlen: 24
188.214.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:66:34:d4:bd:e0:41:d1:1b:ba:8a:8b:f3:62:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f4b6ca939f76b22f7be892146dde3239757b43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:f5:72:78:db:8c:34:38:90:be:36:08:82:
13:28:78:cd:78:38:0d:a6:f1:a9:28:56:f1:2d:57:
19:a1:82:49:6c:d6:44:40:a6:b8:4b:1c:b8:f5:39:
af:f2:e6:37:81:1e:58:05:60:d8:5b:14:ee:10:d4:
34:fc:94:f3:f9:25:86:f3:47:12:d6:d2:18:64:d8:
fa:f9:4d:92:33:d8:e0:8a:6b:00:f6:f5:14:5b:a9:
0f:2f:d7:b0:bf:55:74:2c:ed:4e:d8:37:c4:64:d6:
26:d2:14:68:3f:eb:38:90:1f:cc:ff:b6:df:46:13:
2b:9d:2f:79:99:54:25:d8:fc:98:32:84:46:27:72:
b7:2d:d5:87:38:87:a3:73:3f:a7:5a:98:8e:e9:04:
02:fc:f8:b3:c6:ed:e1:84:f3:1d:7e:c9:7a:08:6d:
7a:43:ef:86:52:7a:3b:ee:29:ab:9b:eb:9e:46:7c:
15:4a:01:34:13:09:aa:8f:2e:4c:32:92:88:47:1b:
6e:51:20:e2:a0:e3:b3:0c:16:bb:c2:0e:e6:9b:02:
7e:53:83:0d:f2:1e:9e:17:b5:1e:ae:45:0b:1f:c4:
3c:97:ab:45:f6:6c:3d:ff:31:9d:13:f4:b6:7f:25:
f3:97:8e:5f:df:33:9e:56:33:78:65:1c:6a:11:d1:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:6C:A9:39:F7:6B:22:F7:BE:89:21:46:DD:E3:23:97:57:B4:3E
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/j0tsqTn3ayL3vokhRt3jI5dXtD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.181.0/24
86.105.58.0/24
86.105.211.0/24
86.107.164.0/24
89.39.97.0/24
93.113.70.0/24
93.119.201.0/24
93.119.232.0/24
94.176.72.0-94.176.74.255
94.176.79.0/24
188.208.124.0/23
188.209.223.0/24
188.214.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:08:56:1f:b5:4b:33:3e:03:25:4b:04:47:20:d1:2f:f7:f5:
0b:09:a3:25:80:86:29:6c:88:4d:0d:0f:a7:5d:68:63:0f:1e:
67:81:09:4e:7a:2d:ef:3a:e5:aa:c4:54:fb:e1:cf:de:af:6b:
80:3a:6d:90:fb:ba:95:4a:50:50:68:09:72:eb:ff:42:4b:e2:
f9:dd:e2:ed:1a:3a:18:f9:6c:92:67:ad:30:08:73:19:79:d0:
b2:c5:31:34:1c:37:3e:15:b9:48:f3:13:16:70:01:8f:da:42:
fe:9d:f0:65:88:52:3e:0c:87:64:c6:60:77:5b:18:b1:39:e1:
65:54:7d:4a:b8:90:f9:0a:b8:34:ce:9b:76:33:06:58:cd:69:
e7:38:9b:fc:63:ca:a3:76:f7:18:70:26:a0:4d:91:79:73:ab:
2b:b8:f1:93:3a:b1:75:43:ba:45:9d:90:fc:af:60:52:7d:95:
3c:d8:8b:9f:74:2b:c4:6a:83:71:87:40:8d:c9:e1:dc:2b:f4:
7f:98:9f:de:96:4e:21:d1:99:82:35:11:30:09:13:5a:75:99:
73:87:bd:47:5e:9c:db:f4:01:d3:d8:c8:07:7c:6f:6f:f4:1f:
5e:7c:ac:8e:fd:1f:97:42:8a:e6:9d:dd:67:13:d1:bc:6a:81:
ec:ba:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:10 2025 by rpki-client