Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/81r7MDlREVnve0gPHpK-YMqPGos.roa
File: 81r7MDlREVnve0gPHpK-YMqPGos.roa (raw, json)
Hash identifier: LBj0CTTN9bH+FtAXQEk67Yy3EpjLyRKJ5E4kGwybQXs=
Subject key identifier: F3:5A:FB:30:39:51:11:59:EF:7B:48:0F:1E:92:BE:60:CA:8F:1A:8B
Certificate issuer: /CN=90d426209bd8c405cbefee5741b1a52548012bab
Certificate serial: 0194B61219262F05D25CAF983501A311FEB3
Authority key identifier: 90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/81r7MDlREVnve0gPHpK-YMqPGos.roa
Signing time: Thu 30 Jan 2025 07:17:06 +0000
ROA not before: Thu 30 Jan 2025 07:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60388
IP address blocks: 185.31.108.0/22 maxlen: 32
212.73.96.0/19 maxlen: 32
212.73.99.0/24 maxlen: 24
212.73.102.0/24 maxlen: 24
212.73.103.0/24 maxlen: 24
2a00:b4a0::/32 maxlen: 128
2a00:b4a0:ebe4::/64 maxlen: 64
2a00:b4a0:fe09::/48 maxlen: 48
2a01:70c0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:12:19:26:2f:05:d2:5c:af:98:35:01:a3:11:fe:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d426209bd8c405cbefee5741b1a52548012bab
Validity
Not Before: Jan 30 07:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f35afb3039511159ef7b480f1e92be60ca8f1a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:e3:85:03:09:75:eb:d0:24:34:93:ba:e7:
3c:3d:e4:b5:85:5b:a7:b0:81:67:c9:cd:7a:78:06:
43:dd:7a:ba:b6:63:fe:3c:c0:bb:a0:45:f0:9d:39:
4b:d3:82:f5:cd:2b:00:f4:71:dc:10:39:d1:86:16:
00:dd:d9:f9:a5:6a:c7:dd:a7:2d:58:a7:ae:1d:a9:
71:dd:78:c1:56:12:38:4d:b9:0a:19:28:50:ba:59:
80:c1:ea:94:a9:00:bf:c2:c1:81:9e:3a:bb:ef:26:
61:2a:e7:b9:bc:c5:1d:32:c1:77:39:27:21:b9:96:
75:39:8d:8c:13:73:92:8f:19:e0:38:a7:44:e5:0a:
bd:f5:b9:da:2a:05:ae:89:29:a4:0d:15:13:69:c4:
77:be:fa:b4:f4:44:4a:33:1e:71:62:ec:61:7f:ff:
18:c2:17:8b:b0:09:0c:8c:30:a2:a2:67:69:76:5f:
6e:e6:19:ff:1c:d5:51:82:f8:43:56:cc:7e:c0:69:
2b:de:3f:3e:c7:68:ab:2d:cf:79:25:13:b8:26:5a:
fd:c8:f0:c2:2d:b1:7f:98:3b:80:81:fa:df:4a:2b:
6e:9a:27:c1:14:bc:53:55:39:b5:a9:54:52:06:da:
03:ec:f1:e7:0b:f1:b9:45:6e:98:dd:00:fa:29:1d:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5A:FB:30:39:51:11:59:EF:7B:48:0F:1E:92:BE:60:CA:8F:1A:8B
X509v3 Authority Key Identifier:
keyid:90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/81r7MDlREVnve0gPHpK-YMqPGos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.108.0/22
212.73.96.0/19
IPv6:
2a00:b4a0::/32
2a01:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
95:e4:97:44:bc:04:9d:b5:c3:0b:8d:8e:50:6e:17:4f:02:a8:
2f:b8:4f:87:0b:1f:64:83:09:b3:35:5d:4c:86:4b:d4:c8:94:
19:0f:54:30:b4:bb:b6:dd:26:7d:5a:68:8c:7c:6c:52:5b:00:
eb:6b:bb:5c:f5:03:52:af:01:bc:08:5a:c4:f7:78:fe:20:27:
28:9d:a8:ec:02:08:7d:8c:85:ba:99:03:88:a7:96:cd:65:eb:
85:d5:8e:de:84:4c:39:bb:6a:83:f6:91:74:bd:de:f3:1a:3e:
c5:b3:88:22:ca:3e:73:06:5a:e9:12:eb:bd:1d:b8:bc:75:fb:
a2:22:26:f1:93:5e:86:97:45:5f:8a:2d:5c:25:18:0d:e0:b2:
e8:c1:9a:cd:80:e8:cb:8c:e2:0f:48:8f:f4:2d:6b:d9:6b:6a:
4c:3c:54:02:3b:93:e4:dc:73:a2:03:79:df:ed:ee:d6:84:64:
3d:11:0e:29:a9:a0:7d:f9:a9:47:81:dd:eb:40:d2:8b:0d:35:
8f:2d:54:ec:91:2c:64:57:d1:3d:8b:72:0f:ed:5b:10:22:1e:
19:7c:df:ca:08:32:68:e4:9b:d8:25:5f:bc:99:c9:9f:5d:86:
be:a7:30:01:fa:a7:9e:a6:41:b9:36:f1:51:57:5b:4a:65:1b:
e4:50:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:15:52 2025 by rpki-client