Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/jAe0olQrTlqlwekCa7zU__XvOnI.roa
File: jAe0olQrTlqlwekCa7zU__XvOnI.roa (raw, json)
Hash identifier: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=
Subject key identifier: 8C:07:B4:A2:54:2B:4E:5A:A5:C1:E9:02:6B:BC:D4:FF:F5:EF:3A:72
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 01941FFA88B1671CF57524A98ECCB81E28EA
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/jAe0olQrTlqlwekCa7zU__XvOnI.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47806
IP address blocks: 93.88.28.0/22 maxlen: 22
93.88.28.0/23 maxlen: 23
93.88.28.0/24 maxlen: 24
93.88.29.0/24 maxlen: 24
93.88.30.0/23 maxlen: 23
93.88.30.0/24 maxlen: 24
93.88.31.0/24 maxlen: 24
152.89.144.0/22 maxlen: 22
152.89.144.0/23 maxlen: 23
152.89.144.0/24 maxlen: 24
152.89.145.0/24 maxlen: 24
152.89.146.0/23 maxlen: 23
152.89.146.0/24 maxlen: 24
152.89.147.0/24 maxlen: 24
185.251.208.0/22 maxlen: 22
185.251.208.0/23 maxlen: 23
185.251.208.0/24 maxlen: 24
185.251.209.0/24 maxlen: 24
185.251.210.0/23 maxlen: 23
185.251.210.0/24 maxlen: 24
185.251.211.0/24 maxlen: 24
193.30.124.0/23 maxlen: 23
193.30.124.0/24 maxlen: 24
193.30.125.0/24 maxlen: 24
193.30.128.0/24 maxlen: 24
2a0c:1d40::/29 maxlen: 29
2a0c:5040::/30 maxlen: 30
2a0c:5044::/31 maxlen: 31
2a10:1540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:88:b1:67:1c:f5:75:24:a9:8e:cc:b8:1e:28:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c07b4a2542b4e5aa5c1e9026bbcd4fff5ef3a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:9a:44:cf:00:72:5f:dd:61:b7:00:0d:dd:
7d:8e:07:8f:46:b5:de:6e:07:f6:93:b6:77:33:cb:
59:2e:a9:04:33:6e:97:35:50:be:c4:d6:ea:b7:7f:
86:32:fe:8d:4c:11:48:0e:07:4a:01:29:fd:b8:31:
52:1b:0e:43:10:c7:90:46:77:5b:88:08:c8:17:d3:
87:55:a9:bd:4b:99:8f:11:46:a8:74:7c:7f:a6:f1:
ce:4e:1d:3d:77:d3:51:35:94:2e:2e:73:fd:da:38:
30:b8:e0:66:af:46:80:64:57:71:18:5d:55:08:1a:
3a:63:8f:d9:26:b7:36:87:a9:40:f7:68:5c:c8:67:
f5:f6:02:dd:97:1b:cf:91:e6:f6:b4:89:ae:50:21:
3b:06:32:14:0f:b6:6e:9c:33:08:77:3b:2f:0d:41:
5b:1b:c2:77:5d:f2:b3:10:76:ec:ff:1a:e1:4e:b2:
4c:0b:a0:29:4d:01:0e:af:ba:73:f4:4a:b6:11:58:
a2:aa:50:8d:b0:69:4e:49:d1:f5:eb:3d:61:2f:c3:
c2:e9:36:6a:e1:32:39:c1:ff:f5:77:fc:ec:0b:14:
00:2a:f8:81:38:06:46:2d:3a:36:a7:63:c2:80:d1:
71:2f:76:e1:90:1e:59:2d:69:3f:bf:c6:e3:90:29:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:B4:A2:54:2B:4E:5A:A5:C1:E9:02:6B:BC:D4:FF:F5:EF:3A:72
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/jAe0olQrTlqlwekCa7zU__XvOnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.28.0/22
152.89.144.0/22
185.251.208.0/22
193.30.124.0/23
193.30.128.0/24
IPv6:
2a0c:1d40::/29
2a0c:5040::-2a0c:5045:ffff:ffff:ffff:ffff:ffff:ffff
2a10:1540::/29
Signature Algorithm: sha256WithRSAEncryption
93:4f:c5:4c:e5:7e:01:51:dd:cf:3c:c2:70:99:a7:5d:6d:5e:
ab:f2:f0:13:67:25:16:c8:a2:51:16:58:ad:31:6a:c8:c7:0c:
33:7d:71:cc:20:d4:f5:9b:27:71:ea:ec:35:3f:a3:22:1b:b0:
d5:4f:7f:68:6a:a0:3d:cf:eb:e5:26:ac:a4:92:27:c4:ed:71:
29:d7:fe:66:1e:11:d3:36:fe:16:b6:f3:e1:c0:c1:49:8b:45:
34:40:b9:4c:ff:8e:b6:82:9e:db:ff:1a:8e:75:08:36:4d:56:
3e:86:6a:7e:a8:4c:f0:fb:e4:42:26:ae:9a:d2:eb:ff:db:71:
53:8a:23:ad:be:2e:ec:05:ba:b1:8f:6d:15:31:40:a5:ee:65:
85:27:13:2c:71:56:0d:3e:c4:c6:cd:69:f7:96:4f:53:fd:ab:
8c:03:c4:52:0c:57:39:aa:9f:18:57:56:81:c3:2e:c7:3d:8e:
f6:00:0a:fd:70:ef:f8:fa:e3:8f:45:c2:6b:5a:3f:ad:0c:ca:
38:99:b0:62:ba:e9:a0:70:9a:00:0a:d5:d1:14:97:a1:5c:ed:
41:6d:32:f1:13:9f:50:70:c0:46:22:0b:ec:82:6e:6b:b7:96:
3d:ba:d8:5f:96:8c:7f:a1:3d:c4:db:69:00:c0:06:20:92:99:
7e:dc:4c:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net