Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/7_33wgCbi5Y-BqE-WsoqVlLEolk.roa
File: 7_33wgCbi5Y-BqE-WsoqVlLEolk.roa (raw, json)
Hash identifier: yRQ5YaJv9QRGwiGdb4XkbJa+PHmS1LktsRDaDtP0+ks=
Subject key identifier: EF:FD:F7:C2:00:9B:8B:96:3E:06:A1:3E:5A:CA:2A:56:52:C4:A2:59
Certificate issuer: /CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Certificate serial: 019422203842D858B1FDC32210F934C68B86
Authority key identifier: 70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/7_33wgCbi5Y-BqE-WsoqVlLEolk.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200044
IP address blocks: 89.249.16.0/20 maxlen: 24
89.249.31.0/24 maxlen: 24
93.158.192.0/21 maxlen: 21
93.158.192.0/22 maxlen: 22
93.158.192.0/23 maxlen: 23
93.158.192.0/24 maxlen: 24
93.158.193.0/24 maxlen: 24
93.158.194.0/23 maxlen: 23
93.158.194.0/24 maxlen: 24
93.158.195.0/24 maxlen: 24
93.158.196.0/24 maxlen: 24
93.158.197.0/24 maxlen: 24
93.158.198.0/23 maxlen: 23
93.158.198.0/24 maxlen: 24
93.158.199.0/24 maxlen: 24
109.238.240.0/20 maxlen: 24
109.238.246.0/24 maxlen: 24
185.159.64.0/22 maxlen: 24
185.159.64.0/24 maxlen: 24
194.156.28.0/24 maxlen: 24
2a00:eb8::/32 maxlen: 32
2a0d:380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:38:42:d8:58:b1:fd:c3:22:10:f9:34:c6:8b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=effdf7c2009b8b963e06a13e5aca2a5652c4a259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:85:7d:8d:77:8d:0d:12:c4:90:eb:d8:d9:
e9:f5:bb:75:aa:22:df:9f:68:4a:4c:f0:37:07:0b:
03:29:94:ed:85:31:92:28:bf:09:67:6e:28:70:cb:
7d:8d:c7:31:af:19:a7:37:96:7d:9c:db:8d:3f:de:
1c:3a:15:6a:8b:df:d1:82:63:41:4b:7c:b1:dc:0f:
50:1e:57:05:7e:07:74:da:a1:9e:d7:39:ea:40:8e:
72:ba:54:43:9c:2c:4c:98:5a:26:04:66:1f:95:b1:
b2:d6:1f:d7:8e:23:45:da:f5:5f:f6:95:7d:2c:f6:
c5:60:dd:9f:27:b2:94:3b:53:4a:2a:e9:e7:8c:4b:
90:d5:8d:e6:bc:ce:5e:75:a1:71:0f:b8:b7:81:ba:
1b:9b:1c:db:70:e5:52:4a:12:47:f5:65:b9:48:39:
42:84:6b:1a:ea:93:ab:ab:dc:2d:c8:f6:5e:72:ec:
62:1c:ae:ed:a9:0a:2d:0b:ca:51:6c:57:f5:f0:05:
4f:ec:59:23:1b:0c:48:da:7f:c1:a5:8d:5d:f4:fd:
6b:d0:29:d2:a5:68:70:97:a8:47:4d:2f:27:3d:cf:
50:f1:98:50:89:7c:54:77:e3:37:e6:8f:4a:9b:94:
2a:7a:84:d1:fe:f6:42:c0:30:73:28:46:41:e8:10:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:F7:C2:00:9B:8B:96:3E:06:A1:3E:5A:CA:2A:56:52:C4:A2:59
X509v3 Authority Key Identifier:
keyid:70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/7_33wgCbi5Y-BqE-WsoqVlLEolk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.16.0/20
93.158.192.0/21
109.238.240.0/20
185.159.64.0/22
194.156.28.0/24
IPv6:
2a00:eb8::/32
2a0d:380::/29
Signature Algorithm: sha256WithRSAEncryption
41:68:ca:26:43:c6:33:13:c5:f0:cc:3e:49:f8:7f:0f:b7:0e:
bb:eb:78:c6:19:f7:23:2c:6e:86:2f:21:9b:f2:61:64:9c:4d:
bb:e2:66:16:92:ed:70:a7:da:71:1f:7d:86:43:d3:d8:71:46:
cb:61:b2:59:28:90:9c:23:79:37:12:24:fc:83:b9:bf:84:dd:
fa:f1:2c:91:d7:96:4e:aa:1c:06:4d:a5:84:85:66:d7:c1:d5:
0f:50:93:26:27:77:cd:8e:e9:08:57:34:57:cd:af:6b:fd:19:
85:3b:cf:4d:f9:e6:6b:1c:c4:02:66:d6:de:67:0c:1e:bc:79:
07:81:c0:47:79:3e:ee:c8:4e:8d:f3:8f:4e:41:55:02:60:93:
85:a8:e3:5c:6f:15:da:2d:77:bd:22:96:2c:ba:71:60:6c:7b:
69:82:ce:0b:39:ce:3b:02:ab:ba:6d:4e:03:6f:db:ee:51:3b:
8b:b6:86:41:1b:16:87:55:c1:0d:e6:5f:08:8f:47:de:ea:ac:
60:27:67:75:97:23:7b:58:8e:76:e7:21:17:e0:b8:80:bf:9a:
cb:5d:c1:68:b8:2e:b8:bf:0a:1b:5a:7b:96:dc:aa:a7:b0:8d:
e1:d9:34:d6:c1:2f:c5:f5:54:40:72:79:3a:a4:56:a6:9a:66:
79:13:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:30 2025 by rpki-client