Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/n54DnynhgcD-_cQbxklUeyVd6KU.roa
File: n54DnynhgcD-_cQbxklUeyVd6KU.roa (raw, json)
Hash identifier: DJ+0c5kvED3iWiO9lXsdP08wIpaZt1qpMO2x2X0urlg=
Subject key identifier: 9F:9E:03:9F:29:E1:81:C0:FE:FD:C4:1B:C6:49:54:7B:25:5D:E8:A5
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0980A61B
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/n54DnynhgcD-_cQbxklUeyVd6KU.roa
Signing time: Sat 12 Feb 2022 12:56:43 +0000
ROA not before: Sat 12 Feb 2022 12:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
89.117.87.0/24 maxlen: 24
84.46.170.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159426075 (0x980a61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 12 12:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f9e039f29e181c0fefdc41bc649547b255de8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:f7:cc:7e:02:36:22:bb:c7:f1:6a:83:6c:
a5:92:ab:e4:56:3c:b3:c0:22:c7:ab:c5:3a:bc:41:
0e:75:aa:ca:8c:fb:8d:eb:22:54:93:7e:9e:6b:d7:
d8:f5:ba:90:d4:d5:91:6a:b6:47:2b:12:99:76:d8:
d5:00:e6:05:be:a0:45:78:6a:04:88:ea:e5:2d:ce:
94:c8:0a:af:cd:4d:77:37:05:a3:43:7e:c1:fd:f2:
07:26:30:d6:e3:17:8e:06:cb:24:0c:c7:30:4e:83:
61:38:e3:cf:a6:01:d5:65:a6:d6:d6:c8:bd:4e:f7:
af:9e:0f:16:90:f9:31:af:d2:e5:35:62:ff:62:83:
ae:8f:a0:ea:09:98:83:e9:90:94:d2:94:f4:31:7a:
56:27:86:61:43:32:04:3f:21:02:ce:30:ee:a1:f6:
77:87:06:a0:92:cf:7c:69:d5:ed:31:de:e2:5f:b7:
13:9c:36:1b:68:e5:63:d0:87:f8:0e:3b:0d:96:32:
59:2e:92:e1:68:36:a2:cd:85:de:2d:cd:1b:8f:4d:
67:33:70:c8:f4:72:b9:a6:3f:f3:ac:82:8f:e7:70:
e8:aa:b9:cb:7e:06:ff:27:e4:3d:74:72:ec:6e:58:
b7:e6:66:f4:55:c4:fb:49:70:b7:a8:a1:6e:95:00:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9E:03:9F:29:E1:81:C0:FE:FD:C4:1B:C6:49:54:7B:25:5D:E8:A5
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/n54DnynhgcD-_cQbxklUeyVd6KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/23
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
86.38.235.0/24
86.38.238.0/24
89.116.56.0/24
89.116.115.0/24
89.117.87.0/24
89.117.109.0/24
89.117.139.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c6:81:49:12:5c:1d:ef:9a:65:aa:2b:65:d4:bc:da:90:54:
46:bd:ca:28:c6:5b:2c:3f:fe:30:05:e6:ca:93:a8:72:93:c2:
3a:c4:03:6f:f0:05:5d:93:d1:3f:f4:7d:47:24:86:dd:d0:c2:
b4:91:d8:06:b7:2b:06:6f:d2:85:ce:ef:9d:8a:48:d9:a0:2f:
a0:f8:24:6b:de:95:9b:13:82:58:15:98:4b:f1:34:36:3c:77:
7a:33:49:d1:e5:9f:ee:73:61:5b:b6:58:50:33:15:db:9a:1c:
a9:05:6a:33:a7:50:da:6c:94:95:52:3c:52:cf:16:8d:9a:11:
dc:f1:f9:43:36:df:01:14:25:ac:e1:03:aa:89:e0:3b:ca:90:
9c:c8:81:21:9f:a3:9f:3a:83:57:f3:df:78:c9:06:a2:a3:f4:
e7:fa:24:2c:24:48:eb:96:16:5e:5f:cd:53:de:b7:a2:ee:bc:
d1:f0:ee:8b:79:54:3f:56:6b:73:ed:4e:a3:29:29:e7:46:3a:
a2:94:f8:ea:5b:cc:a8:6a:f0:bc:7b:0f:93:74:00:c9:f0:50:
aa:be:42:75:8c:2c:7d:26:e3:3a:35:78:79:b8:44:1d:cd:1a:
02:13:12:79:3f:bd:fb:a7:d9:cb:4f:46:7e:a0:9b:c3:a4:97:
3b:55:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:51:13 2025 by rpki-client