Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/gev82B3tAJBHT5ppRO_iSdnyvdw.roa
File: gev82B3tAJBHT5ppRO_iSdnyvdw.roa (raw, json)
Hash identifier: 4j/uE4qS3e+ntrrsiJXuIjWlj8EcnLMSjc3Tmt4TbY0=
Subject key identifier: 81:EB:FC:D8:1D:ED:00:90:47:4F:9A:69:44:EF:E2:49:D9:F2:BD:DC
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 0194258E61045ACEC75F6EB890D3C14BB432
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/gev82B3tAJBHT5ppRO_iSdnyvdw.roa
Signing time: Thu 02 Jan 2025 05:47:55 +0000
ROA not before: Thu 02 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31638
IP address blocks: 5.144.184.0/21 maxlen: 24
37.156.96.0/22 maxlen: 23
37.156.148.0/22 maxlen: 23
37.156.168.0/22 maxlen: 23
37.156.208.0/22 maxlen: 23
46.255.80.0/21 maxlen: 24
86.104.6.0/24 maxlen: 24
86.104.229.0/24 maxlen: 24
86.105.8.0/24 maxlen: 24
86.105.179.0/24 maxlen: 24
89.33.232.0/24 maxlen: 24
89.34.6.0/24 maxlen: 24
89.39.92.0/24 maxlen: 24
89.39.224.0/20 maxlen: 21
89.42.230.0/24 maxlen: 24
89.44.206.0/24 maxlen: 24
89.45.24.0/21 maxlen: 21
89.45.24.0/24 maxlen: 24
89.45.25.0/24 maxlen: 24
89.45.26.0/24 maxlen: 24
89.45.27.0/24 maxlen: 24
89.45.95.0/24 maxlen: 24
89.45.216.0/22 maxlen: 23
89.47.32.0/23 maxlen: 24
93.113.89.0/24 maxlen: 24
93.115.170.0/23 maxlen: 23
93.118.37.0/24 maxlen: 24
94.177.18.0/23 maxlen: 23
94.177.151.0/24 maxlen: 24
176.223.164.0/24 maxlen: 24
185.82.168.0/22 maxlen: 23
185.82.169.0/24 maxlen: 24
185.82.170.0/24 maxlen: 24
185.82.171.0/24 maxlen: 24
188.209.80.0/20 maxlen: 24
188.209.88.0/21 maxlen: 21
188.210.239.0/24 maxlen: 24
188.212.153.0/24 maxlen: 24
188.215.44.0/22 maxlen: 23
188.215.65.0/24 maxlen: 24
188.215.247.0/24 maxlen: 24
188.215.248.0/24 maxlen: 24
188.241.4.0/23 maxlen: 24
188.241.190.0/23 maxlen: 24
195.62.160.0/19 maxlen: 20
2a02:20d8::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:61:04:5a:ce:c7:5f:6e:b8:90:d3:c1:4b:b4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Jan 2 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81ebfcd81ded0090474f9a6944efe249d9f2bddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:de:b7:64:78:be:97:97:e0:37:9b:b5:1c:
5d:59:28:da:20:bb:d7:f5:fc:49:4a:6b:75:d7:08:
e1:41:2a:ac:fa:ab:7d:c9:f7:78:25:a8:bc:0e:c9:
e0:54:5b:95:e1:74:46:b2:ed:04:4b:bf:88:ab:b5:
5f:48:85:17:0c:92:98:94:17:68:f1:93:30:f0:18:
ef:28:15:69:a1:bd:59:27:1b:7b:09:b2:dc:fb:fd:
c6:dd:c3:86:73:5b:50:b8:2a:7c:62:0d:a3:3d:7e:
11:54:d8:d1:c0:69:3d:38:53:8b:88:e4:4b:61:85:
b0:d0:97:9a:7d:58:4c:97:35:6e:2b:6b:14:a5:01:
00:31:cd:58:8b:01:7f:8f:f0:e2:e9:3a:b2:f3:d7:
6b:30:2a:68:64:99:3f:4b:8c:db:cc:ad:cd:34:be:
2c:6d:6a:a2:4c:82:e1:ec:5d:ef:8e:34:3c:aa:c6:
78:70:d6:95:9b:60:a3:6f:ef:e6:da:0f:e8:e3:d7:
0e:36:86:62:08:11:e7:df:02:89:bb:b4:80:76:0f:
a3:1f:c3:9f:02:aa:4c:d0:27:2e:e0:8e:ea:aa:7d:
09:f7:ae:83:74:dc:d5:82:18:23:6e:89:7a:99:c8:
0a:69:39:12:b9:63:28:69:0c:24:31:7b:b8:af:22:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EB:FC:D8:1D:ED:00:90:47:4F:9A:69:44:EF:E2:49:D9:F2:BD:DC
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/gev82B3tAJBHT5ppRO_iSdnyvdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.184.0/21
37.156.96.0/22
37.156.148.0/22
37.156.168.0/22
37.156.208.0/22
46.255.80.0/21
86.104.6.0/24
86.104.229.0/24
86.105.8.0/24
86.105.179.0/24
89.33.232.0/24
89.34.6.0/24
89.39.92.0/24
89.39.224.0/20
89.42.230.0/24
89.44.206.0/24
89.45.24.0/21
89.45.95.0/24
89.45.216.0/22
89.47.32.0/23
93.113.89.0/24
93.115.170.0/23
93.118.37.0/24
94.177.18.0/23
94.177.151.0/24
176.223.164.0/24
185.82.168.0/22
188.209.80.0/20
188.210.239.0/24
188.212.153.0/24
188.215.44.0/22
188.215.65.0/24
188.215.247.0-188.215.248.255
188.241.4.0/23
188.241.190.0/23
195.62.160.0/19
IPv6:
2a02:20d8::/29
Signature Algorithm: sha256WithRSAEncryption
9e:2d:4a:5a:bd:42:50:09:e9:43:aa:63:40:84:41:b7:31:d4:
b7:70:de:bb:c1:60:f7:89:9a:b9:53:27:06:3f:73:ad:44:f3:
7f:1a:1e:cd:c6:fb:85:01:0e:cc:ef:a8:f4:b7:a1:02:a1:51:
ab:26:a1:f1:e0:a4:5e:0b:80:85:88:81:7d:2f:58:36:3e:8b:
3a:5e:04:93:58:7b:d3:57:62:e9:3f:17:d7:64:6d:75:db:3f:
68:92:a4:17:fe:bc:7d:5a:43:eb:ed:14:a4:6c:5b:2b:bd:b3:
83:4f:13:1b:1b:0c:95:e6:fb:1e:53:10:5c:f2:6d:ee:eb:33:
2b:98:ef:ee:7b:ca:66:ab:f6:8a:3d:84:c7:39:30:69:c5:27:
a6:a5:c4:cb:a6:39:37:c7:c4:67:f3:28:99:29:b3:ee:8b:1b:
b6:1d:e7:f8:04:4c:16:66:84:3c:f8:80:52:37:07:5f:65:0d:
8e:85:08:48:09:73:3a:8c:a7:e7:01:65:c9:f2:97:35:8f:95:
8e:0e:e7:53:86:ec:0b:2b:69:9b:04:0f:f1:ad:31:ba:47:b0:
0b:34:f9:2e:ac:09:7f:ff:43:82:90:10:cd:ea:ee:27:d7:78:
44:00:7b:24:7e:2e:4e:af:25:fc:b0:18:ea:d7:f7:3a:4d:c1:
5a:df:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:27 2025 by rpki-client