Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ugJiOPFEk_YSMtY2LKegCGEPKok.roa
File: ugJiOPFEk_YSMtY2LKegCGEPKok.roa (raw, json)
Hash identifier: 3vl9kr0TPEPPwWu86DlBMqASTQnyQrXgGf+Hnfd4yA0=
Subject key identifier: BA:02:62:38:F1:44:93:F6:12:32:D6:36:2C:A7:A0:08:61:0F:2A:89
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 08FF76ED
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ugJiOPFEk_YSMtY2LKegCGEPKok.roa
Signing time: Thu 20 Jan 2022 13:11:16 +0000
ROA not before: Thu 20 Jan 2022 13:11:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 89.117.109.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
82.140.182.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.180.0/23 maxlen: 24
89.117.120.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.242.0/23 maxlen: 24
86.38.241.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
86.38.189.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.214.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
86.38.225.0/24 maxlen: 24
86.38.226.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150959853 (0x8ff76ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 20 13:11:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba026238f14493f61232d6362ca7a008610f2a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:02:25:3c:8b:e7:c5:b3:2a:80:40:d0:21:
f8:ba:73:0c:e2:a2:87:29:cb:bd:cb:4b:1f:7e:ba:
ae:3a:1e:77:04:ac:bd:ae:95:60:88:b7:75:f2:bf:
6b:f4:b5:6f:0b:25:75:ab:d9:1a:44:df:d4:a2:a7:
73:66:e9:d6:d7:27:5b:3f:8d:e8:12:0a:43:40:4e:
84:a3:55:72:3c:02:6b:e9:ac:ba:e8:3d:6a:7b:d7:
ec:2f:1d:28:3d:47:ba:03:b3:1d:18:98:cd:82:ba:
e6:1b:81:b7:26:de:ef:d8:27:b0:d9:88:64:eb:64:
99:bf:b3:d2:ec:3c:22:3f:33:9b:d9:ea:c5:4e:7e:
77:c1:9d:5d:1d:ea:53:75:b8:02:a7:62:09:ea:3d:
be:d1:82:55:96:2a:13:10:9b:41:d7:70:82:f4:ac:
a3:d8:23:e0:dc:61:75:5c:f9:3d:60:45:97:01:34:
35:17:35:d7:8d:e1:80:86:5a:25:2c:c9:dd:ad:6f:
39:21:de:b9:22:f9:16:a4:b7:a3:ac:ff:eb:bb:ee:
58:15:da:6b:09:c9:21:05:b4:b7:b0:7d:7a:a8:4e:
19:92:48:5c:a1:01:cf:f3:56:b1:88:14:08:b7:ef:
78:3d:c0:e9:53:77:4a:0b:f6:68:6f:40:fb:10:70:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:02:62:38:F1:44:93:F6:12:32:D6:36:2C:A7:A0:08:61:0F:2A:89
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ugJiOPFEk_YSMtY2LKegCGEPKok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.200.0/24
86.38.175.0/24
86.38.180.0/23
86.38.189.0-86.38.190.255
86.38.200.0/24
86.38.214.0/24
86.38.216.0/22
86.38.225.0-86.38.226.255
86.38.238.0/24
86.38.241.0-86.38.243.255
89.116.56.0/24
89.116.96.0/24
89.116.135.0/24
89.116.156.0/24
89.116.158.0/24
89.116.161.0/24
89.116.175.0/24
89.116.177.0/24
89.116.218.0/24
89.117.109.0/24
89.117.120.0/22
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3c:9f:7d:a5:46:3e:bc:28:59:ae:02:27:2b:8d:4a:bc:5a:
83:1a:4f:9f:1f:90:46:00:d1:82:f3:24:b3:fe:ab:0d:10:18:
ef:54:b7:f8:05:38:e0:21:26:35:30:70:a5:3a:1f:2e:f8:a3:
c9:d6:0b:04:2a:35:93:46:f9:f1:08:e1:f4:8f:7f:c2:ca:24:
80:11:48:b3:d1:03:5a:64:04:14:13:a8:c5:5c:4e:df:2f:69:
53:29:bb:fe:ab:c4:3f:f5:7a:67:03:aa:5f:e4:25:52:bb:7a:
dc:7c:44:ed:1d:0c:f1:93:54:e2:4f:7d:c4:40:f5:2c:31:52:
32:ea:5d:c3:ed:16:38:c7:13:cd:9e:be:ef:e9:81:ce:fc:99:
73:42:97:6a:fc:2f:47:9e:92:65:ec:12:95:5d:64:0d:9e:66:
65:d4:fa:1f:1d:a9:db:56:ab:5b:1a:73:e1:6c:81:47:dd:8d:
08:af:cc:ca:f8:07:03:6c:9d:77:5a:b5:0a:75:0e:d1:a8:d5:
6e:7a:69:d9:3d:7b:ed:19:e6:75:47:87:80:98:2a:9d:7a:ed:
8b:55:9e:40:c0:45:4a:90:dc:56:6c:44:f7:43:6a:d8:f4:11:
d5:22:7a:1f:4e:97:41:57:5e:16:ff:08:97:4c:b9:dd:6a:3b:
cd:1a:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:06 2025 by rpki-client