Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/o3EKSKwUA8ilyykvM7SHaSr2DUA.roa
File: o3EKSKwUA8ilyykvM7SHaSr2DUA.roa (raw, json)
Hash identifier: 2XhNtzZjU/zR3mpeJKzud81zTrtAmg7Vp+fEk11rcEI=
Subject key identifier: A3:71:0A:48:AC:14:03:C8:A5:CB:29:2F:33:B4:87:69:2A:F6:0D:40
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 0194221F8DBDE893EFC5A0635D7C501CFF8B
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/o3EKSKwUA8ilyykvM7SHaSr2DUA.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207044
IP address blocks: 87.120.240.0/22 maxlen: 24
87.120.248.0/22 maxlen: 24
87.121.252.0/22 maxlen: 24
88.151.24.0/21 maxlen: 24
89.184.36.0/22 maxlen: 24
89.184.60.0/22 maxlen: 24
91.92.28.0/22 maxlen: 24
185.167.196.0/22 maxlen: 24
213.133.64.0/21 maxlen: 24
2a0b:ae00::/29 maxlen: 29
2a0b:ae00:1000::/38 maxlen: 38
2a0b:ae00:1400::/38 maxlen: 38
2a0b:ae00:1800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8d:bd:e8:93:ef:c5:a0:63:5d:7c:50:1c:ff:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3710a48ac1403c8a5cb292f33b487692af60d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:92:73:19:15:d7:29:c9:22:c9:ec:b6:75:
af:c3:f5:f6:0f:95:c0:b0:df:a1:30:ad:0f:f8:da:
33:53:75:10:7b:1e:39:19:ec:e7:2a:88:fb:8c:47:
ae:78:7f:9b:f6:0c:16:73:d7:96:45:e9:11:07:03:
15:2f:d8:88:3b:c3:fd:46:54:49:76:13:7d:94:08:
cf:dd:2c:5a:77:1b:05:ea:1e:74:38:44:1f:c2:62:
11:72:9f:dc:8a:35:20:b9:14:7b:de:83:53:8a:fd:
f5:0c:1a:8d:3a:44:c7:be:be:c1:58:81:56:15:17:
85:32:0f:59:bc:1d:d8:67:40:01:fa:38:50:fc:0b:
14:b6:94:b8:e3:0f:5c:f3:47:84:d8:24:d2:a6:17:
9c:d7:73:b5:3d:b2:db:88:64:96:83:84:73:2c:3d:
d1:a3:6e:2b:f8:d3:10:a3:69:55:88:d4:02:d6:39:
72:86:b1:ff:aa:4b:6c:03:05:8c:93:24:77:0b:9c:
93:0c:49:71:d0:9d:f5:fd:6e:7b:fc:47:18:5d:f7:
19:bc:5f:9b:4f:ff:9b:79:72:d8:f8:7a:26:91:a5:
31:6b:29:2d:1f:77:df:03:03:a2:6e:40:e2:c3:6c:
91:bf:ee:21:03:6e:95:22:0b:27:38:bf:2c:65:84:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:0A:48:AC:14:03:C8:A5:CB:29:2F:33:B4:87:69:2A:F6:0D:40
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/o3EKSKwUA8ilyykvM7SHaSr2DUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.240.0/22
87.120.248.0/22
87.121.252.0/22
88.151.24.0/21
89.184.36.0/22
89.184.60.0/22
91.92.28.0/22
185.167.196.0/22
213.133.64.0/21
IPv6:
2a0b:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
a6:00:0a:5f:e7:ce:3a:e1:4b:dc:86:9b:45:86:d8:96:5b:a1:
48:8b:65:9c:78:34:85:0a:d7:f7:20:57:9a:6d:f9:f6:16:61:
43:f2:74:8a:25:60:df:9b:d0:da:d6:93:26:f8:bf:0e:9c:5e:
58:2d:6f:56:6c:86:14:5f:9e:da:24:17:85:27:3f:24:04:94:
55:4c:77:91:5e:37:d5:12:c5:a1:aa:6c:20:a0:d3:c4:63:17:
5d:11:d2:24:81:64:42:2e:a8:07:35:b7:17:5d:12:55:54:63:
37:88:ed:ed:8d:39:ec:ce:b0:ff:32:fb:19:cd:0b:8b:3c:dd:
90:dd:5e:4b:46:45:f4:1c:b2:8d:78:6d:39:bc:80:46:71:5e:
9e:27:ce:36:e6:30:31:33:ee:16:34:c6:20:80:b7:e2:56:8e:
be:f2:c1:df:41:84:dc:6c:51:4b:d2:09:c0:82:f1:07:6a:4e:
d8:fe:ec:b3:14:f8:70:69:b3:7c:e0:d2:18:7b:28:5f:12:36:
94:4d:b8:df:27:a6:d7:99:86:e6:81:e5:af:f2:12:e6:6d:91:
d7:2e:8b:2d:d3:12:ae:30:93:17:35:6c:db:39:e4:30:43:fb:
df:dc:73:c1:ae:a3:da:6e:f8:e4:e1:96:1a:31:00:91:e4:b0:
62:08:ad:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:36 2025 by rpki-client