Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa
File: 8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa (raw, json)
Hash identifier: QyI7qjDJOZQBTsa2Xsr+TTNwnCK4F/pFTnriXbmvjf0=
Subject key identifier: F2:6C:D2:BC:2E:2F:E4:D8:B8:D6:DF:05:07:C6:A2:01:F6:23:25:C2
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 019421441B49DD3C0E1A60D0F3D97212F0EE
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8426
IP address blocks: 77.91.200.0/21 maxlen: 21
80.172.0.0/16 maxlen: 18
80.172.250.0/24 maxlen: 24
80.172.251.0/24 maxlen: 24
188.93.224.0/21 maxlen: 21
194.62.240.0/22 maxlen: 22
195.22.0.0/19 maxlen: 19
195.72.136.0/22 maxlen: 22
2001:4cc0::/32 maxlen: 48
2a03:73c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1b:49:dd:3c:0e:1a:60:d0:f3:d9:72:12:f0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f26cd2bc2e2fe4d8b8d6df0507c6a201f62325c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:0e:2e:36:af:4d:67:5c:a1:3c:a0:b1:37:
25:87:93:d0:de:07:f4:37:e8:7a:72:4c:f6:23:56:
8c:6b:3b:d4:42:a8:c6:dd:29:ca:ec:29:de:bb:e5:
aa:64:ba:51:7c:36:9d:af:63:c8:64:c3:fc:b3:cb:
66:23:7b:7d:29:04:70:46:44:d6:08:a9:55:74:b2:
94:ae:e0:c9:e4:5f:26:82:09:89:5f:5e:5e:c6:71:
aa:3b:dd:75:08:0c:3b:1f:f5:5d:7e:06:07:c0:6f:
f5:14:cb:15:be:05:8c:b6:fc:a7:00:43:2f:42:35:
5e:45:e4:54:f0:f2:87:73:54:a3:ee:16:12:a9:6b:
48:f9:28:4b:4c:64:9f:43:67:88:b7:ef:23:23:64:
6c:55:26:46:04:9f:12:0d:ec:3f:35:b7:20:e1:11:
4b:d6:79:46:74:ec:94:0f:45:73:a6:0f:a1:d8:ed:
51:8d:b5:da:d6:22:c4:e7:b9:5a:c1:60:39:58:ad:
17:48:5d:da:13:47:c9:bd:62:4f:dd:34:bb:f9:b4:
6b:63:42:63:e2:48:07:94:a6:d4:d0:ee:fe:52:e8:
db:53:87:61:6c:7c:ed:8f:4a:cf:eb:c9:df:03:2d:
24:39:b2:0a:3d:c8:08:84:8b:ed:06:c4:31:5b:47:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:D2:BC:2E:2F:E4:D8:B8:D6:DF:05:07:C6:A2:01:F6:23:25:C2
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.200.0/21
80.172.0.0/16
188.93.224.0/21
194.62.240.0/22
195.22.0.0/19
195.72.136.0/22
IPv6:
2001:4cc0::/32
2a03:73c0::/48
Signature Algorithm: sha256WithRSAEncryption
a6:b7:37:e2:9b:12:8d:b9:a5:db:62:bb:6d:fb:1a:48:1b:46:
e3:36:6f:b2:39:09:52:19:74:1f:c4:ac:dc:df:ba:bb:c2:7a:
13:aa:67:6f:7f:82:ea:16:7c:01:9b:d9:d0:36:e5:6d:93:3a:
46:ee:92:f4:d1:01:12:73:f5:a0:30:fd:3c:66:48:1f:5d:8c:
0b:b6:0c:78:4a:ee:93:0f:63:7d:db:aa:75:80:5f:4e:30:1f:
55:9f:c0:d0:ab:ca:6a:0f:83:af:ba:02:4c:f2:e5:8d:3c:89:
b1:a8:46:8a:d5:2c:e9:86:96:78:2e:44:8a:e8:e0:44:48:bc:
df:9c:c0:e2:ab:c2:57:22:b7:6a:13:14:56:8d:1d:8f:0c:a9:
85:a9:46:6d:cd:ad:f5:c6:21:21:4e:df:95:fe:a5:4a:c2:70:
47:40:9b:1b:be:55:cb:90:7e:1a:36:cf:2f:18:0e:db:f3:25:
b7:bb:cf:40:f8:ef:56:86:c4:bb:ff:9e:c0:d3:f7:31:23:8b:
eb:32:9a:69:28:41:85:4d:00:22:1d:fd:41:79:49:ba:fb:b0:
f1:ee:2f:ef:bd:c7:cc:cf:eb:52:83:42:ba:aa:06:38:8b:8c:
d3:27:2a:4a:5b:7c:bf:8c:8c:68:37:f3:43:54:ba:17:5f:30:
0a:78:86:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:47 2025 by rpki-client