Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5c5821-f342-477a-9eb8-acc2879f9f2e/1/Dm8DQEagwraWKJ_smD9YZUQvlAY.roa
File: Dm8DQEagwraWKJ_smD9YZUQvlAY.roa (raw, json)
Hash identifier: +2AHlVlYuTcOUbNUMrW3NVU+tUPiS/ihLWneD8oarzA=
Subject key identifier: 0E:6F:03:40:46:A0:C2:B6:96:28:9F:EC:98:3F:58:65:44:2F:94:06
Certificate issuer: /CN=1360d57284bf127c28140e04b26a8f3e8bdef179
Certificate serial: 019426D93F1E7DE2089CFE37241E896E13A9
Authority key identifier: 13:60:D5:72:84:BF:12:7C:28:14:0E:04:B2:6A:8F:3E:8B:DE:F1:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2DVcoS_EnwoFA4EsmqPPove8Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5c5821-f342-477a-9eb8-acc2879f9f2e/1/Dm8DQEagwraWKJ_smD9YZUQvlAY.roa
Signing time: Thu 02 Jan 2025 11:49:19 +0000
ROA not before: Thu 02 Jan 2025 11:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20986
IP address blocks: 91.236.153.0/24 maxlen: 24
185.51.216.0/22 maxlen: 22
185.51.216.0/24 maxlen: 24
185.51.217.0/24 maxlen: 24
185.51.218.0/24 maxlen: 24
185.51.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:3f:1e:7d:e2:08:9c:fe:37:24:1e:89:6e:13:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1360d57284bf127c28140e04b26a8f3e8bdef179
Validity
Not Before: Jan 2 11:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e6f034046a0c2b696289fec983f5865442f9406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:76:47:05:d5:2a:ea:5f:22:fb:cc:72:61:
97:ac:24:49:2f:32:07:64:eb:f0:d3:93:96:79:7b:
32:38:af:dd:70:74:2d:fc:e5:fc:7c:c6:c6:f4:8b:
21:cc:53:10:4c:87:cb:8f:2e:46:67:1e:3a:25:7e:
dd:d5:01:fd:24:3e:7f:c5:c2:c1:8d:b4:90:1e:45:
9f:0a:dd:e3:21:9e:f4:6e:14:61:4e:30:52:05:26:
e4:c5:9e:c2:5d:a0:95:18:cc:cb:08:23:5e:59:d9:
92:05:05:6d:2c:94:de:b4:bf:cd:5a:74:e2:33:b6:
35:7b:6a:25:56:60:98:d7:a0:dc:43:d4:de:9c:1f:
61:6a:bc:d6:e2:5b:2d:53:8f:b2:14:d8:96:0f:25:
02:0b:1b:c2:8d:5e:de:bb:dd:79:a4:28:1a:d1:5c:
0c:a1:91:aa:eb:a3:fa:78:6d:a7:3b:e0:56:a3:1c:
98:34:9c:ff:84:a9:8d:35:31:9b:62:1b:5e:e8:ff:
21:e8:1f:18:1f:15:86:c7:2c:57:5a:8c:55:be:bf:
99:be:c5:51:cf:55:f3:64:12:7b:8d:33:66:ac:4f:
13:39:ea:e8:b6:d5:53:6e:9f:4d:ac:3f:48:ba:93:
85:2f:80:31:42:39:a9:80:a3:29:dc:37:c9:1a:78:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:03:40:46:A0:C2:B6:96:28:9F:EC:98:3F:58:65:44:2F:94:06
X509v3 Authority Key Identifier:
keyid:13:60:D5:72:84:BF:12:7C:28:14:0E:04:B2:6A:8F:3E:8B:DE:F1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2DVcoS_EnwoFA4EsmqPPove8Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5c5821-f342-477a-9eb8-acc2879f9f2e/1/Dm8DQEagwraWKJ_smD9YZUQvlAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5c5821-f342-477a-9eb8-acc2879f9f2e/1/E2DVcoS_EnwoFA4EsmqPPove8Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.153.0/24
185.51.216.0/22
Signature Algorithm: sha256WithRSAEncryption
53:12:3e:8d:22:6b:21:9f:f6:01:f0:24:a7:a4:70:dc:d2:90:
ad:56:8c:e9:3c:69:14:49:8b:f8:04:ff:e9:70:83:5b:a0:37:
22:12:51:6f:08:c4:48:16:41:4a:bf:3f:86:0f:98:83:a8:87:
80:ac:30:5f:7b:01:72:ee:e1:00:71:7f:3b:0f:d5:5c:04:b0:
0a:8f:e1:97:9e:27:98:77:be:47:71:b0:e7:88:38:d9:38:fe:
df:56:86:1a:7e:e7:b7:0d:48:e7:de:18:65:56:be:4c:c1:c2:
94:60:7f:fa:bd:fa:24:b5:95:a1:6b:67:8b:63:8e:1e:02:12:
06:86:b7:4c:12:09:91:18:e9:3e:6e:ed:28:f9:7b:19:68:72:
c5:ec:10:7d:67:42:89:37:08:4a:3d:5b:31:cf:6f:f8:58:2b:
51:21:3b:78:c8:96:ee:f0:ed:53:d7:bd:7a:bd:fd:6a:2a:a0:
a6:da:bb:ae:fb:b3:3e:78:2f:39:1e:85:bd:41:60:81:0f:ed:
74:a4:ab:41:fc:60:9f:da:35:45:87:46:25:f8:65:dd:7f:1c:
f8:f3:b6:ee:f1:87:75:cf:0a:74:2d:61:57:9a:ce:9d:05:a4:
3f:90:d8:02:80:71:7f:c7:d7:45:26:fd:66:a5:c1:fe:54:4e:
4c:0d:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:56 2025 by rpki-client