Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/dQAex4kzr-sWP30G-ZRaIbqWGb4.roa
File: dQAex4kzr-sWP30G-ZRaIbqWGb4.roa (raw, json)
Hash identifier: JyJQJxZi/SDuKfNeLT+s6+omJScuxllsJRcxLH52Q60=
Subject key identifier: 75:00:1E:C7:89:33:AF:EB:16:3F:7D:06:F9:94:5A:21:BA:96:19:BE
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018BCB07F2BB92D4A4F506E764DE7CC88DE1
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/dQAex4kzr-sWP30G-ZRaIbqWGb4.roa
Signing time: Mon 13 Nov 2023 23:32:57 +0000
ROA not before: Mon 13 Nov 2023 23:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 94.190.248.0/22 maxlen: 24
185.172.20.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
89.37.216.0/23 maxlen: 24
185.64.100.0/22 maxlen: 24
84.234.24.0/22 maxlen: 24
93.113.184.0/21 maxlen: 24
62.112.12.0/23 maxlen: 24
194.58.64.0/23 maxlen: 24
188.211.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cb:07:f2:bb:92:d4:a4:f5:06:e7:64:de:7c:c8:8d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Nov 13 23:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75001ec78933afeb163f7d06f9945a21ba9619be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:16:3d:af:8a:39:34:9d:2c:0f:db:cb:5c:
4b:43:eb:66:49:12:e6:4f:55:e4:95:31:d9:fe:c2:
d9:97:dc:3a:67:90:03:62:62:aa:a7:b6:45:58:6c:
89:9c:35:ae:95:57:1a:2f:48:d3:dd:8d:e7:ed:3f:
4c:bd:35:02:50:56:08:0d:a4:bf:f4:6b:e0:4f:42:
f5:60:9a:a8:ae:61:17:78:a4:ae:b2:ea:e0:9a:4e:
b6:ab:df:b5:c3:1a:74:98:c4:2f:92:4b:74:a2:07:
d1:c5:24:4f:eb:c9:13:a3:cb:a8:a6:e6:b4:e3:2a:
7e:79:e0:df:0a:94:a9:68:78:67:fd:f8:20:b5:df:
eb:2f:06:1b:ea:59:96:b7:32:7c:a3:7c:7e:be:61:
fb:9a:3c:d8:24:0b:3a:aa:c5:df:2c:24:b9:c4:a7:
35:36:d4:80:b3:c1:67:bd:e3:39:33:5a:50:14:ec:
53:a2:bb:fd:12:59:73:bb:bc:e6:24:93:de:c9:c2:
dc:01:6d:ca:e9:f2:f7:d1:00:44:01:11:da:b4:df:
64:57:61:f8:76:64:3e:22:16:a8:d6:c1:0d:d1:e3:
5a:70:80:b0:46:a0:db:6d:59:b3:af:d4:86:9f:22:
44:2e:b1:f9:3b:69:6a:17:1a:6b:04:47:5e:e1:07:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:1E:C7:89:33:AF:EB:16:3F:7D:06:F9:94:5A:21:BA:96:19:BE
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/dQAex4kzr-sWP30G-ZRaIbqWGb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.12.0/23
84.234.24.0/22
89.37.216.0/23
93.113.184.0/21
94.190.248.0/22
185.64.100.0/22
185.172.20.0/22
188.211.252.0/22
194.58.64.0/23
194.88.96.0/21
195.133.202.0/23
Signature Algorithm: sha256WithRSAEncryption
49:17:08:78:62:16:98:cf:d3:d9:e3:cd:d3:d0:66:26:de:3f:
1d:89:62:52:fa:8f:7d:95:0b:26:f7:72:c5:21:ba:e5:ee:f8:
2f:dc:0d:f1:e2:16:e6:8a:6d:5b:1d:14:be:ea:af:ca:46:ca:
7a:b3:22:07:0c:08:bc:37:b1:7b:5f:d5:7a:2b:68:86:58:fa:
55:0f:70:10:06:54:67:70:d4:c2:bf:0a:49:5d:06:e4:d6:c0:
db:bf:e1:7d:a0:46:d9:8c:ae:2f:64:44:63:4d:c6:56:f1:80:
2b:79:e4:8e:41:b1:1b:13:4d:99:04:35:29:4f:27:65:26:41:
4d:b7:a8:c3:92:5f:c7:17:01:b2:b8:0d:1e:ac:47:21:12:48:
57:52:4e:9b:7a:f7:65:25:6f:da:dc:57:4e:7b:47:a6:cd:e5:
db:23:7a:35:14:f3:de:bf:9b:92:ca:ca:70:d0:06:30:37:3a:
1d:42:14:b3:10:b4:1b:c8:a6:48:5d:36:03:30:51:17:ae:12:
e9:5a:84:dd:8a:c8:4a:2c:d3:5b:c5:d6:b5:aa:a6:35:be:6b:
f6:b1:93:15:8b:68:94:9f:eb:b0:73:25:c3:68:2b:6f:20:20:
79:b0:80:cf:52:9c:38:c4:08:33:83:7b:48:22:a6:40:c8:5b:
ce:69:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 23:58:42 2025 by rpki-client