Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/_P6hKNcleDamC0wsslnhDM8ChpU.roa
File: _P6hKNcleDamC0wsslnhDM8ChpU.roa (raw, json)
Hash identifier: Z9P+XMg0ZbcaYrdTZ6p7bi1XGaDh/6bbyf5Jj3tV6aE=
Subject key identifier: FC:FE:A1:28:D7:25:78:36:A6:0B:4C:2C:B2:59:E1:0C:CF:02:86:95
Certificate issuer: /CN=ddf048ea02b7551533511bfa9040ddabe11974c6
Certificate serial: 018239F090B3C1EC336F4DCC07038260B6FC
Authority key identifier: DD:F0:48:EA:02:B7:55:15:33:51:1B:FA:90:40:DD:AB:E1:19:74:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fBI6gK3VRUzURv6kEDdq-EZdMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/_P6hKNcleDamC0wsslnhDM8ChpU.roa
Signing time: Tue 26 Jul 2022 09:57:23 +0000
ROA not before: Tue 26 Jul 2022 09:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35226
IP address blocks: 89.184.56.0/23 maxlen: 23
185.179.40.0/24 maxlen: 24
89.16.64.0/19 maxlen: 19
109.106.96.0/20 maxlen: 20
78.143.128.0/18 maxlen: 18
109.106.112.0/21 maxlen: 21
109.106.124.0/22 maxlen: 22
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
2a02:2158::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:f0:90:b3:c1:ec:33:6f:4d:cc:07:03:82:60:b6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf048ea02b7551533511bfa9040ddabe11974c6
Validity
Not Before: Jul 26 09:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcfea128d7257836a60b4c2cb259e10ccf028695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:a8:91:a0:ea:33:b9:2c:64:8c:56:38:23:
11:61:8a:72:ea:79:40:1c:64:0f:20:c0:e5:d8:34:
bf:6a:8b:65:b8:fc:c3:80:d9:aa:e9:5d:d4:18:2c:
95:89:d7:98:6d:a7:70:ae:d9:be:f6:b6:35:71:b3:
f6:e1:26:2c:29:30:91:f4:fa:b0:a2:8f:9e:1d:fc:
b7:4e:f9:12:49:0d:cd:94:38:15:4d:dc:5d:89:40:
0b:66:1c:d3:46:f3:25:27:1a:36:0b:9f:da:5e:44:
bc:00:88:63:a2:b5:47:93:e1:ec:ae:c9:56:0d:ea:
38:a3:95:84:67:bf:9f:b6:15:3b:1a:93:33:26:85:
9d:24:81:62:89:3c:26:19:7f:a4:d4:d3:fe:f7:0b:
00:c5:2c:65:a8:6a:2b:07:5b:e7:74:92:e8:cf:24:
e2:fb:b4:22:ac:27:cb:19:3c:3b:54:f3:bb:7b:1a:
1c:20:77:76:f1:b0:ca:f9:b4:7d:24:38:5e:d0:b1:
7f:64:ed:f0:07:8c:22:40:06:4e:c2:2a:a5:13:69:
cf:9e:dc:0c:41:77:88:f5:18:e4:dd:fd:b4:c9:3f:
a5:9f:86:48:7b:7a:89:29:fe:df:b7:37:c4:68:97:
68:fb:1f:57:82:07:a4:9d:7b:fc:c0:53:68:10:5a:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FE:A1:28:D7:25:78:36:A6:0B:4C:2C:B2:59:E1:0C:CF:02:86:95
X509v3 Authority Key Identifier:
keyid:DD:F0:48:EA:02:B7:55:15:33:51:1B:FA:90:40:DD:AB:E1:19:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fBI6gK3VRUzURv6kEDdq-EZdMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/_P6hKNcleDamC0wsslnhDM8ChpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/3fBI6gK3VRUzURv6kEDdq-EZdMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.128.0/18
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
109.106.96.0-109.106.119.255
109.106.124.0/22
185.179.40.0/24
IPv6:
2a02:2158::/32
Signature Algorithm: sha256WithRSAEncryption
43:b5:40:47:7d:ae:7c:39:04:24:5f:68:d5:b4:ec:80:ec:7c:
77:7c:19:95:de:95:2b:7b:45:7e:23:9c:6c:fc:ff:59:b0:1f:
f5:fe:72:e0:a7:c0:54:e2:13:93:6b:51:78:a5:ec:eb:36:ad:
eb:1b:43:96:93:0e:9a:7b:04:9a:75:b7:0c:4b:b1:6b:21:05:
1e:63:a5:2e:42:e7:21:38:65:54:c6:c2:02:10:61:e9:4a:1a:
d0:bb:6d:d0:9d:9b:2e:a0:93:8f:a4:de:b4:79:18:c3:e5:1b:
cd:36:9c:10:11:75:e7:36:57:d9:d9:6e:56:95:e3:25:e3:d1:
e3:e9:76:00:37:39:c5:60:3a:53:fb:80:a3:7c:ec:be:71:2a:
bc:9d:45:55:3b:90:10:7c:be:b3:d5:1a:50:2f:e4:ff:2f:ef:
30:b3:fd:d2:47:45:5e:63:40:ee:47:79:d2:c6:0f:51:06:85:
e3:8f:b4:37:3f:95:60:97:be:bd:e2:d2:a8:b0:77:92:1a:86:
11:55:1e:7c:e2:4d:3a:8e:63:45:b3:cd:4a:6f:e9:3d:97:e4:
9d:eb:6f:fe:22:1a:9f:2d:dc:99:7f:70:e5:72:03:8a:35:2a:
7f:d5:5a:e4:2b:ff:aa:04:b6:05:62:89:bf:8e:3a:f7:f8:9b:
d5:09:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:08:28 2025 by rpki-client