Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/CeB9PvY5F8bmPUHE1dY7uTGIQyI.roa
File: CeB9PvY5F8bmPUHE1dY7uTGIQyI.roa (raw, json)
Hash identifier: ULcQyvLAYjHigtw5n1Ki6V+9Ijvw1hby3W2fFBeAa3o=
Subject key identifier: 09:E0:7D:3E:F6:39:17:C6:E6:3D:41:C4:D5:D6:3B:B9:31:88:43:22
Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial: 018CC56DE775BEEF1E6919F79AA75C21049C
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/CeB9PvY5F8bmPUHE1dY7uTGIQyI.roa
Signing time: Mon 01 Jan 2024 14:29:23 +0000
ROA not before: Mon 01 Jan 2024 14:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52030
IP address blocks: 46.28.0.0/22 maxlen: 24
46.28.4.0/22 maxlen: 24
77.39.208.0/21 maxlen: 24
46.16.88.0/22 maxlen: 24
46.16.92.0/22 maxlen: 24
67.231.176.0/20 maxlen: 24
185.81.0.0/21 maxlen: 24
86.107.32.0/21 maxlen: 24
46.30.244.0/22 maxlen: 24
46.254.32.0/22 maxlen: 24
46.254.36.0/22 maxlen: 24
93.95.216.0/21 maxlen: 24
185.13.252.0/22 maxlen: 24
89.46.224.0/21 maxlen: 24
46.30.240.0/22 maxlen: 24
2a02:24b8::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e7:75:be:ef:1e:69:19:f7:9a:a7:5c:21:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09e07d3ef63917c6e63d41c4d5d63bb931884322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:7c:8d:4a:ad:79:ee:45:2a:1a:61:3d:01:
82:55:0b:ae:ea:fd:bc:1e:fd:6a:65:9e:6a:54:71:
f3:1a:48:02:e6:38:11:f8:91:59:12:33:e1:1f:81:
aa:96:28:b8:30:00:c5:c4:78:21:09:72:9f:8a:fa:
12:c8:d1:0f:78:7b:8e:5b:7a:ec:fa:ac:31:74:5f:
4a:74:9a:eb:b9:f9:74:8d:72:d0:35:50:a5:8c:7e:
20:e9:e9:f8:7e:55:75:60:f7:b1:35:14:01:57:f6:
e6:7d:36:97:6e:e4:22:fa:c6:e2:f3:e2:fb:0e:07:
0d:99:aa:54:01:2f:d8:1d:c3:50:08:7d:2f:b4:fc:
eb:f2:80:36:fc:1b:ec:4f:92:e2:16:f3:a6:c3:42:
0a:bb:f1:32:9c:e9:6b:73:73:2e:bb:8a:7e:52:e7:
48:61:0f:9b:68:89:08:5a:c7:92:be:d9:f4:3b:dd:
7c:53:4f:f2:56:65:ea:88:90:60:78:a7:e8:48:ea:
f8:57:62:e4:cc:59:39:f7:2a:0a:c1:c5:c7:31:49:
ce:c2:ae:ce:8a:46:33:d4:14:6c:4a:47:40:32:5f:
bf:ca:b3:18:e4:c1:b4:cb:b5:0e:e4:d9:fd:37:56:
48:ca:f4:a1:4b:bd:95:c1:fc:ea:f3:d4:69:59:2f:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E0:7D:3E:F6:39:17:C6:E6:3D:41:C4:D5:D6:3B:B9:31:88:43:22
X509v3 Authority Key Identifier:
keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/CeB9PvY5F8bmPUHE1dY7uTGIQyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.88.0/21
46.28.0.0/21
46.30.240.0/21
46.254.32.0/21
67.231.176.0/20
77.39.208.0/21
86.107.32.0/21
89.46.224.0/21
93.95.216.0/21
185.13.252.0/22
185.81.0.0/21
IPv6:
2a02:24b8::/40
Signature Algorithm: sha256WithRSAEncryption
6b:56:ee:a5:89:cc:da:34:c4:87:5b:29:4a:52:9b:a7:39:e0:
83:44:b9:18:a7:f3:f2:3b:75:f0:2e:2b:a5:07:c5:00:47:31:
35:d3:09:88:7b:c9:77:4b:83:08:d7:5e:6c:e9:88:e6:98:65:
95:6b:c8:0f:99:81:7c:27:f6:fd:70:4b:b0:63:ed:df:24:c1:
b2:94:fd:bf:69:9a:fe:55:e6:34:70:14:4c:61:2f:bb:58:b7:
2c:aa:7e:3f:cb:78:69:1c:85:f1:a5:27:bb:0d:30:64:cb:b6:
e3:6e:a2:0e:42:be:32:e5:05:76:19:11:a8:9a:3d:13:21:e4:
09:90:e4:81:92:30:dd:2b:55:d2:1f:af:60:05:40:7f:ac:36:
18:fb:49:2d:05:43:30:33:95:45:65:99:cd:6e:57:5e:1b:0b:
0a:07:ec:0e:cd:c9:53:26:9b:34:25:24:45:4c:3b:0d:46:e3:
29:59:cf:d1:28:9e:16:2b:57:ea:2f:22:0d:0c:be:b6:24:be:
71:3e:e2:6b:93:88:36:48:66:76:71:c1:ee:d3:db:c2:4b:b5:
f3:e2:6e:bd:c1:f6:8d:b0:fc:cf:04:5b:94:b1:51:19:3f:ad:
93:5e:e5:51:8f:3e:d6:d2:2b:6a:16:9b:5f:94:39:8b:33:87:
2f:c0:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:05 2025 by rpki-client