Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/aWUQzBuRutK2_qLKMIBREYhWNS0.roa
File: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (raw, json)
Hash identifier: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=
Subject key identifier: 69:65:10:CC:1B:91:BA:D2:B6:FE:A2:CA:30:80:51:11:88:56:35:2D
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 0194258F67826CAC354D24793874C8254ADC
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/aWUQzBuRutK2_qLKMIBREYhWNS0.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200083
IP address blocks: 62.182.16.0/21 maxlen: 21
185.41.8.0/22 maxlen: 22
2a04:84c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:67:82:6c:ac:35:4d:24:79:38:74:c8:25:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696510cc1b91bad2b6fea2ca308051118856352d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:ad:57:92:cc:49:06:3c:d6:66:c9:95:b1:
6d:78:f2:0f:ed:5f:36:3c:48:c1:7c:e4:00:04:9a:
14:da:66:3e:b2:63:56:b1:24:ca:a6:db:fc:2d:d9:
14:bc:48:1c:99:05:09:d6:67:27:77:ae:6f:de:cc:
9f:40:6c:33:3e:d9:7b:3b:70:e8:cd:1f:b7:75:f0:
14:c6:43:93:27:40:b8:06:83:37:44:24:95:7b:46:
63:a6:bd:fc:ba:32:4d:59:a4:d0:94:9e:33:32:13:
8d:fe:86:7a:62:7e:28:29:99:72:c2:73:d9:ba:71:
27:5c:a1:5e:61:7c:f3:aa:17:dc:a6:27:2a:10:05:
e2:99:fa:86:06:0d:24:3c:51:b5:32:01:10:df:61:
0e:f7:9a:c8:91:f9:54:03:4f:a0:3f:94:4b:56:9c:
1a:aa:e7:0e:4a:aa:39:a0:43:07:31:74:3a:f6:a7:
78:b7:12:02:a3:d7:97:87:97:88:ce:46:c1:c2:1a:
2e:fd:b7:d0:d7:d3:37:fc:96:66:b9:7f:1a:3f:c1:
5b:b8:c4:97:f0:31:3d:eb:fd:1e:c8:e0:13:a1:04:
3e:16:28:3c:48:46:4e:d9:83:41:ac:7a:8a:aa:16:
78:69:38:59:39:52:cd:86:42:a9:62:bd:4d:76:5d:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:10:CC:1B:91:BA:D2:B6:FE:A2:CA:30:80:51:11:88:56:35:2D
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/aWUQzBuRutK2_qLKMIBREYhWNS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.16.0/21
185.41.8.0/22
IPv6:
2a04:84c0::/32
Signature Algorithm: sha256WithRSAEncryption
96:60:95:fd:f5:58:04:6b:fb:82:4c:ff:e4:7c:92:0e:e7:ab:
67:55:01:61:7e:81:28:0e:b5:de:f6:88:45:e7:3c:f1:97:a5:
29:f3:4d:b5:70:06:39:24:a7:93:cb:a6:c7:fb:f9:71:a7:d0:
50:de:52:a1:c1:bc:ee:e4:0f:85:e9:dd:fd:85:12:8d:36:1c:
33:7e:21:38:b3:e6:ab:22:6c:95:5e:a7:bc:a3:ac:9c:09:0e:
d3:21:06:37:f2:03:0b:97:33:3b:30:2b:19:27:6f:a2:05:11:
0c:d2:81:c7:e3:e1:9a:58:e3:57:67:2b:34:38:6a:79:ec:fd:
87:9b:14:1a:4f:82:27:01:ac:18:c7:da:6c:9b:4f:b9:a4:3f:
18:ee:0d:ee:6e:85:ec:0d:d2:88:55:b5:1c:a7:a4:a3:3c:33:
28:9f:29:33:d6:e7:53:d1:b2:a9:26:fc:98:02:ed:4c:9c:33:
3c:23:0d:20:8d:08:a4:52:c6:a2:85:3c:61:fc:6c:51:be:18:
d9:0f:ef:bc:c1:c9:c2:cf:65:0d:7c:66:0a:5b:10:cc:ab:67:
88:f9:6e:c4:c8:f0:00:47:bb:bb:19:8c:25:2b:97:04:55:e5:
a3:c5:3a:1b:a4:dd:7b:40:3b:75:27:71:77:ac:16:25:84:b2:
45:4c:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:01 2025 by rpki-client