Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/cqXVLr61qc30g_xpT1KtGW2mTVY.roa
File: cqXVLr61qc30g_xpT1KtGW2mTVY.roa (raw, json)
Hash identifier: 9izHI/DLvzltS88JR0Knd6Woc3DqCZ/q0/0DeJFW8t0=
Subject key identifier: 72:A5:D5:2E:BE:B5:A9:CD:F4:83:FC:69:4F:52:AD:19:6D:A6:4D:56
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 019425FD7ACE9757B2954E712279536412E6
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/cqXVLr61qc30g_xpT1KtGW2mTVY.roa
Signing time: Thu 02 Jan 2025 07:49:16 +0000
ROA not before: Thu 02 Jan 2025 07:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28924
IP address blocks: 195.90.98.0/24 maxlen: 24
195.90.99.0/24 maxlen: 24
195.90.114.0/23 maxlen: 23
195.90.114.0/24 maxlen: 24
212.52.160.0/19 maxlen: 19
212.52.160.0/22 maxlen: 22
212.52.160.0/24 maxlen: 24
212.52.161.0/24 maxlen: 24
212.52.162.0/24 maxlen: 24
212.52.163.0/24 maxlen: 24
212.52.164.0/24 maxlen: 24
212.52.165.0/24 maxlen: 24
212.52.166.0/24 maxlen: 24
212.52.167.0/24 maxlen: 24
212.52.168.0/22 maxlen: 22
212.52.168.0/24 maxlen: 24
212.52.169.0/24 maxlen: 24
212.52.170.0/24 maxlen: 24
212.52.171.0/24 maxlen: 24
212.52.172.0/24 maxlen: 24
212.52.173.0/24 maxlen: 24
212.52.174.0/24 maxlen: 24
212.52.175.0/24 maxlen: 24
212.52.176.0/24 maxlen: 24
212.52.177.0/24 maxlen: 24
212.52.178.0/24 maxlen: 24
212.52.179.0/24 maxlen: 24
212.52.180.0/24 maxlen: 24
212.52.181.0/24 maxlen: 24
212.52.182.0/24 maxlen: 24
212.52.183.0/24 maxlen: 24
212.52.184.0/24 maxlen: 24
212.52.185.0/24 maxlen: 24
212.52.186.0/24 maxlen: 24
212.52.187.0/24 maxlen: 24
212.52.188.0/24 maxlen: 24
212.52.189.0/24 maxlen: 24
212.52.190.0/24 maxlen: 24
212.52.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:7a:ce:97:57:b2:95:4e:71:22:79:53:64:12:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Jan 2 07:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72a5d52ebeb5a9cdf483fc694f52ad196da64d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:c6:d9:f9:d0:8c:63:95:7e:6a:3d:c3:70:
44:52:96:88:42:5c:a5:e6:79:e0:f5:27:fe:42:9e:
0e:3f:08:92:32:95:10:a0:8c:43:ec:ab:52:c1:23:
15:26:c9:15:5e:ea:80:70:a2:1e:89:1e:8c:42:1c:
91:49:f3:cf:5a:f8:9c:dd:78:5d:3a:dd:4b:f0:c4:
28:ac:08:41:bc:ca:f9:ec:50:2d:f7:d6:a2:fb:f0:
e7:c7:99:96:c1:4d:36:67:7b:5b:de:f0:02:76:44:
86:d8:53:bf:52:f8:05:c6:23:45:9e:49:21:55:2e:
00:5c:b6:3b:72:56:fc:a4:70:be:75:10:51:ec:d5:
aa:de:ba:1c:ca:1b:64:cc:c7:0b:5c:6e:15:89:f2:
99:f4:66:13:20:3b:70:73:c7:bd:dd:d6:6f:f4:7c:
e1:0f:65:83:5a:59:23:45:aa:be:a1:b5:78:b9:7e:
73:02:48:b0:e0:1a:8f:5a:dc:e4:ad:12:9c:cf:dd:
ed:12:51:d6:44:26:3f:75:04:de:7f:eb:02:65:3b:
e8:34:43:59:20:29:fa:5e:0b:97:e4:cd:73:0d:8a:
58:ff:93:3a:d8:7c:53:02:94:ca:43:04:03:ea:0a:
d9:75:8c:b3:9c:07:b1:e9:0e:bc:9e:01:d6:0b:72:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:D5:2E:BE:B5:A9:CD:F4:83:FC:69:4F:52:AD:19:6D:A6:4D:56
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/cqXVLr61qc30g_xpT1KtGW2mTVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.98.0/23
195.90.114.0/23
212.52.160.0/19
Signature Algorithm: sha256WithRSAEncryption
09:a9:22:11:14:e9:cc:09:fc:ac:cb:f4:7a:d9:f3:da:21:39:
f0:e7:29:e7:31:ab:86:10:42:41:d2:86:db:ed:26:ef:34:7b:
3c:22:a5:6e:1d:a5:3a:b3:b4:a6:b8:80:98:63:fe:83:60:de:
c4:a0:42:0c:f0:e6:a0:e5:95:fc:2f:c6:e3:fb:23:3e:6e:44:
27:96:91:74:93:aa:13:b0:eb:1e:ff:91:80:71:32:18:c3:6b:
db:bb:95:f1:ff:03:6f:11:c5:54:e7:b7:c4:f5:f7:88:03:5e:
46:63:bf:af:ea:7d:f2:a5:4b:77:c5:0e:d3:6a:20:93:04:82:
f5:98:84:29:b3:d0:6b:dd:0c:d1:16:26:f9:11:f5:36:e3:54:
12:12:c3:9c:4d:3e:7a:22:8c:b4:40:b9:1d:eb:df:23:82:4c:
1d:db:01:37:d9:6f:e7:2d:e8:bc:41:5d:16:90:e6:52:d8:3c:
8c:84:79:97:98:ec:5f:c6:19:09:96:06:b0:ba:13:af:46:28:
c0:76:e5:a4:d6:1e:10:2f:3d:a5:e0:88:75:4e:fc:12:82:ad:
d9:99:53:a6:0e:06:92:9a:dd:b4:13:78:47:6d:45:78:2c:64:
6d:66:45:06:47:45:1e:df:7b:b1:5d:e4:b4:22:2c:3c:ed:a4:
01:ad:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:59 2025 by rpki-client