Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/qi8JXs2yo200PkF0ybkWzT5gLbA.roa
File: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (raw, json)
Hash identifier: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=
Subject key identifier: AA:2F:09:5E:CD:B2:A3:6D:34:3E:41:74:C9:B9:16:CD:3E:60:2D:B0
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 0194222015C31804F95E503297394531B6CB
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/qi8JXs2yo200PkF0ybkWzT5gLbA.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34354
IP address blocks: 85.158.72.0/23 maxlen: 23
85.158.74.0/23 maxlen: 23
85.158.76.0/23 maxlen: 23
85.158.78.0/23 maxlen: 23
89.221.112.0/23 maxlen: 23
89.221.114.0/23 maxlen: 23
89.221.116.0/23 maxlen: 23
89.221.118.0/23 maxlen: 23
89.221.120.0/23 maxlen: 23
89.221.120.0/24 maxlen: 24
89.221.122.0/23 maxlen: 23
89.221.124.0/23 maxlen: 23
89.221.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:15:c3:18:04:f9:5e:50:32:97:39:45:31:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa2f095ecdb2a36d343e4174c9b916cd3e602db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:15:63:ac:5f:3c:69:66:60:25:b7:8e:1e:
ce:18:d2:35:02:27:ea:7b:6c:77:49:fc:ae:48:21:
df:3e:94:84:bc:32:a9:10:ee:ba:56:9b:90:cc:ef:
05:04:64:de:c1:d8:97:0b:3b:db:d7:6e:38:f5:f2:
cb:bd:9e:11:19:7b:d9:c6:54:63:7b:30:a7:fa:6a:
03:2e:73:d8:47:8b:c6:f8:96:0f:de:ec:00:fb:90:
10:d3:3c:64:04:46:50:53:3b:c2:22:3c:f4:2a:8b:
2a:32:05:ee:06:7b:a4:0b:27:1c:1d:b2:ec:1e:c7:
62:a6:da:57:06:cc:0c:a2:95:dc:51:7c:21:06:87:
ca:56:93:71:72:0f:ad:1c:e1:6c:a1:19:f8:98:21:
83:5f:bc:9c:99:99:d5:5a:fa:68:c4:27:01:10:9f:
b3:15:f0:09:03:db:b5:cb:c7:c4:53:f1:79:57:58:
89:7e:ba:9b:c5:5e:29:38:ac:7a:d1:a6:53:84:67:
cc:04:e1:58:2c:43:32:19:1c:76:60:04:18:d3:9c:
ce:06:ba:c6:0c:a4:24:b7:71:97:4a:2a:d2:29:54:
87:4f:bd:7b:34:ed:c6:9f:2b:61:c5:ab:ba:44:6a:
4a:ed:c5:a9:46:22:d7:4c:54:c2:b5:58:ef:ee:07:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2F:09:5E:CD:B2:A3:6D:34:3E:41:74:C9:B9:16:CD:3E:60:2D:B0
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/qi8JXs2yo200PkF0ybkWzT5gLbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.72.0/21
89.221.112.0/20
Signature Algorithm: sha256WithRSAEncryption
35:18:05:d3:cc:79:0e:92:4c:76:16:f8:10:bb:12:a6:96:5b:
e8:f9:ac:37:55:86:26:94:e1:38:55:32:fc:80:d2:03:ce:db:
71:81:8d:65:6c:59:3a:ef:c1:14:03:32:ad:24:85:93:26:c0:
2d:d8:bf:5c:ff:35:eb:39:6c:53:fd:e8:60:7a:3c:82:6f:c8:
2f:e6:08:1c:b6:33:b6:4e:97:8d:15:81:47:bf:88:eb:b3:27:
ce:2d:7b:25:54:82:95:bf:82:3a:df:28:30:e8:af:25:6f:34:
a2:09:14:f3:dc:0a:00:27:53:f5:3d:07:5d:fa:85:26:04:1b:
69:7b:9c:fb:47:16:7e:cd:68:b9:b7:26:6e:e7:de:7d:d5:55:
9e:b2:e0:33:dd:d1:b4:b5:cc:4e:31:2a:2f:a6:6a:9d:6b:55:
4c:59:63:6d:34:51:8d:a6:b3:01:26:fa:68:b2:b4:0d:66:be:
3f:d5:8b:e2:e6:49:41:20:4e:12:5b:90:a3:bb:7c:ff:83:05:
04:26:51:63:2e:c4:8e:7d:b1:a7:7d:51:0e:bb:4d:b9:58:02:
b9:10:ae:93:70:f0:b4:1a:b8:a2:c4:88:09:43:ae:00:f1:35:
73:14:e9:1c:9f:ab:3b:3e:45:27:b9:69:98:21:39:68:f3:ca:
34:b7:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:41 2025 by rpki-client