Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/1n1Q04zTdHaXs9Co2veuwtfoAuY.roa
File: 1n1Q04zTdHaXs9Co2veuwtfoAuY.roa (raw, json)
Hash identifier: afUxzktY8K6iIw5yy9bhALlArbdcu4aXL49GknMT04Q=
Subject key identifier: D6:7D:50:D3:8C:D3:74:76:97:B3:D0:A8:DA:F7:AE:C2:D7:E8:02:E6
Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial: 019420D5D569638BAE9218D3A4A48EA75BE8
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/1n1Q04zTdHaXs9Co2veuwtfoAuY.roa
Signing time: Wed 01 Jan 2025 07:47:52 +0000
ROA not before: Wed 01 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31313
IP address blocks: 86.105.108.0/22 maxlen: 32
86.105.216.0/22 maxlen: 32
89.35.192.0/24 maxlen: 32
89.41.56.0/23 maxlen: 32
89.42.116.0/23 maxlen: 32
89.43.190.0/23 maxlen: 32
89.200.246.0/23 maxlen: 32
89.200.247.0/24 maxlen: 32
91.235.4.0/23 maxlen: 32
93.113.29.0/24 maxlen: 32
130.195.57.0/24 maxlen: 24
193.151.28.0/22 maxlen: 32
193.169.21.0/24 maxlen: 32
195.242.244.0/22 maxlen: 32
203.25.143.0/24 maxlen: 32
213.177.0.0/21 maxlen: 32
213.177.8.0/21 maxlen: 32
213.177.16.0/21 maxlen: 32
213.177.24.0/21 maxlen: 32
2a00:5dc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d5:69:63:8b:ae:92:18:d3:a4:a4:8e:a7:5b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d67d50d38cd3747697b3d0a8daf7aec2d7e802e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:51:b8:f4:6c:1b:6c:3f:39:aa:31:d2:17:
63:6b:00:27:81:54:89:97:20:a1:65:0c:93:30:27:
87:ff:7c:d9:53:2d:b3:3c:b6:f9:f1:46:71:b8:bd:
c3:af:e9:1f:be:60:c3:dc:2e:7d:03:b4:e4:6e:0d:
98:e1:24:dc:c6:01:83:4f:6b:37:a6:20:09:fd:7b:
58:fb:27:41:20:7c:77:2a:ea:99:ad:b6:6c:03:fd:
b1:a3:b7:b2:72:bb:1b:92:4a:5d:1e:46:37:56:eb:
1a:85:02:ad:2f:b0:f9:f4:a0:b4:de:88:68:b2:ca:
a0:e8:3a:6e:8e:19:2b:43:b8:40:61:c6:8d:2b:87:
1a:a9:c3:ea:c3:25:0f:e9:47:e6:14:30:e8:3a:36:
a7:9b:dd:31:3d:61:bf:85:e7:a7:b4:96:f6:fc:b3:
7b:bc:e4:c6:3f:55:b7:7d:9b:ac:af:43:e1:d5:57:
f7:7e:af:24:3a:79:a9:7c:9b:9d:18:76:a9:09:b4:
6f:d1:c3:22:53:fc:99:d8:1d:c1:1f:51:17:63:cc:
31:3c:38:16:f8:59:06:f9:a1:4e:4d:ff:14:cd:b8:
97:41:b4:18:d5:27:61:ea:c4:04:20:13:48:7d:a0:
a8:3a:30:9f:30:0f:dd:d0:75:78:1d:9c:70:91:21:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:50:D3:8C:D3:74:76:97:B3:D0:A8:DA:F7:AE:C2:D7:E8:02:E6
X509v3 Authority Key Identifier:
keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/1n1Q04zTdHaXs9Co2veuwtfoAuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.108.0/22
86.105.216.0/22
89.35.192.0/24
89.41.56.0/23
89.42.116.0/23
89.43.190.0/23
89.200.246.0/23
91.235.4.0/23
93.113.29.0/24
130.195.57.0/24
193.151.28.0/22
193.169.21.0/24
195.242.244.0/22
203.25.143.0/24
213.177.0.0/19
IPv6:
2a00:5dc0::/29
Signature Algorithm: sha256WithRSAEncryption
08:69:1a:d1:ca:7a:0a:12:b5:22:a1:d3:1a:e1:04:bd:d4:fc:
b3:27:c7:a2:3f:2c:80:9e:00:1f:d0:29:cd:a3:ee:c9:34:77:
d0:e1:5a:51:f0:30:fe:90:85:99:0e:74:98:31:16:20:79:53:
f5:8e:fe:83:b2:01:91:67:38:7c:ef:72:74:bc:74:db:81:e5:
27:7c:5b:6c:90:3e:f0:ae:e4:33:19:e3:65:02:fa:42:67:26:
a3:e3:ac:fb:de:f8:97:22:bd:30:c8:93:65:1f:f7:50:39:d4:
62:40:4a:cf:20:d3:b6:c2:c3:ab:3d:fa:26:cf:16:78:96:06:
4e:75:be:64:1c:2d:e8:85:44:0d:3e:7e:9f:f3:7f:50:30:c9:
da:dd:43:66:d1:f1:9e:3d:4b:de:cf:90:64:70:86:5a:de:39:
9e:65:aa:ee:11:c0:b6:c5:6e:32:ea:ed:65:f7:94:91:29:3f:
7b:da:df:39:32:00:2d:7e:1d:71:76:1c:47:62:a5:a3:40:0c:
ce:e4:3f:b0:2a:d5:31:e0:27:ad:f7:11:91:e9:6e:ab:32:00:
d6:15:03:bb:58:7c:ba:e5:3c:4a:18:67:23:51:8a:0d:69:28:
9f:85:0e:3c:9b:c2:a6:64:5a:68:ed:d3:05:e4:36:be:57:00:
f8:f2:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:32 2025 by rpki-client