Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/E_SbHhulLxUXV48L5IqtCI9dFbI.roa
File: E_SbHhulLxUXV48L5IqtCI9dFbI.roa (raw, json)
Hash identifier: 5DId2BRgxGgljXN1uXS+k3U/MM/cxr/1KySQIOmRhas=
Subject key identifier: 13:F4:9B:1E:1B:A5:2F:15:17:57:8F:0B:E4:8A:AD:08:8F:5D:15:B2
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA34BB789E5E22E0A92C490A1B9190
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/E_SbHhulLxUXV48L5IqtCI9dFbI.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41571
IP address blocks: 86.104.124.0/24 maxlen: 24
89.33.196.0/24 maxlen: 24
89.34.5.0/24 maxlen: 24
89.34.93.0/24 maxlen: 24
89.35.55.0/24 maxlen: 24
89.35.116.0/24 maxlen: 24
89.36.19.0/24 maxlen: 24
89.36.92.0/24 maxlen: 24
89.41.63.0/24 maxlen: 24
89.42.35.0/24 maxlen: 24
89.42.214.0/24 maxlen: 24
89.44.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:34:bb:78:9e:5e:22:e0:a9:2c:49:0a:1b:91:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13f49b1e1ba52f1517578f0be48aad088f5d15b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:9d:f9:62:cc:ad:9e:03:8a:74:8c:4e:b7:
e5:df:76:db:9a:aa:39:f8:0a:db:a6:cf:96:6c:db:
09:66:4f:44:48:9a:5d:f5:dd:44:f2:1c:37:93:d4:
3f:ca:3c:17:c4:f5:a4:5c:fe:75:aa:f3:11:ba:71:
67:45:32:2c:2c:40:be:41:ae:24:45:13:54:7c:69:
57:05:eb:b4:f0:ea:e6:1f:07:23:e0:18:b6:8e:8a:
c2:67:38:de:ca:94:75:1e:c1:f9:ac:28:d4:01:a7:
68:49:69:b9:e1:e5:33:29:83:03:08:fc:fc:a1:75:
96:3f:74:df:41:b1:54:ac:71:69:98:88:dd:14:26:
29:5b:c2:65:87:9e:d1:00:7f:f3:0b:22:83:57:a5:
9c:b0:18:5c:8a:e4:97:0b:67:af:25:e6:a4:c6:4f:
04:ef:fa:f5:99:d7:6c:f9:76:61:23:37:06:6b:ad:
44:47:a1:8e:c5:0e:8b:ec:b3:e0:3f:c8:91:d3:21:
c2:42:af:2b:5e:1a:b5:ef:7f:ed:e9:4b:b3:eb:08:
c9:a7:a4:ad:32:5a:32:5a:f7:3f:4c:dc:62:d1:ac:
d5:7e:c2:1e:a4:58:fd:ef:2c:56:af:16:54:54:de:
33:d0:6b:53:11:6b:82:35:b4:46:a8:b3:de:35:90:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F4:9B:1E:1B:A5:2F:15:17:57:8F:0B:E4:8A:AD:08:8F:5D:15:B2
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/E_SbHhulLxUXV48L5IqtCI9dFbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.124.0/24
89.33.196.0/24
89.34.5.0/24
89.34.93.0/24
89.35.55.0/24
89.35.116.0/24
89.36.19.0/24
89.36.92.0/24
89.41.63.0/24
89.42.35.0/24
89.42.214.0/24
89.44.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:1c:eb:5b:00:48:f4:22:17:68:00:81:c6:c2:06:4a:e3:5b:
fa:a4:ac:b5:e5:00:cf:bd:ea:c8:58:63:d4:70:fa:e5:ce:df:
65:fc:e2:c7:66:4f:82:73:0e:db:b9:41:a5:aa:29:ce:b8:a3:
d9:8b:05:ac:91:75:2c:77:be:bb:7d:d9:81:ed:c5:ad:44:30:
0e:ba:b2:c5:20:9b:84:fd:d8:9c:22:52:f3:ef:41:f1:af:93:
c0:61:8c:da:d5:cf:5c:55:f8:ae:d9:5c:1a:90:db:59:5a:8a:
f2:dd:bf:76:22:4d:3a:36:6f:ee:33:f8:ec:f7:fd:f5:c3:8c:
ac:2b:9f:43:c6:99:af:91:13:dd:8a:54:e0:ea:6b:e8:93:dc:
40:71:2c:d5:36:48:0d:3a:82:8e:ba:92:47:d9:b9:85:8f:34:
f2:7d:16:dc:34:3f:4d:9f:c0:23:0e:37:64:30:48:5e:52:04:
0f:85:5b:12:96:b9:66:39:cc:4a:b2:22:2c:c6:dc:42:b2:db:
83:63:82:e6:5c:b9:12:2b:31:13:0a:45:2c:62:4c:6a:67:16:
09:4d:c3:a7:7b:5e:9a:f2:1e:e1:f6:25:9e:fd:8a:19:21:9f:
46:55:e0:95:31:19:e7:6d:d2:c9:cd:60:92:6d:76:c8:e9:4e:
b3:2e:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:33:53 2025 by rpki-client