Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa
File: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (raw, json)
Hash identifier: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=
Subject key identifier: 0D:A7:B2:15:92:15:3A:96:8A:26:7A:EB:76:9F:08:F1:79:0A:7E:CC
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 0194407F9FE8DC172C7FFB7DE8389BE9127F
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa
Signing time: Tue 07 Jan 2025 11:21:33 +0000
ROA not before: Tue 07 Jan 2025 11:21:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44946
IP address blocks: 93.94.128.0/21 maxlen: 24
93.94.135.0/24 maxlen: 24
185.59.200.0/22 maxlen: 24
194.187.64.0/22 maxlen: 24
195.49.152.0/22 maxlen: 24
2a02:158::/32 maxlen: 64
2a02:158:600::/39 maxlen: 39
2a02:158:aa00::/39 maxlen: 39
2a02:158:fffe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:7f:9f:e8:dc:17:2c:7f:fb:7d:e8:38:9b:e9:12:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jan 7 11:21:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0da7b21592153a968a267aeb769f08f1790a7ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:ab:8a:a4:56:4c:6a:a3:55:5d:11:81:7f:
d3:6c:91:3e:a1:b0:ce:b6:53:01:d1:2d:3e:80:bc:
2d:e4:dd:a7:e6:52:ea:4c:8a:e8:2d:40:7f:b5:3e:
11:19:5d:ab:d4:16:bc:8f:07:53:db:8e:6d:ec:e7:
b6:07:4d:c6:ae:c3:4a:b5:e1:4d:b9:43:87:92:af:
a9:b0:98:b8:a8:81:ab:25:6d:ec:85:da:8e:14:1f:
2c:e6:e6:16:ff:c3:49:da:3d:65:e0:79:05:2d:d8:
b0:da:3c:f8:d0:bb:95:69:c3:30:fb:b9:f6:8a:fd:
1d:fe:59:e4:74:9b:17:46:48:aa:84:ed:d0:51:88:
55:27:26:02:29:f7:a0:75:6c:5d:33:04:75:03:45:
ce:7f:ef:6f:b7:83:9c:4e:c9:84:af:66:5d:98:09:
14:cd:23:2f:59:3a:84:95:38:15:d2:8c:3a:82:28:
4a:1c:02:32:0e:d7:dc:dd:a1:44:f8:cb:55:c3:d6:
eb:01:b0:6c:62:21:84:a1:ac:4b:fa:82:2f:81:e4:
d1:a2:8f:42:73:00:63:37:a0:70:10:3d:69:52:03:
2b:ef:e7:aa:8a:f0:81:27:42:13:4f:8d:3c:b3:e3:
1f:f4:75:ff:7b:72:7d:03:af:64:95:e1:30:95:ab:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A7:B2:15:92:15:3A:96:8A:26:7A:EB:76:9F:08:F1:79:0A:7E:CC
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.128.0/21
185.59.200.0/22
194.187.64.0/22
195.49.152.0/22
IPv6:
2a02:158::/32
Signature Algorithm: sha256WithRSAEncryption
12:6f:9a:c0:e6:f5:f3:e6:93:8e:9e:d0:ac:d9:33:ce:59:82:
be:19:9a:42:7b:22:5a:e9:0e:bb:14:9b:51:17:95:b0:71:42:
b6:48:80:33:2d:43:5a:c0:1a:63:08:9a:d8:ef:93:52:e9:e4:
b3:c9:ea:d8:68:37:19:09:53:1d:6e:74:dd:c8:ae:97:6e:0c:
99:75:bc:7f:af:da:ba:39:20:a0:63:6b:ea:e4:b4:76:15:d5:
c8:48:d4:ab:a7:53:37:1e:32:ad:2e:60:02:af:04:87:09:f1:
71:fd:e3:48:48:77:b1:a8:e8:ef:e6:f2:bc:a5:ed:ec:78:97:
75:b1:0a:1d:91:68:66:fb:4a:96:50:5f:06:fe:74:8c:db:bc:
64:92:e3:83:8e:29:1b:62:4e:5d:a2:dc:da:63:83:5a:1f:62:
0f:57:90:ab:4a:0d:a3:c4:63:ea:f4:98:4c:b4:77:14:b7:c4:
e9:54:d7:b9:44:b7:0e:7d:9e:fd:f0:37:db:c3:e0:ef:cc:92:
91:06:14:63:48:09:8b:e9:09:cc:5c:f2:4a:95:fa:89:ee:36:
d1:21:11:9e:2a:44:6c:fb:67:b6:10:11:8f:67:a2:63:ea:65:
6c:9a:29:26:d4:be:78:58:ff:23:d3:e5:0d:8a:94:b1:94:70:
01:50:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:56 2025 by rpki-client