Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/Iel88vR033hS2mHZK9DcUHuaXsA.roa
File: Iel88vR033hS2mHZK9DcUHuaXsA.roa (raw, json)
Hash identifier: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=
Subject key identifier: 21:E9:7C:F2:F4:74:DF:78:52:DA:61:D9:2B:D0:DC:50:7B:9A:5E:C0
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 0195A9379FB0C02D4C2BB5CC8B2B60E456AA
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/Iel88vR033hS2mHZK9DcUHuaXsA.roa
Signing time: Tue 18 Mar 2025 12:25:49 +0000
ROA not before: Tue 18 Mar 2025 12:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13110
IP address blocks: 46.228.80.0/20 maxlen: 20
46.238.64.0/18 maxlen: 18
62.21.0.0/17 maxlen: 17
77.65.0.0/17 maxlen: 17
80.87.32.0/20 maxlen: 20
85.221.128.0/17 maxlen: 17
88.151.136.0/21 maxlen: 21
94.127.104.0/21 maxlen: 21
109.173.128.0/17 maxlen: 17
151.249.80.0/21 maxlen: 21
185.14.72.0/22 maxlen: 22
185.44.172.0/22 maxlen: 22
193.169.208.0/24 maxlen: 24
194.114.148.0/22 maxlen: 22
194.116.138.0/23 maxlen: 23
194.150.206.0/23 maxlen: 23
195.160.180.0/23 maxlen: 23
217.113.128.0/20 maxlen: 20
2001:4020::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:37:9f:b0:c0:2d:4c:2b:b5:cc:8b:2b:60:e4:56:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Mar 18 12:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21e97cf2f474df7852da61d92bd0dc507b9a5ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:04:36:e0:8f:b1:22:47:f4:15:fe:3f:3f:
62:83:d2:ef:23:0c:98:84:d5:c8:18:d2:28:5a:9c:
ef:15:f3:e9:3d:44:02:5e:dd:cd:7d:68:f6:39:c1:
a3:5e:de:fd:17:60:7d:36:f2:1a:a8:d3:b1:fd:1c:
fb:94:e4:da:59:69:30:af:78:c4:12:81:68:ad:4f:
39:b8:d5:8d:8c:85:c2:c6:af:13:1f:a1:e7:17:c6:
e8:ad:d4:5f:b3:1b:60:2b:f8:f8:68:47:15:78:5f:
62:e4:2d:ad:a9:78:23:36:c8:5c:b0:e9:94:4e:52:
f0:b2:38:de:3f:75:f1:f2:63:fe:01:e5:45:e2:7e:
b2:d2:f3:e4:55:6e:3e:9f:e0:b7:79:79:f2:25:ac:
58:d7:2e:0f:06:23:e2:d3:78:de:fb:fc:de:f8:03:
29:14:ce:15:2e:d9:b8:f4:82:97:fd:d0:7e:5a:19:
94:df:8e:e7:72:cc:05:0a:cd:0d:60:6d:43:be:ea:
c6:79:9d:b2:25:28:e8:3b:0a:cb:eb:06:ea:87:2a:
1d:e6:2d:06:ad:6a:46:90:ed:c4:03:8c:aa:86:e0:
69:40:87:76:0d:a0:6e:e6:0d:bc:5e:89:6b:ea:be:
dd:4e:b9:86:51:ca:c1:01:0a:0f:b3:dd:ac:3a:fa:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E9:7C:F2:F4:74:DF:78:52:DA:61:D9:2B:D0:DC:50:7B:9A:5E:C0
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/Iel88vR033hS2mHZK9DcUHuaXsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.80.0/20
46.238.64.0/18
62.21.0.0/17
77.65.0.0/17
80.87.32.0/20
85.221.128.0/17
88.151.136.0/21
94.127.104.0/21
109.173.128.0/17
151.249.80.0/21
185.14.72.0/22
185.44.172.0/22
193.169.208.0/24
194.114.148.0/22
194.116.138.0/23
194.150.206.0/23
195.160.180.0/23
217.113.128.0/20
IPv6:
2001:4020::/32
Signature Algorithm: sha256WithRSAEncryption
de:a8:97:b5:91:3d:54:cf:5a:37:92:7f:b0:fa:f6:a7:96:98:
c0:9c:ba:ac:22:59:af:fa:cf:04:85:16:f0:dd:32:be:a0:a3:
cd:33:da:14:43:8d:b0:93:a5:6e:40:39:12:73:2b:aa:d7:b2:
cd:1c:42:25:6f:9d:3e:12:b0:56:d0:d4:c3:39:16:85:49:34:
a9:21:26:28:9a:f5:e2:1a:2d:64:40:08:f0:66:b8:ec:97:50:
f3:dc:e4:87:9c:d0:9e:50:66:65:24:11:d2:70:c7:60:eb:c4:
28:2e:00:85:f5:8c:bb:50:5d:29:90:51:41:35:17:5f:9e:a7:
8b:c4:bf:10:67:0e:80:86:a7:cf:3b:70:86:b3:a1:be:c0:5d:
a7:e9:52:fb:a1:0a:96:f0:2d:83:5c:55:ea:f1:02:94:71:2d:
fa:74:0b:ff:71:07:be:ae:5d:4e:c4:5d:a2:70:d9:9a:ce:c2:
e7:29:4c:61:ee:c3:d0:51:89:7c:4c:7c:91:a6:5d:6c:8c:50:
17:c9:28:ce:ad:f5:25:eb:67:5f:5d:58:44:f1:d9:81:54:bb:
02:ce:51:35:53:0d:48:3d:c8:8b:a9:03:c0:2b:8b:5d:80:c9:
e8:a3:7f:08:30:47:2e:c2:1a:58:44:41:b4:83:8c:24:7d:b5:
08:30:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:47:51 2025 by rpki-client