Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/8sj8akoHRTPz11r3jLvMNT_NbaE.roa
File: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (raw, json)
Hash identifier: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=
Subject key identifier: F2:C8:FC:6A:4A:07:45:33:F3:D7:5A:F7:8C:BB:CC:35:3F:CD:6D:A1
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 019421B22119D248334985B4E1E1DC578397
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/8sj8akoHRTPz11r3jLvMNT_NbaE.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43128
IP address blocks: 146.247.24.0/22 maxlen: 24
185.148.72.0/22 maxlen: 24
212.44.96.0/19 maxlen: 24
212.44.96.0/20 maxlen: 24
212.44.112.0/24 maxlen: 24
212.44.113.0/24 maxlen: 24
212.44.118.0/24 maxlen: 24
212.44.119.0/24 maxlen: 24
212.44.120.0/24 maxlen: 24
212.44.126.0/23 maxlen: 24
2a02:e8::/32 maxlen: 48
2a02:ec::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:21:19:d2:48:33:49:85:b4:e1:e1:dc:57:83:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2c8fc6a4a074533f3d75af78cbbcc353fcd6da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:05:9c:42:6b:e1:dd:7d:39:e5:d6:85:db:
0f:af:9f:62:8c:b2:04:5d:7e:6b:fc:6e:47:91:3e:
70:f1:0d:8a:e6:da:4f:02:29:35:5d:90:01:04:79:
ab:7c:f1:6f:38:5c:e4:94:80:b1:40:15:6d:0d:c4:
ee:f3:ac:8f:31:72:43:33:39:8a:3b:33:22:be:61:
7e:ed:ae:8f:23:72:11:95:9e:03:f5:56:cf:4b:85:
ec:e2:21:63:a4:64:e4:04:40:33:44:d2:2d:e6:9d:
30:da:0f:a7:80:28:ce:41:50:2e:d3:36:f8:fe:93:
98:ae:94:1b:a2:18:da:ee:67:e6:9f:a3:1e:29:8d:
c2:91:09:44:63:4a:78:30:5a:cc:43:85:a9:d9:fb:
d9:78:6b:81:cd:9b:4f:c0:74:11:71:49:e3:8a:6c:
dc:43:00:1a:4c:01:04:f0:37:94:8f:1b:a1:03:52:
ac:53:27:d0:ab:79:68:d5:81:0f:6a:73:c6:dd:cb:
98:03:3e:29:b9:eb:68:dd:23:de:ea:cb:3d:67:84:
e5:3d:04:89:01:7b:1a:16:ed:b4:9d:ed:60:45:17:
4f:36:3f:d3:82:ed:d7:65:51:03:5c:3c:a5:d4:29:
6b:d1:d5:94:9e:92:29:56:2c:0f:20:ff:a4:75:53:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C8:FC:6A:4A:07:45:33:F3:D7:5A:F7:8C:BB:CC:35:3F:CD:6D:A1
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/8sj8akoHRTPz11r3jLvMNT_NbaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.24.0/22
185.148.72.0/22
212.44.96.0/19
IPv6:
2a02:e8::/32
2a02:ec::/32
Signature Algorithm: sha256WithRSAEncryption
14:1b:6a:76:88:bc:e9:70:8c:d2:73:35:42:aa:cf:94:20:9a:
98:84:90:4b:7d:a3:cc:2b:09:6c:d3:35:47:85:e5:47:93:f0:
bf:e7:75:99:da:8c:80:be:ab:8d:8c:f2:bf:ce:91:90:1a:d5:
40:15:a9:f7:85:16:22:d3:b4:06:4e:4d:93:2c:68:2f:bd:21:
32:5a:ba:23:36:a3:e5:1f:7e:49:3b:2a:bb:74:ad:1d:6f:3f:
af:62:4d:98:d6:db:2c:e6:a1:02:55:0b:d8:28:27:55:6a:50:
6a:d6:58:1f:8f:71:af:36:18:05:35:4b:60:05:e8:5d:ac:03:
b6:a5:ed:e8:90:d4:18:09:f3:f3:23:22:82:1a:39:43:82:78:
e7:aa:92:03:4d:35:d7:19:83:da:1d:38:67:e0:f3:44:49:d2:
7e:57:1e:5d:00:e3:61:69:e3:b9:cf:ac:51:d3:b5:f7:dd:00:
74:b0:2f:5c:f4:7f:3e:39:dc:4e:5c:48:6c:bc:36:c1:ee:ac:
ba:2b:9b:0a:7c:32:83:13:36:4e:63:ec:15:d0:80:37:2f:55:
73:a0:13:2e:33:2b:61:69:08:88:db:01:3c:29:c8:5e:48:88:
e0:5d:ad:e2:34:6f:5c:74:bc:f4:96:7f:3b:c0:d7:64:90:69:
68:9f:e7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:57 2025 by rpki-client