Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa
File: gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa (raw, json)
Hash identifier: 5qjlUc3/t7psPBo135Wzs5OYxrc/B+KKSYzn0gcEaGk=
Subject key identifier: 80:F1:3D:57:4B:4E:F0:93:CB:0E:FF:0C:09:91:FE:52:E5:AF:76:74
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 0194266BBD4A2CF516A6FAFD5068309CA1CD
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25394
IP address blocks: 31.209.112.0/20 maxlen: 24
82.100.192.0/18 maxlen: 24
85.220.128.0/17 maxlen: 24
91.196.140.0/22 maxlen: 24
93.93.248.0/21 maxlen: 24
109.75.16.0/20 maxlen: 24
153.94.32.0/20 maxlen: 24
153.94.48.0/21 maxlen: 24
153.94.128.0/17 maxlen: 24
178.210.96.0/19 maxlen: 24
212.90.128.0/19 maxlen: 24
213.172.96.0/19 maxlen: 24
217.199.192.0/20 maxlen: 24
2001:1640::/32 maxlen: 48
2a00:4d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bd:4a:2c:f5:16:a6:fa:fd:50:68:30:9c:a1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80f13d574b4ef093cb0eff0c0991fe52e5af7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:8e:11:04:43:32:66:23:7a:c7:bd:ad:57:
3c:6a:5d:64:0b:5f:d6:e7:fd:53:d4:ca:24:8f:c8:
64:91:7f:82:15:c0:7a:3c:2d:90:58:f4:26:33:08:
cc:82:f9:27:87:9d:ed:19:11:a6:2a:59:f9:61:52:
ed:f1:22:f0:16:44:c5:cf:2f:7c:09:be:6b:93:17:
46:6b:b2:b5:70:4f:49:3d:ed:7b:ce:79:df:be:8f:
17:d1:dc:b6:79:aa:b0:2e:52:af:8b:9a:10:54:78:
4d:84:8c:d7:b3:42:a1:fd:1d:30:83:99:78:16:5c:
d0:87:51:40:5c:df:2f:3a:58:2d:5c:1d:5e:27:3f:
9b:b8:a8:99:71:66:46:b2:51:76:93:f4:34:bb:63:
4a:5e:de:62:d7:36:97:a5:71:ea:ad:34:2d:6d:81:
9f:74:77:71:d3:40:17:7c:0c:77:21:81:73:3c:a9:
f6:c2:3a:a1:28:27:62:ee:ae:37:d1:75:6b:19:00:
d0:ef:e6:d0:0b:7d:7e:cf:df:77:1c:5b:eb:48:a2:
9c:9c:3f:16:dc:ff:97:7a:5a:b4:fc:0a:ba:b3:5c:
8e:99:27:6a:63:21:c5:3d:00:a7:c8:c7:96:fb:80:
57:ee:37:b7:35:32:30:d4:6a:70:4c:1b:0d:af:ae:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F1:3D:57:4B:4E:F0:93:CB:0E:FF:0C:09:91:FE:52:E5:AF:76:74
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.112.0/20
82.100.192.0/18
85.220.128.0/17
91.196.140.0/22
93.93.248.0/21
109.75.16.0/20
153.94.32.0-153.94.55.255
153.94.128.0/17
178.210.96.0/19
212.90.128.0/19
213.172.96.0/19
217.199.192.0/20
IPv6:
2001:1640::/32
2a00:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
39:7e:3a:6a:61:90:f0:88:e1:c0:53:1b:57:44:f1:ad:78:07:
19:c7:ef:ab:19:ca:2c:51:6f:4a:01:0e:58:64:00:4a:1d:6c:
59:ff:d0:d6:db:21:fa:a5:e3:00:3a:3f:12:8a:9a:e6:15:f2:
25:ec:21:98:94:83:3c:63:70:08:81:f5:38:e5:01:25:56:85:
b8:40:10:52:a3:92:ab:c1:77:0d:94:b0:94:c4:9e:f8:1c:15:
04:6d:da:3c:82:9d:df:4a:1b:21:57:50:18:ca:6c:fc:1f:1e:
ff:f5:c6:86:a8:24:84:b5:09:c9:8b:c4:94:b5:81:bd:d9:5e:
08:91:44:16:75:d5:ac:fc:7d:c5:e1:03:1e:3f:7c:05:15:59:
97:cb:8b:4d:12:47:f7:21:8c:67:c3:a5:fa:2d:3b:24:d1:87:
df:b4:2e:62:88:f7:8a:7e:cf:d1:10:a4:11:9d:0e:85:e8:9e:
01:d2:31:6c:62:0b:1f:a7:fd:f4:98:11:2c:b6:4d:c5:b5:66:
92:3e:61:b5:94:01:58:f2:3f:ee:f8:34:08:a2:f9:87:50:e3:
95:38:4d:85:81:53:a9:ad:7f:5e:e7:c5:19:57:c5:a4:cb:4b:
d7:48:35:0f:4b:9c:b2:78:3b:40:bd:11:c0:12:7d:ab:47:9e:
b4:ec:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:21 2025 by rpki-client