Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/ENS55DqOSCIACYKV88lsj2-9Qt0.roa
File: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (raw, json)
Hash identifier: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=
Subject key identifier: 10:D4:B9:E4:3A:8E:48:22:00:09:82:95:F3:C9:6C:8F:6F:BD:42:DD
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 019425215C37D861F7B868066A42F4767FCB
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/ENS55DqOSCIACYKV88lsj2-9Qt0.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206011
IP address blocks: 80.244.40.0/21 maxlen: 23
80.244.40.0/22 maxlen: 23
80.244.44.0/22 maxlen: 23
80.244.47.0/24 maxlen: 24
185.199.8.0/24 maxlen: 24
185.199.9.0/24 maxlen: 24
185.199.10.0/24 maxlen: 24
2a0a:9740::/32 maxlen: 32
2a0a:9740:d000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5c:37:d8:61:f7:b8:68:06:6a:42:f4:76:7f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10d4b9e43a8e482200098295f3c96c8f6fbd42dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:73:08:d4:0d:ce:1d:c6:95:f2:af:e7:64:
14:21:6f:77:04:00:55:d7:df:82:8d:47:af:51:1b:
29:de:22:88:54:d9:9f:67:39:1a:e7:6d:bc:52:b1:
8e:ac:6f:ad:cb:81:58:8b:c2:64:69:f1:b6:12:ab:
f9:dc:e6:16:f4:e8:e0:8f:8b:96:3d:16:85:8f:ab:
6d:6a:77:e5:d7:da:4b:5e:02:80:0d:13:29:35:39:
9f:5c:6e:22:7f:5d:b4:56:3e:13:c6:24:1b:cf:f2:
66:a9:d9:1e:bd:f8:09:87:1b:5c:3c:6a:63:6a:97:
6d:88:dc:82:b8:fa:e4:e8:94:1f:4f:78:e3:c8:e7:
aa:8c:7c:66:44:ce:40:c7:9e:bb:e6:f7:c0:ac:05:
cc:66:fc:18:90:58:fd:7c:af:92:ce:26:a2:e2:46:
c3:8a:0e:59:12:42:b3:bb:e3:17:48:02:f4:fc:78:
ba:69:ee:b5:af:55:65:52:fc:d2:91:43:d0:d2:8a:
a3:e7:97:05:52:63:be:2e:fb:b4:b5:ad:a8:a4:e2:
3c:4e:59:4c:5d:d9:eb:04:ff:25:37:d7:1c:6a:2a:
f8:be:b8:8c:ab:f2:a1:80:91:02:64:84:9f:d4:df:
bc:4d:9d:98:b5:6e:2a:92:59:34:5d:1d:b4:ad:fc:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:B9:E4:3A:8E:48:22:00:09:82:95:F3:C9:6C:8F:6F:BD:42:DD
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/ENS55DqOSCIACYKV88lsj2-9Qt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.40.0/21
185.199.8.0-185.199.10.255
IPv6:
2a0a:9740::/32
Signature Algorithm: sha256WithRSAEncryption
a1:24:01:c1:a9:d7:21:1e:4b:25:8a:5f:a3:4c:91:0a:e6:5e:
ec:80:53:14:04:14:76:68:48:98:a4:70:32:2b:7c:1b:32:c7:
a8:7f:50:16:a9:c4:34:61:25:40:38:e5:b3:f2:c5:89:28:a4:
89:0c:3f:ec:f8:2f:aa:2e:8b:ae:78:ef:40:39:19:25:14:28:
c4:bf:89:79:0f:54:5d:e1:7c:b7:34:7f:09:59:05:c4:aa:0b:
32:0c:03:e9:34:0f:8c:ef:96:02:bc:af:bb:61:5c:61:0d:a9:
6c:04:44:05:99:18:d6:14:fb:1a:ea:a4:e8:b3:a0:82:37:3d:
e8:0c:66:16:dd:6b:65:37:6c:96:95:2a:5f:17:bb:63:04:4d:
fe:c9:51:b6:45:df:93:54:89:3e:f7:79:fc:ac:46:23:56:36:
de:c5:fa:b1:ab:ff:ac:c9:40:59:43:d1:bb:c9:79:fe:bf:07:
c6:da:1a:95:47:e4:0c:39:71:b8:61:69:c5:99:18:ff:c9:08:
60:d9:f5:75:f8:bc:96:d8:e1:82:ff:d6:87:60:15:91:0a:11:
34:88:99:1f:9c:1e:0b:08:23:92:eb:11:d5:b0:e2:e5:b1:c7:
a0:62:6a:1e:88:4e:7e:8b:f0:7e:a2:2b:09:a3:32:ea:eb:64:
90:0d:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:28:50 2025 by rpki-client