Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa
File: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (raw, json)
Hash identifier: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=
Subject key identifier: 4D:A0:31:C8:61:34:61:9E:E6:FB:14:70:33:A4:F5:AB:DC:0C:A9:0C
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 0194236A219A25612C3509C7D01957F60E2A
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa
Signing time: Wed 01 Jan 2025 19:49:05 +0000
ROA not before: Wed 01 Jan 2025 19:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49126
IP address blocks: 94.102.90.0/24 maxlen: 24
94.102.91.0/24 maxlen: 24
94.138.192.0/24 maxlen: 24
94.138.193.0/24 maxlen: 24
94.138.194.0/24 maxlen: 24
94.138.195.0/24 maxlen: 24
94.138.196.0/24 maxlen: 24
94.138.197.0/24 maxlen: 24
94.138.198.0/24 maxlen: 24
94.138.199.0/24 maxlen: 24
94.138.200.0/24 maxlen: 24
94.138.201.0/24 maxlen: 24
94.138.202.0/24 maxlen: 24
94.138.203.0/24 maxlen: 24
94.138.204.0/22 maxlen: 22
94.138.208.0/22 maxlen: 22
94.138.212.0/22 maxlen: 22
94.138.216.0/22 maxlen: 22
94.138.220.0/22 maxlen: 22
185.48.180.0/24 maxlen: 24
185.48.181.0/24 maxlen: 24
185.48.182.0/24 maxlen: 24
185.48.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:21:9a:25:61:2c:35:09:c7:d0:19:57:f6:0e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4da031c86134619ee6fb147033a4f5abdc0ca90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:a7:09:03:1c:5c:2a:78:41:ec:03:3e:84:
0d:06:ab:39:0f:2b:11:f9:4d:46:ab:a8:27:6f:48:
be:3c:02:74:61:e9:a2:bc:46:84:0e:cc:19:8e:e8:
1e:01:a0:ff:09:ef:11:03:75:ec:70:92:b5:f6:21:
f9:7d:b0:d1:86:f7:ad:5c:75:71:62:35:bc:f9:37:
cd:f7:46:ee:74:15:37:b7:d1:79:4e:77:01:7f:a7:
f6:a0:81:ef:f7:a4:69:a6:5d:b2:6c:16:42:86:ff:
bc:32:70:8b:33:07:d2:6c:5b:0b:f2:45:5c:a3:03:
d5:2d:fd:20:4a:0d:cf:9f:cb:8d:f9:30:3f:36:ab:
b2:fe:10:82:78:d1:ed:28:8e:4f:c5:fb:7e:f4:57:
43:19:6b:2d:99:85:b0:37:95:e5:ae:4c:bf:89:01:
d4:b6:c0:4d:b8:89:72:21:b3:3e:5c:a3:b6:ff:ad:
5f:aa:11:e1:1a:1c:ae:98:e7:01:69:e2:4d:07:8f:
ee:5b:e4:e6:b1:bc:2b:c3:98:c0:2c:90:71:1c:93:
26:18:d2:15:ee:a2:74:93:01:d4:1b:85:8b:63:25:
ab:3a:2b:4c:2d:f5:c1:a4:2d:65:86:e5:2e:a7:68:
95:82:c0:78:34:63:98:50:54:4b:5d:66:ca:65:aa:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:31:C8:61:34:61:9E:E6:FB:14:70:33:A4:F5:AB:DC:0C:A9:0C
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.102.90.0/23
94.138.192.0/19
185.48.180.0/22
Signature Algorithm: sha256WithRSAEncryption
05:92:0d:2d:74:b2:49:20:d4:a3:fd:52:b8:de:56:ff:bf:0d:
17:ce:1d:a8:11:f9:8c:df:1b:f9:6c:21:a9:d4:ea:ec:ef:c6:
de:1c:b3:51:b2:26:9b:be:c0:fa:e8:3d:5c:5d:c6:7b:bf:e6:
c5:dd:b2:5c:41:76:80:e4:e9:c0:4a:b4:f3:30:0c:00:d1:87:
d2:e5:5d:0d:68:f9:37:da:a3:7a:4f:df:1c:20:fc:d3:55:2a:
b5:74:f4:66:0b:e8:31:b5:b8:a3:96:3e:ab:3c:87:ed:24:72:
86:ee:63:4a:72:8d:09:df:46:aa:ba:8f:24:d8:72:32:6b:53:
70:bf:d0:a9:e0:04:be:9b:3f:ff:f7:0a:40:23:5a:9b:4f:9f:
e9:13:f6:b0:f6:77:09:17:1c:26:40:43:ad:3b:bf:73:0e:6c:
d2:9f:b2:23:c9:7c:7c:b3:45:d9:98:b0:cc:5d:e1:dd:b4:32:
7c:89:ab:00:0b:40:47:ff:9d:2d:0a:d6:6e:cd:8d:7b:d5:62:
64:9d:b2:e8:d0:d8:8e:2a:96:e7:a2:6c:bd:b0:63:8a:db:6d:
78:c9:9b:2e:b2:0e:b5:bb:9a:87:fa:39:b9:98:2f:df:20:86:
23:6b:56:7e:05:87:f9:de:ef:8c:cf:e7:a2:a2:83:1b:a3:04:
3e:41:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:53 2025 by rpki-client