Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Z6XWeDgp-v6GAcUKzbNMJ6-dB7w.roa
File: Z6XWeDgp-v6GAcUKzbNMJ6-dB7w.roa (raw, json)
Hash identifier: 7IGFincRChpppo/0BnUwpr0W1M4GjqBxmj0VZ/WMfSg=
Subject key identifier: 67:A5:D6:78:38:29:FA:FE:86:01:C5:0A:CD:B3:4C:27:AF:9D:07:BC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01942DD2876015D226CB65B6509518AB472D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Z6XWeDgp-v6GAcUKzbNMJ6-dB7w.roa
Signing time: Fri 03 Jan 2025 20:19:19 +0000
ROA not before: Fri 03 Jan 2025 20:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 89.34.224.0/23 maxlen: 24
89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.42.95.0/24 maxlen: 24
89.42.143.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2d:d2:87:60:15:d2:26:cb:65:b6:50:95:18:ab:47:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 3 20:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67a5d6783829fafe8601c50acdb34c27af9d07bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:84:3a:26:36:a7:d2:96:60:96:81:64:44:a5:
14:76:28:37:10:1f:94:4e:cd:1d:4e:9d:d5:d4:92:
44:9c:19:e3:b4:44:17:6d:70:0d:5e:bf:84:bf:21:
12:df:79:07:09:48:88:8f:fc:53:75:5c:4a:ad:0a:
49:c9:f8:2c:ae:c6:be:8a:ad:6c:a1:ea:b7:f6:75:
c2:57:7d:12:f4:d9:aa:26:ca:8d:87:2a:c2:ea:98:
9a:6f:c5:cd:53:7e:c9:15:24:77:44:01:40:8d:4b:
61:ec:ed:fa:88:51:2f:76:f9:6d:22:17:d6:b9:94:
26:a2:f4:ba:74:70:c0:66:0a:98:a1:8e:a3:5c:57:
3a:74:bd:14:df:5c:7a:4a:0e:9e:c7:8c:4c:0c:57:
35:0e:85:29:aa:d3:6e:94:7d:34:96:b3:aa:f1:9f:
a2:f6:03:63:8a:b2:7c:e6:e1:1e:1a:a8:4e:5b:38:
11:fc:ab:91:1b:0d:13:00:2a:f1:ea:9b:80:71:5b:
20:f2:9e:23:7f:b5:b7:6a:48:c5:9f:68:3d:1c:cd:
62:83:57:13:e8:7e:71:46:a3:21:6d:f4:fd:f6:1e:
fa:52:4e:18:6a:b2:48:a1:36:a6:5d:ed:3c:3d:43:
cc:e9:84:7f:fd:c1:a5:93:2a:cf:02:c0:e1:9e:1a:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A5:D6:78:38:29:FA:FE:86:01:C5:0A:CD:B3:4C:27:AF:9D:07:BC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Z6XWeDgp-v6GAcUKzbNMJ6-dB7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
89.34.228.0/24
89.34.231.0/24
89.38.228.0/23
89.40.82.0/24
89.42.80.0-89.42.82.255
89.42.86.0/24
89.42.95.0/24
89.42.143.0/24
89.43.140.0/24
89.43.143.0/24
89.46.0.0/24
89.46.3.0/24
89.47.99.0/24
89.47.115.0/24
89.47.117.0-89.47.119.255
89.47.125.0-89.47.127.255
93.113.181.0/24
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e8:10:9e:9e:c9:12:13:d9:10:d0:44:06:93:4a:fb:db:b6:
dd:86:04:1e:90:0a:bb:1b:b5:23:09:a6:79:a5:ce:1d:a3:fe:
6b:cb:b3:6d:dd:c9:5e:42:69:28:c8:98:a3:38:8e:f6:75:45:
8e:e0:db:55:03:0f:46:47:a1:f9:9f:99:50:2b:ee:9e:8b:a0:
51:7f:b0:f3:e0:3b:df:e6:b7:a8:8b:5d:63:f8:a0:54:da:71:
6e:69:d4:7e:90:54:a6:d1:b8:44:9d:5f:5d:9a:6f:ad:b0:b9:
3a:bf:fb:7e:de:de:8b:05:19:b6:9d:1a:86:ea:ee:d5:32:bd:
38:13:54:3e:37:84:1e:42:93:9e:5d:84:84:cf:33:2c:51:8b:
38:8b:e8:f0:f3:1c:a7:6c:26:a2:2e:53:6b:33:28:03:57:c2:
f5:26:41:08:5c:9c:47:f4:fc:08:91:2f:11:e5:9a:63:10:f5:
d4:5a:ab:b0:c2:c4:f2:f2:13:6e:42:40:d0:c3:23:b7:f7:01:
08:ba:15:cb:64:bd:76:8a:77:05:bd:c2:83:a0:65:06:89:ad:
0a:75:a0:09:f6:ef:d4:f9:72:dc:53:d0:3e:5a:10:29:a5:7f:
2b:51:82:24:cc:e4:62:96:5a:81:36:cc:dd:b2:27:ad:77:83:
9e:2e:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:17 2025 by rpki-client