Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/8g9bg-pK2coR2xc2D_a9PJVKJeQ.roa
File: 8g9bg-pK2coR2xc2D_a9PJVKJeQ.roa (raw, json)
Hash identifier: Sri7SGO6ABpjeLfhkWLnHnFF2H4nTIC/JPupEaw1pKE=
Subject key identifier: F2:0F:5B:83:EA:4A:D9:CA:11:DB:17:36:0F:F6:BD:3C:95:4A:25:E4
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 019421B1C38C6898F5D3664FFD61E7F6A4E2
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/8g9bg-pK2coR2xc2D_a9PJVKJeQ.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207464
IP address blocks: 62.241.32.0/20 maxlen: 21
85.113.72.0/21 maxlen: 22
109.72.160.0/20 maxlen: 21
147.161.16.0/22 maxlen: 23
185.36.212.0/22 maxlen: 23
185.135.134.0/23 maxlen: 23
185.154.16.0/22 maxlen: 23
2a00:f0a0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c3:8c:68:98:f5:d3:66:4f:fd:61:e7:f6:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f20f5b83ea4ad9ca11db17360ff6bd3c954a25e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:16:8b:0a:d9:24:6b:4d:c5:e5:41:97:24:
70:5b:67:20:37:66:49:3a:9a:40:e9:9d:65:da:fb:
44:50:85:16:05:d6:c9:65:1a:2d:5e:d3:29:56:f0:
fb:0a:94:53:b9:96:dd:76:fd:98:92:d1:d7:95:07:
57:9a:ac:1c:1b:d3:8a:09:4c:45:92:18:12:ea:f0:
f5:8c:7b:ad:42:7a:89:0e:94:d5:ad:f4:8b:2f:79:
ad:c6:dc:da:7a:d5:a7:a2:bc:95:41:11:65:b9:ab:
b4:36:05:df:d2:fe:31:52:25:39:91:a6:74:a4:db:
20:7c:6f:fe:62:b2:fc:3d:78:6f:16:9e:56:d1:85:
46:a8:e4:a4:0b:04:e3:66:5b:28:07:d4:10:7b:a1:
0c:ba:46:3a:0f:af:6e:03:55:b8:d9:dc:39:2d:7d:
36:69:33:9b:7d:bd:c7:d5:cb:87:78:a8:ac:4c:50:
84:a8:75:10:3c:db:30:27:fa:f9:56:80:d0:84:4f:
4e:10:a1:cc:84:79:0a:65:80:4a:cd:56:06:ff:51:
06:fc:12:f0:7b:f1:74:03:95:d4:df:ce:30:59:5b:
87:a5:0a:67:6e:20:2b:76:9a:ad:a6:4f:1d:1f:84:
3e:73:7c:f5:7e:d8:63:70:cd:19:9c:63:60:97:8a:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0F:5B:83:EA:4A:D9:CA:11:DB:17:36:0F:F6:BD:3C:95:4A:25:E4
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/8g9bg-pK2coR2xc2D_a9PJVKJeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.241.32.0/20
85.113.72.0/21
109.72.160.0/20
147.161.16.0/22
185.36.212.0/22
185.135.134.0/23
185.154.16.0/22
IPv6:
2a00:f0a0::/29
Signature Algorithm: sha256WithRSAEncryption
89:1f:49:6b:1b:85:03:b5:5c:0b:cf:7a:61:bf:f9:b0:17:0f:
3a:aa:80:0d:f8:1e:7f:e7:ff:86:54:a1:82:9f:c4:cc:8a:0c:
78:a2:63:b9:2e:9f:23:92:87:be:09:44:a4:74:78:1d:3b:88:
f2:46:01:e3:97:92:01:2f:47:f5:95:cb:b6:73:95:de:64:06:
ba:7a:67:3e:d1:aa:b7:81:cf:42:62:75:88:69:6d:a8:60:83:
a0:0f:14:c8:04:bc:02:02:80:32:c6:74:d2:a2:67:fa:11:71:
31:a4:f7:58:6a:0a:5d:62:dc:7a:02:91:9f:8a:ce:63:8e:d5:
52:f8:8c:63:7f:36:46:d2:12:4b:9c:ec:7c:2a:8a:76:f8:8e:
7b:e0:bb:0b:29:10:0b:c3:72:8d:32:6e:8b:b3:31:08:fb:0b:
53:79:f6:39:8c:4c:5f:d7:f8:31:30:c4:09:fe:9d:3a:68:ca:
14:e4:f2:d3:d9:8a:ce:66:32:de:0f:3f:9f:64:16:67:27:99:
9f:7b:f3:f1:6b:17:28:0c:93:59:1a:8a:e8:3f:e7:36:ea:15:
8d:dc:d7:a1:36:d6:b6:6a:a1:77:17:09:22:82:84:30:7f:68:
93:1c:42:9a:c4:b4:14:34:d4:da:29:2f:ed:61:e4:cb:2a:73:
58:40:18:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:23:34 2025 by rpki-client