Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/e_vQU-kfHwZ4KykgmwH6K-iZYPA.roa
File: e_vQU-kfHwZ4KykgmwH6K-iZYPA.roa (raw, json)
Hash identifier: fDT/oOPeFZD/6vkom276N5+2sY7K7U1eiKxTKVsizxQ=
Subject key identifier: 7B:FB:D0:53:E9:1F:1F:06:78:2B:29:20:9B:01:FA:2B:E8:99:60:F0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01944B9BF4623F7C5B98A45AACCBF30ECBF5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/e_vQU-kfHwZ4KykgmwH6K-iZYPA.roa
Signing time: Thu 09 Jan 2025 15:08:19 +0000
ROA not before: Thu 09 Jan 2025 15:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213005
IP address blocks: 81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
92.60.34.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
95.214.144.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.179.228.0/22 maxlen: 22
185.189.64.0/22 maxlen: 24
185.211.180.0/22 maxlen: 22
185.223.220.0/22 maxlen: 22
185.227.128.0/22 maxlen: 22
185.245.34.0/23 maxlen: 23
185.250.180.0/24 maxlen: 24
193.26.152.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:9b:f4:62:3f:7c:5b:98:a4:5a:ac:cb:f3:0e:cb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 15:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bfbd053e91f1f06782b29209b01fa2be89960f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:cf:7a:e0:50:ed:36:06:5e:fc:1a:6d:b9:
ed:cf:5e:7a:53:2e:c1:87:2c:05:e3:85:51:8c:c6:
0d:f0:14:b2:89:6a:26:0f:bb:3d:1b:23:43:1d:11:
37:b2:e9:2d:2d:6a:b8:81:26:3b:e2:1a:53:18:2b:
dc:78:7b:21:a7:fc:2b:7f:30:6b:dd:fe:a0:9a:35:
34:f6:fa:32:88:3c:0a:99:ea:88:b3:54:f4:9b:63:
13:94:1a:1c:dc:f0:fa:38:b4:d2:43:6a:88:db:50:
59:86:06:f3:a8:c1:33:2b:2b:d9:db:d0:81:4a:d0:
0d:f9:04:d1:38:0f:6b:b9:07:07:fd:00:18:40:69:
0d:77:26:c9:f4:8f:0d:91:8f:c0:8a:08:71:c1:e0:
c5:7f:b1:94:02:c0:a2:bf:a6:22:f7:8c:29:9c:06:
bc:bb:75:ed:12:16:63:b1:57:d2:76:da:43:02:d2:
78:b2:2c:39:91:8b:7d:3d:e6:3e:5c:8f:56:ab:2e:
62:08:df:3b:ab:f6:80:bb:cb:71:aa:f2:bb:a3:f0:
91:58:26:7e:5f:b7:e4:52:f5:cd:80:80:35:43:d3:
83:ea:d4:d6:f2:bf:0c:7b:0c:c8:49:13:64:6d:b7:
04:f1:f2:21:c8:3f:06:58:05:10:c3:82:c0:1e:93:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FB:D0:53:E9:1F:1F:06:78:2B:29:20:9B:01:FA:2B:E8:99:60:F0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/e_vQU-kfHwZ4KykgmwH6K-iZYPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
92.60.34.0/24
93.92.228.0/22
95.214.144.0/22
185.106.124.0/22
185.179.228.0/22
185.189.64.0/22
185.211.180.0/22
185.223.220.0/22
185.227.128.0/22
185.245.34.0/23
185.250.180.0/24
193.26.152.0/22
193.35.88.0/22
194.38.56.0/22
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
71:79:f0:b5:99:34:de:26:70:67:91:77:2a:3c:04:8f:5f:81:
fe:ec:70:fe:61:47:49:0e:5f:77:41:7c:40:04:f8:78:ce:04:
5b:72:d0:00:b4:8b:b4:67:e6:79:a6:f9:82:55:9b:57:af:30:
e3:01:3a:8d:79:05:62:2c:0d:f4:7e:4b:24:48:17:32:34:bf:
04:9a:5b:5f:6e:30:f6:25:b4:18:36:c2:bf:bd:02:db:f5:c3:
63:18:89:4e:12:2e:98:61:4b:e2:f2:2e:d8:96:1e:c7:20:a1:
04:ab:06:32:8e:d2:d7:fd:b3:0f:ae:95:fd:4f:c1:89:d6:0d:
fd:5b:a6:2c:f0:36:eb:ce:e9:49:70:88:24:e1:33:8d:c9:f6:
9f:c7:cd:00:3f:95:0b:54:e7:5f:0a:d1:46:33:ad:b0:cf:2d:
41:d0:08:be:6e:ca:2b:eb:c0:fc:23:95:bf:77:34:a9:0e:aa:
d6:3b:99:ea:5a:61:53:b8:02:2b:4c:df:13:c5:39:64:a9:b1:
8c:6a:d3:89:d8:e6:c3:d0:04:34:db:0e:0d:7b:67:f0:d2:96:
7b:69:54:4f:6d:d9:f1:35:ac:a9:cc:41:ff:1c:b6:99:6e:84:
f5:67:1d:7d:84:59:bf:0a:33:4e:fa:08:bc:5a:d6:f2:0a:42:
58:eb:32:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:28 2025 by rpki-client