Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/it5TB1fVnn8wAT1GhxrXXPpJQhE.roa
File: it5TB1fVnn8wAT1GhxrXXPpJQhE.roa (raw, json)
Hash identifier: uFvB0yeXGCmgY/JUbCJTKqf/gHh6c2TkYoHqFThttag=
Subject key identifier: 8A:DE:53:07:57:D5:9E:7F:30:01:3D:46:87:1A:D7:5C:FA:49:42:11
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 019425FDE04FAE4520FB50E8529CF1D119A7
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/it5TB1fVnn8wAT1GhxrXXPpJQhE.roa
Signing time: Thu 02 Jan 2025 07:49:42 +0000
ROA not before: Thu 02 Jan 2025 07:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209281
IP address blocks: 86.62.20.0/24 maxlen: 24
86.62.21.0/24 maxlen: 24
86.62.22.0/23 maxlen: 23
185.74.223.0/24 maxlen: 24
2a04:7480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e0:4f:ae:45:20:fb:50:e8:52:9c:f1:d1:19:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Jan 2 07:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ade530757d59e7f30013d46871ad75cfa494211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:44:e8:22:91:cf:37:67:48:78:ca:c8:83:8a:
30:74:d1:21:9d:39:dc:00:4a:a9:e7:dc:b7:5f:21:
7b:59:b3:92:5d:95:d9:e2:02:92:1f:9d:58:12:e7:
46:73:44:e8:f3:62:25:64:48:0e:cd:d0:a4:c2:dd:
28:ed:b7:9a:ec:41:34:5e:a9:cb:a8:92:0a:68:f4:
06:88:83:a1:56:a7:c2:99:d4:3d:59:ce:18:75:cf:
9d:64:95:3b:96:01:01:78:dc:dc:f8:28:b1:9f:bf:
43:cd:09:a1:4d:af:5d:03:e5:af:9a:85:2d:60:e9:
9f:0d:f9:81:6c:25:c3:5b:02:6d:b8:57:3f:6d:91:
1a:4a:2f:e1:8b:23:34:87:a2:fc:39:f8:f9:8a:46:
13:ba:3a:c5:97:0b:a3:ca:83:28:d0:1d:2f:5e:c5:
5f:25:75:e1:a3:46:fe:67:a5:88:15:62:7d:29:df:
34:1c:5a:29:ed:5e:50:c5:71:28:44:43:e0:07:80:
ef:df:ff:82:d5:5e:2e:8e:27:f8:b3:70:f8:29:27:
80:ec:65:db:a9:0e:14:cf:a9:67:9b:82:12:1b:e8:
0b:91:0f:79:a3:f0:25:a4:23:34:25:32:00:e3:b0:
98:e2:ef:1e:f5:b1:72:7d:f7:61:52:80:3b:c4:9a:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DE:53:07:57:D5:9E:7F:30:01:3D:46:87:1A:D7:5C:FA:49:42:11
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/it5TB1fVnn8wAT1GhxrXXPpJQhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.20.0/22
185.74.223.0/24
IPv6:
2a04:7480::/29
Signature Algorithm: sha256WithRSAEncryption
bd:d1:a8:7d:4d:93:02:99:a2:3b:36:fc:b1:59:fb:fa:5c:f1:
7f:be:05:28:e9:c2:39:57:82:f3:18:94:c0:dc:bb:fe:48:08:
80:48:dc:7d:c9:44:96:3e:09:da:50:4e:06:b1:aa:80:42:19:
ac:ec:1e:42:92:da:9d:a5:d1:c6:e3:9e:8c:44:62:b9:ca:d6:
76:dc:09:dd:e0:33:b2:8d:1a:56:c5:e2:49:8f:b3:a5:27:51:
5b:df:fa:57:d0:c1:99:6f:56:f7:23:44:b5:a4:e0:57:6a:0d:
15:c6:aa:69:1f:9a:fa:32:77:85:0e:8d:08:5e:35:ce:7e:eb:
eb:85:09:42:f3:38:98:c0:87:25:39:95:65:52:fe:9d:f1:12:
e0:2c:15:ed:3a:4c:07:20:b7:ab:3c:2b:9b:6a:ba:21:dd:b6:
90:27:d6:1d:bc:73:26:69:ce:6e:fe:de:e7:67:35:51:1d:6f:
1c:f1:53:1e:a2:de:e2:28:49:cc:e3:b3:a0:02:c1:9a:54:a3:
ff:c1:34:29:b9:da:a4:d0:26:94:4c:ce:ef:9a:29:41:01:9f:
06:36:43:96:d8:5d:d7:8e:a2:6d:b7:be:ef:64:2d:8b:c6:85:
3f:ce:c7:49:b1:c9:dd:fd:03:9a:b6:ff:64:30:86:da:42:cd:
ea:d3:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:00 2025 by rpki-client