Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/DFRvHnIOEohSALE7cr1DMFzARjs.roa
File: DFRvHnIOEohSALE7cr1DMFzARjs.roa (raw, json)
Hash identifier: cAP5xtyhQuK53sxOeCJOPJgNAhGARVo8d78ULbFvVa8=
Subject key identifier: 0C:54:6F:1E:72:0E:12:88:52:00:B1:3B:72:BD:43:30:5C:C0:46:3B
Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial: 01942067C762BE298DE240105F88469325AA
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/DFRvHnIOEohSALE7cr1DMFzARjs.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62167
IP address blocks: 89.107.28.0/22 maxlen: 22
89.107.28.0/24 maxlen: 24
89.107.29.0/24 maxlen: 24
185.44.160.0/22 maxlen: 22
185.44.160.0/24 maxlen: 24
185.44.161.0/24 maxlen: 24
185.44.162.0/24 maxlen: 24
185.44.163.0/24 maxlen: 24
185.163.80.0/22 maxlen: 22
185.163.80.0/24 maxlen: 24
185.163.81.0/24 maxlen: 24
185.163.82.0/23 maxlen: 23
185.163.83.0/24 maxlen: 24
2a01:7520::/32 maxlen: 32
2a01:7520::/48 maxlen: 48
2a01:7520:1::/48 maxlen: 48
2a01:7520:2::/48 maxlen: 48
2a01:7520:3::/48 maxlen: 48
2a01:7520:4::/48 maxlen: 48
2a01:7520:5::/48 maxlen: 48
2a01:7520:6::/48 maxlen: 48
2a01:7520:7::/48 maxlen: 48
2a01:7520:8::/48 maxlen: 48
2a0b:5800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c7:62:be:29:8d:e2:40:10:5f:88:46:93:25:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c546f1e720e12885200b13b72bd43305cc0463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:a3:f8:4a:18:93:94:32:fc:b1:6e:a2:32:
9c:8c:b7:ec:bd:31:41:f0:f7:a0:16:46:92:04:24:
71:9d:fe:ec:fd:21:cf:fc:49:10:bd:e2:70:48:99:
97:27:32:93:89:6e:68:1f:80:57:f2:0c:47:9d:07:
59:1d:aa:fc:49:c8:6c:31:4c:48:81:c2:1d:69:cc:
b1:26:1a:78:cc:6d:97:2b:8c:90:86:64:a5:40:51:
78:b4:1e:a4:ee:fe:0f:f0:a9:9b:3c:6f:de:e3:c8:
1a:eb:7e:1e:37:72:a1:86:60:3e:58:45:60:c1:3d:
6c:b4:27:4c:83:0e:5c:78:32:e6:62:2a:2d:ea:15:
42:b4:7b:4e:6d:91:05:9b:aa:d4:dd:41:63:2a:ab:
56:14:6d:b6:e8:37:18:17:3e:99:d3:58:65:9c:0f:
21:ca:23:07:1b:7f:c3:d3:bf:73:05:44:4b:b4:17:
55:1d:bc:c8:f4:6e:99:4a:1a:52:12:d0:68:2d:8d:
5d:fc:20:f1:0e:7b:ab:26:33:1b:df:a7:b2:36:b3:
29:60:77:f8:38:29:dd:5d:55:b2:be:e8:31:64:be:
35:96:3c:1b:68:a8:98:74:0e:85:b4:ad:b5:e4:e0:
f6:e1:33:15:37:68:a4:27:8f:6b:ad:d0:08:13:1d:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:54:6F:1E:72:0E:12:88:52:00:B1:3B:72:BD:43:30:5C:C0:46:3B
X509v3 Authority Key Identifier:
keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/DFRvHnIOEohSALE7cr1DMFzARjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.28.0/22
185.44.160.0/22
185.163.80.0/22
IPv6:
2a01:7520::/32
2a0b:5800::/32
Signature Algorithm: sha256WithRSAEncryption
8c:3e:2b:05:99:5e:18:1a:32:8c:22:a1:45:9b:5d:48:ae:1c:
55:c8:f7:40:50:7d:c9:e4:28:62:a8:b5:72:04:c6:ef:ab:44:
32:fd:10:73:6a:24:fa:b7:b0:21:bd:9e:7e:d8:15:fc:eb:4e:
e8:d5:80:8e:4d:32:be:77:47:72:24:5f:39:c5:07:32:43:14:
8a:50:2a:d3:9b:8c:fb:5f:e7:83:cb:0d:ab:b0:03:10:12:45:
c7:e5:18:17:b0:4f:29:c8:82:69:f1:89:08:c2:0e:bf:6f:30:
96:ec:6c:49:15:4c:dd:d7:68:a7:c9:e3:7b:c3:84:dc:b4:6c:
96:71:99:b2:ac:cb:8c:32:5f:2f:0b:97:38:34:93:6d:97:81:
05:d9:23:6a:b6:f6:4c:28:41:d7:12:84:58:aa:5b:51:52:51:
c0:53:40:87:f1:f0:54:f5:4f:51:6e:85:7b:8d:8c:1b:45:03:
c1:8f:fc:c8:7a:42:08:c7:d6:3a:01:03:78:3d:01:4a:17:04:
01:60:81:3b:bd:73:fd:59:bc:5f:75:67:7a:8c:39:00:48:5b:
fa:19:9c:3a:8b:1a:09:39:ab:fe:26:b5:f6:8d:15:33:67:e5:
4a:6c:d4:4e:68:00:7b:a1:cb:5b:0c:0a:4b:13:35:47:01:2e:
13:fb:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:39:03 2025 by rpki-client