Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/toA6fcim-TuzVTlz-EzqxNl5ecY.roa
File: toA6fcim-TuzVTlz-EzqxNl5ecY.roa (raw, json)
Hash identifier: OSSxdODE+aUf6naXA8rY9rZUZoFs6BV4Bk38XU01Oec=
Subject key identifier: B6:80:3A:7D:C8:A6:F9:3B:B3:55:39:73:F8:4C:EA:C4:D9:79:79:C6
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01893A8EE732D4908091A454F826DC1BE936
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/toA6fcim-TuzVTlz-EzqxNl5ecY.roa
Signing time: Sun 09 Jul 2023 12:09:50 +0000
ROA not before: Sun 09 Jul 2023 12:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8895
IP address blocks: 212.138.250.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.104.0/24 maxlen: 25
212.138.108.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.121.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.128.0/24 maxlen: 24
212.138.126.0/24 maxlen: 25
212.138.130.0/24 maxlen: 24
212.138.43.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.190.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.153.0/24 maxlen: 24
212.138.157.0/24 maxlen: 24
212.138.166.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.176.0/24 maxlen: 24
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:8e:e7:32:d4:90:80:91:a4:54:f8:26:dc:1b:e9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jul 9 12:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6803a7dc8a6f93bb3553973f84ceac4d97979c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4e:69:8d:42:58:1b:9c:ed:6d:eb:20:3e:d2:
92:30:f4:b6:8c:d3:5f:c5:bc:b0:71:23:8d:58:8c:
fe:21:56:89:86:e5:e9:6d:37:58:4e:b5:32:13:20:
fd:26:a6:21:37:a8:0f:a6:ae:19:11:bc:ca:4d:78:
39:ec:57:42:18:86:02:6e:24:83:78:67:a4:d7:77:
9d:07:69:82:1c:90:c6:06:de:e4:03:5c:8c:09:9f:
ec:d4:8b:45:57:4e:d8:9b:ae:00:cf:61:4f:90:89:
47:50:56:37:e8:73:9a:f4:7b:cf:17:84:66:a3:02:
a6:a4:a1:8f:db:ef:0b:62:ce:60:cd:3a:2f:06:53:
97:f3:52:38:b3:dd:e7:c5:8c:b0:ae:a1:14:94:42:
bf:ae:d4:a3:df:86:c8:4a:02:1d:d8:16:b4:d7:07:
e1:25:f2:a9:f0:f6:ed:6c:2c:b9:31:b5:c6:e6:21:
ff:a6:86:84:d2:48:59:c6:84:93:e0:e2:fc:cc:c0:
91:c3:b8:50:64:3b:e8:37:a4:6a:1d:b2:ec:63:fc:
5b:c1:84:f8:ad:f6:25:94:e4:24:f8:9b:01:2f:9a:
5f:4f:30:41:c4:91:48:20:83:39:20:9d:22:7d:7e:
19:d3:2e:83:23:16:9e:10:5b:d2:7a:10:ec:d3:03:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:3A:7D:C8:A6:F9:3B:B3:55:39:73:F8:4C:EA:C4:D9:79:79:C6
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/toA6fcim-TuzVTlz-EzqxNl5ecY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.138.43.0/24
212.138.52.0-212.138.67.255
212.138.72.0/21
212.138.84.0/23
212.138.104.0/24
212.138.108.0/24
212.138.115.0-212.138.121.255
212.138.125.0-212.138.126.255
212.138.128.0/24
212.138.130.0/24
212.138.134.0/24
212.138.139.0-212.138.140.255
212.138.153.0/24
212.138.157.0/24
212.138.160.0/24
212.138.162.0/24
212.138.166.0/24
212.138.168.0/24
212.138.172.0/24
212.138.176.0/23
212.138.183.0/24
212.138.185.0/24
212.138.187.0/24
212.138.190.0/24
212.138.194.0/24
212.138.196.0/24
212.138.201.0/24
212.138.203.0/24
212.138.206.0/24
212.138.250.0/24
IPv6:
2001:1490:103::/48
2001:1490:106::/47
Signature Algorithm: sha256WithRSAEncryption
42:58:73:26:c8:5c:ba:af:14:ae:2e:36:20:b9:21:67:a3:2e:
01:ed:b1:0a:b3:fb:e7:4e:9c:23:2a:28:80:16:8c:4f:c4:ff:
37:49:81:00:44:6d:e6:d2:47:a4:b3:5d:39:86:ac:7b:47:2f:
e1:63:fb:ff:97:3b:cc:89:b0:21:5f:d8:ab:37:18:3e:c2:5d:
2f:f9:52:eb:75:c1:3b:b6:8c:4e:f4:f2:97:1a:22:9a:9c:5b:
bf:e3:b6:6c:fb:19:b3:e6:0b:e8:0a:9b:f9:8d:c7:d1:10:18:
c5:99:93:a3:ce:d6:ed:3f:70:f9:97:dd:75:0c:34:2c:7d:46:
07:d3:bc:b2:88:72:ab:fa:91:59:68:63:a8:14:6b:06:be:76:
c2:31:8e:0b:e9:c0:fe:07:fe:97:fa:66:c3:cd:c8:e9:38:92:
b0:3d:71:cd:d3:20:ff:5a:5b:3b:c1:60:c6:76:22:66:31:43:
69:2f:e0:9c:4e:cf:93:fc:aa:f9:e2:e1:f5:41:95:99:16:7f:
55:3a:22:01:eb:7e:7c:50:e5:0c:18:23:ef:da:69:15:da:c3:
2b:20:81:72:e1:dd:b7:75:6c:d6:9b:4d:82:a7:55:7a:35:9a:
62:ea:77:d2:c9:87:67:aa:28:f4:c5:38:86:10:5a:45:19:6e:
31:13:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:09:08 2025 by rpki-client