Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/k9VkkHu7wqpz0IelVxE8bU-qY6o.roa
File: k9VkkHu7wqpz0IelVxE8bU-qY6o.roa (raw, json)
Hash identifier: vCMb7FvkUh1quiKigDU5pU3f6Rl+/OZ8cn/L/kTas88=
Subject key identifier: 93:D5:64:90:7B:BB:C2:AA:73:D0:87:A5:57:11:3C:6D:4F:AA:63:AA
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 01942823136E84B36073E3DFB022D35EAC0D
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/k9VkkHu7wqpz0IelVxE8bU-qY6o.roa
Signing time: Thu 02 Jan 2025 17:49:34 +0000
ROA not before: Thu 02 Jan 2025 17:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24951
IP address blocks: 185.154.36.0/22 maxlen: 22
185.154.38.0/24 maxlen: 24
195.144.7.0/24 maxlen: 24
212.71.96.0/20 maxlen: 24
212.71.102.0/24 maxlen: 24
212.71.107.0/24 maxlen: 24
212.71.112.0/20 maxlen: 24
212.71.112.0/22 maxlen: 22
212.71.116.0/24 maxlen: 24
212.71.117.0/24 maxlen: 24
212.71.118.0/24 maxlen: 24
212.71.119.0/24 maxlen: 24
212.71.120.0/21 maxlen: 21
217.20.192.0/20 maxlen: 24
217.20.192.0/24 maxlen: 24
217.71.80.0/20 maxlen: 24
217.71.85.0/24 maxlen: 24
217.71.87.0/24 maxlen: 24
217.71.88.0/24 maxlen: 24
217.71.89.0/24 maxlen: 24
217.71.93.0/24 maxlen: 24
2a00:fb00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:13:6e:84:b3:60:73:e3:df:b0:22:d3:5e:ac:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Jan 2 17:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93d564907bbbc2aa73d087a557113c6d4faa63aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:20:72:e2:10:84:f2:dc:ba:a9:6e:28:82:
0b:84:6b:9b:aa:e1:f9:31:d1:b6:77:47:ea:7f:6e:
c6:8b:37:26:fc:16:0f:18:83:de:0c:e1:88:9e:c0:
53:85:2f:f5:bf:90:ab:37:9a:88:fe:a3:81:e9:2c:
98:43:32:7a:a9:50:f4:eb:8a:c3:b2:2f:a2:5a:98:
a7:a5:22:eb:40:a3:4c:71:19:7f:18:10:cd:e2:bd:
e8:6f:e5:bf:a8:97:37:4e:e2:29:e6:23:37:fa:e8:
0e:78:ca:a1:22:47:0d:ac:89:40:f4:b9:81:6b:1a:
d4:5c:b3:8b:02:d4:43:6e:fc:b7:8e:f6:87:3c:ef:
3c:aa:3e:ae:ce:ba:42:f0:b3:a5:62:77:cc:5c:12:
2d:36:00:2b:37:8c:42:36:b8:87:5b:46:11:e2:03:
54:24:52:3b:81:44:d4:a4:44:ce:59:b6:0a:e3:f2:
64:9e:ac:2b:6e:5f:e7:9a:3b:d3:21:d1:ae:f0:59:
5e:e7:d4:96:b1:aa:7c:6b:ec:de:ea:0f:a4:2f:95:
41:81:c1:02:9e:08:4b:6e:23:42:be:e2:46:65:28:
0c:62:d1:c3:20:4b:ca:c3:b8:ee:12:7b:eb:10:c4:
dc:90:bb:1f:7a:de:2a:04:8a:72:79:e2:61:06:00:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:64:90:7B:BB:C2:AA:73:D0:87:A5:57:11:3C:6D:4F:AA:63:AA
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/k9VkkHu7wqpz0IelVxE8bU-qY6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.36.0/22
195.144.7.0/24
212.71.96.0/19
217.20.192.0/20
217.71.80.0/20
IPv6:
2a00:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
5d:90:7b:c9:40:84:01:fc:63:5a:c6:cc:a3:cb:1c:4b:96:49:
eb:ff:f7:ee:34:c8:d5:67:5e:6b:45:92:71:33:6f:e9:7b:e1:
66:54:92:84:bd:2c:48:da:c4:c8:72:5a:15:12:97:8e:90:dd:
cf:78:1f:ec:b8:d9:eb:e6:47:17:5c:a3:94:09:19:a8:1f:67:
fe:1c:90:4c:4c:b0:43:bb:85:91:5f:dc:0d:16:af:9c:ff:a8:
26:a1:80:61:d2:ef:2e:8b:67:3f:69:00:8b:76:98:e4:0c:27:
b0:26:f3:fd:a4:e4:08:b4:4d:49:95:52:c1:ef:c9:14:b0:e6:
1a:16:ba:7e:47:c4:cc:82:1a:2f:fa:b6:66:a4:3a:11:bb:6f:
20:c8:5c:8b:d6:69:47:92:f7:18:ec:7e:57:74:e2:cd:c9:27:
f5:e7:e1:82:25:34:0e:18:48:cc:03:99:aa:7d:c9:b2:30:ba:
69:77:84:ec:bd:43:7b:19:1e:b6:72:a9:56:35:2a:94:e3:a5:
59:62:56:07:26:b2:bf:7a:79:6e:28:2f:f6:f0:46:ab:92:01:
3c:73:fa:81:61:dc:f5:70:42:68:e7:95:5c:c2:26:a0:51:d1:
7d:93:3b:e1:33:c2:8e:3b:99:33:d9:35:66:85:a3:5b:73:c2:
3d:c5:4d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:47 2025 by rpki-client