Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/RSBqMA8SK5hkaH899w74rpWOWzA.roa
File: RSBqMA8SK5hkaH899w74rpWOWzA.roa (raw, json)
Hash identifier: ZarbLd1gWH81UzY1+uoaATMpd5XCQStSn4LP/xfm248=
Subject key identifier: 45:20:6A:30:0F:12:2B:98:64:68:7F:3D:F7:0E:F8:AE:95:8E:5B:30
Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial: 01942521E0CFB7EAEDAA7ABCACFEAAA83CA4
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/RSBqMA8SK5hkaH899w74rpWOWzA.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47156
IP address blocks: 83.136.234.0/24 maxlen: 24
83.136.236.0/24 maxlen: 24
83.136.238.0/24 maxlen: 24
83.136.239.0/24 maxlen: 24
91.203.196.0/22 maxlen: 22
93.188.204.0/24 maxlen: 24
176.103.96.0/20 maxlen: 20
185.27.208.0/22 maxlen: 22
213.5.24.0/21 maxlen: 21
2a04:34c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e0:cf:b7:ea:ed:aa:7a:bc:ac:fe:aa:a8:3c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45206a300f122b9864687f3df70ef8ae958e5b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:50:d2:10:4a:15:c6:48:51:7f:33:8d:2a:
fd:f6:0f:74:8b:ba:04:93:91:8a:86:c4:a9:6c:cf:
8e:f1:aa:fd:8e:3f:f0:7e:33:e9:39:47:10:d0:da:
d7:15:40:44:21:f4:b0:da:39:a1:c4:bf:6a:ac:5b:
d7:88:b4:44:1d:76:8b:1b:44:b1:0c:20:73:f2:0a:
8b:69:1b:fe:93:58:38:3c:b3:5d:08:f0:d5:bc:85:
bc:f3:4d:e5:46:6f:1d:96:f0:58:05:87:05:14:b0:
fa:48:27:46:d8:35:93:f5:05:05:58:7c:fc:0c:72:
bf:a1:f2:3f:f4:10:f9:6e:f7:40:b4:ee:63:c4:f9:
52:9d:8e:9f:ef:ce:c1:2a:ae:bd:9f:04:de:ec:03:
53:34:3c:a8:89:5f:3d:69:5b:53:ce:0b:81:5a:44:
be:c6:11:6f:cc:23:ad:9d:61:7b:d2:49:45:0f:d4:
51:7c:fa:c7:24:82:74:c5:9b:4c:00:e1:31:c2:20:
66:a9:51:4b:72:25:5c:f0:81:fb:bb:81:ab:72:45:
d8:a8:96:e2:26:58:2f:46:fc:1c:4b:3c:d3:60:ed:
06:6b:9a:88:d9:c4:a6:45:d4:37:ef:e7:04:89:d5:
24:fc:64:4a:a2:ac:80:98:6d:bf:59:d2:e6:59:a5:
a2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:20:6A:30:0F:12:2B:98:64:68:7F:3D:F7:0E:F8:AE:95:8E:5B:30
X509v3 Authority Key Identifier:
keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/RSBqMA8SK5hkaH899w74rpWOWzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.234.0/24
83.136.236.0/24
83.136.238.0/23
91.203.196.0/22
93.188.204.0/24
176.103.96.0/20
185.27.208.0/22
213.5.24.0/21
IPv6:
2a04:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:7c:47:cb:68:32:00:bc:ea:48:a0:6e:96:8b:9b:0b:90:8e:
3a:40:98:3a:8f:95:27:b4:f2:8d:e5:3c:68:80:92:48:76:3b:
46:fd:61:a2:50:06:30:63:c3:b4:d5:e7:37:e4:c3:23:6c:26:
13:2b:0a:d8:ee:2e:f5:af:e2:a9:85:2c:4e:a5:bb:51:5f:4b:
92:75:04:a3:12:51:33:80:b3:ff:b0:d4:f0:42:36:b9:1b:01:
78:c9:a6:72:7e:ca:a2:c0:30:dd:9e:29:8a:1b:2b:c3:1a:7a:
4b:49:56:20:28:f4:e7:0c:1b:5c:53:7e:cb:a7:71:6d:4f:2c:
62:3f:d2:f9:55:d2:09:a1:0f:46:0d:77:3c:df:3c:c0:e8:e3:
a2:8b:a9:27:17:5c:f6:ea:9d:b1:95:6e:7a:83:8b:3c:e5:37:
fc:a1:04:37:52:65:06:84:a7:d5:88:28:b8:c6:60:7b:d3:a7:
d6:e7:24:43:ca:6a:6e:5a:77:cd:c5:1c:f7:2b:95:cf:81:d4:
13:73:64:f1:0e:3d:e7:fc:fd:a7:6b:73:94:36:f6:46:5f:3a:
38:26:9c:3e:a1:9b:4b:0f:ea:56:35:de:69:b9:27:79:b7:16:
33:c8:ea:cd:07:81:11:cb:f2:67:9e:e0:8f:65:d3:8f:b1:82:
9c:5c:41:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:15 2025 by rpki-client