Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/jev_oxK5Kq8Mj1uc3jEmnjGyAxE.roa
File: jev_oxK5Kq8Mj1uc3jEmnjGyAxE.roa (raw, json)
Hash identifier: en0FpA8DDUWhOXSBWhQPXax79tdqZcEyodIdarZCU/I=
Subject key identifier: 8D:EB:FF:A3:12:B9:2A:AF:0C:8F:5B:9C:DE:31:26:9E:31:B2:03:11
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018FB8F740684F4853A1812C2845B7BAC23D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/jev_oxK5Kq8Mj1uc3jEmnjGyAxE.roa
Signing time: Mon 27 May 2024 07:32:42 +0000
ROA not before: Mon 27 May 2024 07:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2588
IP address blocks: 46.19.200.0/21 maxlen: 21
80.81.32.0/19 maxlen: 24
80.81.35.0/24 maxlen: 24
83.223.128.0/19 maxlen: 19
83.223.145.0/24 maxlen: 24
83.223.155.0/24 maxlen: 24
85.254.0.0/17 maxlen: 17
85.254.49.0/24 maxlen: 24
85.254.69.0/24 maxlen: 24
85.254.128.0/18 maxlen: 18
91.190.32.0/19 maxlen: 24
91.190.36.0/24 maxlen: 24
91.190.52.0/24 maxlen: 24
91.190.56.0/23 maxlen: 24
91.190.60.0/24 maxlen: 24
94.101.224.0/20 maxlen: 20
109.205.120.0/21 maxlen: 21
109.205.127.0/24 maxlen: 24
159.148.0.0/16 maxlen: 16
159.148.10.0/24 maxlen: 24
159.148.49.0/24 maxlen: 24
159.148.50.0/24 maxlen: 24
159.148.63.0/24 maxlen: 24
159.148.78.0/24 maxlen: 24
159.148.80.0/24 maxlen: 24
159.148.116.0/24 maxlen: 24
159.148.117.0/24 maxlen: 24
159.148.186.0/24 maxlen: 24
159.148.188.0/24 maxlen: 24
159.148.201.0/24 maxlen: 24
159.148.229.0/24 maxlen: 24
159.148.233.0/24 maxlen: 24
185.27.92.0/22 maxlen: 22
217.69.112.0/20 maxlen: 20
217.69.113.0/24 maxlen: 24
2a02:610::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:f7:40:68:4f:48:53:a1:81:2c:28:45:b7:ba:c2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: May 27 07:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8debffa312b92aaf0c8f5b9cde31269e31b20311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:ab:a9:15:0d:50:05:b8:54:86:d2:31:fb:
fc:b6:e4:b0:b2:f7:d9:ef:ef:81:22:2c:a2:34:fb:
93:82:2b:c8:a1:c4:60:02:74:04:ff:d7:d4:fe:bd:
8e:56:ff:0e:2c:dc:92:7a:43:7b:cc:c3:92:b5:a6:
86:32:cc:3d:19:52:b3:af:77:16:7c:46:51:d9:b5:
00:9c:3e:99:fb:65:10:bb:4f:13:3a:f4:40:d6:3d:
79:7d:3b:5f:29:ab:e1:06:37:51:12:fe:c1:4b:20:
5c:40:f4:56:5b:1a:b8:98:31:26:e7:01:1a:a3:a0:
3b:68:66:01:e3:c7:31:5b:2e:ac:88:9c:14:96:4a:
0b:3f:14:7c:c2:66:d8:6e:29:49:b3:d6:51:77:00:
48:e4:05:cc:1d:b6:a2:08:8c:cc:10:7d:ea:b0:10:
54:05:e6:48:6a:0b:89:f6:5a:42:47:8b:d2:a8:67:
19:c7:c3:ca:2a:a1:4b:ba:27:14:e0:ac:9f:35:95:
d6:cb:53:8e:cf:a0:34:a9:6d:34:bf:98:fa:43:b7:
54:ac:52:3f:cd:89:ae:30:ed:d4:16:e7:7e:5d:c4:
4d:34:3d:b9:30:78:26:33:f1:63:14:b0:cd:0f:59:
69:80:71:b6:1e:26:ed:ef:3f:69:2c:b2:0a:3a:1e:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EB:FF:A3:12:B9:2A:AF:0C:8F:5B:9C:DE:31:26:9E:31:B2:03:11
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/jev_oxK5Kq8Mj1uc3jEmnjGyAxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.200.0/21
80.81.32.0/19
83.223.128.0/19
85.254.0.0-85.254.191.255
91.190.32.0/19
94.101.224.0/20
109.205.120.0/21
159.148.0.0/16
185.27.92.0/22
217.69.112.0/20
IPv6:
2a02:610::/32
Signature Algorithm: sha256WithRSAEncryption
7d:6a:a2:31:79:59:a7:48:a0:b9:44:57:75:f9:a1:6c:f4:e0:
7d:e3:c0:ff:be:b6:9f:fc:09:21:91:22:60:ad:53:a6:54:75:
5f:50:50:33:b0:fd:e7:42:a2:4c:60:3f:59:78:ab:a2:1d:3e:
42:48:ad:e4:65:5b:a7:a5:7a:f8:da:77:77:bf:c3:02:9e:d0:
84:e6:a4:51:74:07:7c:91:e7:22:0c:04:fb:ef:be:1e:d8:80:
bf:bc:91:02:64:d1:9d:53:4a:8f:79:e9:13:89:1f:4f:1e:e2:
a3:81:6d:3c:02:ce:68:cd:00:0f:97:bf:18:a9:64:95:92:82:
6a:35:c6:29:d3:bb:e5:88:36:f3:39:d1:f9:a3:f0:3f:d3:82:
4c:68:8a:ea:57:24:12:d5:7b:dd:c3:83:05:50:2b:0f:7c:6c:
f3:89:e9:88:df:a4:9e:af:c6:aa:06:f0:06:34:da:6c:e0:2b:
eb:d9:7d:c4:77:93:cd:63:6b:80:a1:ae:cd:39:64:84:d0:09:
ef:26:49:58:f7:72:b8:d0:69:5e:6b:7a:48:f5:1b:31:d7:b6:
3e:e4:df:60:40:69:95:a1:35:d2:a8:7c:c8:0d:04:92:b6:1f:
f9:38:a2:32:d1:12:b0:29:5b:33:f9:8e:c2:cf:fe:82:1e:c3:
39:72:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:13 2025 by rpki-client