Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/8-gEqAotgDSu7E4fcoimRk2x0kY.roa
File: 8-gEqAotgDSu7E4fcoimRk2x0kY.roa (raw, json)
Hash identifier: bLfkBpBSCW8N1LhUnQAv+tpFZylZuTp4InAtVzW+kSE=
Subject key identifier: F3:E8:04:A8:0A:2D:80:34:AE:EC:4E:1F:72:88:A6:46:4D:B1:D2:46
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018293F2830B5D8A900DC126C6A2823D5301
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/8-gEqAotgDSu7E4fcoimRk2x0kY.roa
Signing time: Fri 12 Aug 2022 21:25:19 +0000
ROA not before: Fri 12 Aug 2022 21:25:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 89.116.132.0/24 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:93:f2:83:0b:5d:8a:90:0d:c1:26:c6:a2:82:3d:53:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 12 21:25:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3e804a80a2d8034aeec4e1f7288a6464db1d246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:f2:d3:8c:5c:19:71:28:29:d4:95:57:93:
e4:1b:0c:53:00:bb:51:79:60:48:6c:12:2b:10:30:
10:e6:40:0a:ec:89:25:82:e6:90:8c:0e:09:07:d8:
b8:2b:f5:68:78:ae:3f:76:bf:75:4f:86:a4:d7:29:
44:9b:55:d8:c9:02:c2:eb:f7:83:f8:8e:8c:58:a2:
f9:f6:12:82:52:49:15:87:c4:7e:59:bb:ec:a2:56:
28:c0:a3:5b:d8:bc:95:eb:f8:9b:33:96:73:3c:1c:
06:d7:3d:59:25:cf:69:79:24:57:c0:eb:60:d4:d8:
e0:c2:41:07:e0:b3:34:53:07:f1:a2:6f:0b:36:60:
7f:4f:10:a8:d8:3c:c7:93:01:d8:73:15:8d:b1:84:
e1:a5:8d:f7:9c:8b:14:cf:a4:29:77:e2:a3:68:79:
29:17:66:b3:1b:85:96:d6:3b:b6:09:4a:13:c6:ef:
8c:b7:99:b1:87:90:b2:6d:54:e3:6a:4c:d7:84:a6:
71:39:1b:d6:52:c6:e9:66:17:45:70:00:e7:18:cf:
90:af:c8:ec:bd:82:a0:e7:d4:ef:f3:71:62:ca:f3:
09:76:dc:0d:9b:53:f6:b8:54:0e:b8:1c:c0:a0:8d:
64:16:ed:64:d0:b3:0a:6d:5c:2e:3a:4e:02:18:3a:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:04:A8:0A:2D:80:34:AE:EC:4E:1F:72:88:A6:46:4D:B1:D2:46
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/8-gEqAotgDSu7E4fcoimRk2x0kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.238.0/24
89.116.132.0/24
89.116.140.0/24
89.116.158.0/24
89.116.166.0/24
89.116.179.0/24
89.116.255.0/24
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:a1:0e:3d:38:b4:49:40:57:d5:70:c5:a1:03:be:71:31:89:
83:13:ff:25:91:f4:d2:c8:7a:15:a5:41:7a:07:83:be:da:7a:
74:65:ce:20:98:41:56:5b:cd:bf:5d:8a:23:34:7c:d8:20:33:
ee:80:a4:99:92:62:fd:33:93:3e:77:36:36:a3:b1:df:86:3e:
f6:31:d9:1c:69:5d:18:bb:ae:12:3d:ee:8c:64:0f:3b:08:12:
d5:cb:9d:9c:10:fc:b7:4a:4a:30:8c:a9:91:35:71:0c:0d:2a:
ac:1f:74:34:be:74:1b:6d:64:69:43:6e:75:6d:76:58:ac:9c:
5a:97:fd:39:63:07:ad:e1:56:12:23:4c:b0:98:51:5e:bf:72:
b4:6c:d2:a8:40:a4:7d:be:27:50:ac:ca:b3:a7:ae:7b:b7:d7:
47:83:a2:06:82:c9:a9:40:0d:da:27:70:3b:70:95:98:42:db:
6e:ab:8b:92:41:97:6a:04:84:01:c5:49:50:b2:61:79:2b:01:
b5:94:d9:a9:73:ee:19:69:79:7b:00:3a:23:4e:72:9d:05:34:
40:89:03:1d:49:66:73:f2:c9:0a:21:79:06:b1:7b:1e:95:7f:
a0:de:4a:44:24:b0:2a:47:5f:66:1d:a5:d4:42:fa:d6:e0:65:
e5:80:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:24 2025 by rpki-client