Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa
File: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (raw, json)
Hash identifier: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=
Subject key identifier: E8:D0:C3:29:35:C8:CD:16:47:7B:F7:A1:4C:35:94:FD:61:D0:AC:91
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01942827FFC965B604CC31FAE3DD47488D51
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa
Signing time: Thu 02 Jan 2025 17:54:57 +0000
ROA not before: Thu 02 Jan 2025 17:54:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 31.129.22.0/24 maxlen: 24
37.220.86.0/24 maxlen: 24
45.95.232.0/24 maxlen: 24
45.95.233.0/24 maxlen: 24
77.83.116.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
92.118.112.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
185.247.184.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ff:c9:65:b6:04:cc:31:fa:e3:dd:47:48:8d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 2 17:54:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8d0c32935c8cd16477bf7a14c3594fd61d0ac91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:86:1b:df:67:58:be:1c:63:b7:98:38:b5:
9b:44:3f:a9:70:ad:88:e6:2b:5b:e9:0f:05:c4:e1:
05:ac:16:60:1d:ad:28:fc:0b:e1:b6:23:57:5c:25:
8d:c3:62:3f:67:35:35:37:8b:49:51:0c:0d:68:16:
0d:07:e6:cc:2f:be:10:f4:da:fb:c7:a8:96:c1:a1:
49:5b:a0:69:75:b2:05:ee:1b:82:d9:a8:db:e0:61:
0c:93:18:ec:94:57:0e:c6:61:0b:07:9a:eb:2a:e7:
be:1b:4f:c4:ab:4a:df:93:f2:36:bc:7f:e4:08:02:
98:4f:84:ef:e5:31:0c:08:53:7f:fe:5f:de:e6:26:
e7:db:ac:63:50:a2:25:e3:6b:f8:31:e4:ad:ec:fe:
fa:b3:b2:70:d0:2d:54:dd:68:aa:75:b5:ef:f5:ed:
dd:44:95:70:e3:41:d1:28:a7:97:e1:f7:98:81:5e:
f0:67:26:61:f8:ae:48:7e:56:aa:94:8d:94:e6:a3:
c2:96:b2:99:07:0d:3f:6a:db:81:0c:04:e1:85:df:
24:79:c3:83:6b:0f:f4:88:ff:94:8b:a9:32:88:29:
ed:46:2f:99:03:76:3a:33:c1:f5:77:2f:72:04:cd:
a1:ac:b7:ff:20:c4:b2:5c:92:0a:41:95:bf:f6:a4:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:C3:29:35:C8:CD:16:47:7B:F7:A1:4C:35:94:FD:61:D0:AC:91
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.22.0/24
37.220.86.0/24
45.95.232.0/23
77.83.116.0/24
89.191.232.0/24
92.118.112.0/24
141.98.233.0-141.98.234.255
185.247.184.0/24
194.28.192.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:90:ae:2c:78:90:fe:8f:33:d7:5d:ef:67:cd:f2:a0:84:79:
88:21:40:10:3f:95:d5:49:ab:84:74:58:f0:eb:66:8a:85:73:
7a:14:eb:1e:57:70:c8:e8:3f:6c:41:f5:06:e2:7d:39:48:1e:
8c:de:4f:23:0b:69:51:8d:25:1e:41:60:1e:d2:ff:29:60:64:
cc:fd:c4:22:68:04:f4:d0:32:2e:0f:10:d6:6a:e7:d2:c8:04:
2a:4b:f5:03:d2:6c:6b:5d:e2:74:e7:72:95:8d:ac:46:2f:26:
48:cb:fd:d2:aa:a7:3a:dc:a6:13:02:ff:ec:1e:d7:fb:c0:b5:
2d:d4:c5:e8:ca:13:a4:83:f0:2d:66:5b:c8:f5:a1:3a:3c:8e:
91:a5:1c:7e:d0:bd:d8:4e:38:aa:27:ee:7c:08:9f:36:80:6e:
64:be:5f:38:1e:1c:1f:49:66:46:4c:d8:51:0c:ad:8d:32:a2:
58:01:08:76:77:53:0c:da:cc:02:6d:7b:7e:be:e9:51:a7:dc:
27:ef:e8:f2:2d:17:ff:bf:7e:af:6a:70:6a:b0:e3:bf:ca:5d:
a7:54:66:8b:ac:20:06:67:a5:82:32:87:27:42:7d:36:b5:b5:
24:f6:56:9e:33:bc:05:0a:17:04:67:94:2d:a3:b7:04:1e:dd:
f6:0b:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:13 2025 by rpki-client