Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/misEsljA75nAA5oIsh_k4GVCg4w.roa
File: misEsljA75nAA5oIsh_k4GVCg4w.roa (raw, json)
Hash identifier: p4BzWp3j9j27Wjuz+V0a+txHqIiOhQ+ybn3eqzzf6rU=
Subject key identifier: 9A:2B:04:B2:58:C0:EF:99:C0:03:9A:08:B2:1F:E4:E0:65:42:83:8C
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 01942746D86C76ADCB9186B195A973A783A4
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/misEsljA75nAA5oIsh_k4GVCg4w.roa
Signing time: Thu 02 Jan 2025 13:49:01 +0000
ROA not before: Thu 02 Jan 2025 13:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22822
IP address blocks: 46.183.88.0/21 maxlen: 24
46.228.144.0/20 maxlen: 24
87.248.192.0/19 maxlen: 24
87.248.210.0/23 maxlen: 23
87.248.212.0/23 maxlen: 23
95.140.224.0/20 maxlen: 24
95.140.224.0/22 maxlen: 22
178.79.192.0/18 maxlen: 24
178.79.196.0/23 maxlen: 23
178.79.203.0/24 maxlen: 24
178.79.214.0/23 maxlen: 23
178.79.228.0/23 maxlen: 23
178.79.230.0/23 maxlen: 23
178.79.232.0/22 maxlen: 22
178.79.236.0/22 maxlen: 22
178.79.240.0/21 maxlen: 21
178.79.248.0/21 maxlen: 21
178.249.104.0/21 maxlen: 24
178.249.105.0/24 maxlen: 24
185.116.100.0/22 maxlen: 22
185.178.52.0/22 maxlen: 22
185.178.52.0/24 maxlen: 24
185.178.53.0/24 maxlen: 24
185.178.54.0/24 maxlen: 24
185.178.55.0/24 maxlen: 24
216.247.120.0/21 maxlen: 24
2a02:3d0::/32 maxlen: 48
2a02:3d0:600::/48 maxlen: 48
2a02:3d0:601::/48 maxlen: 48
2a02:3d0:621::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:d8:6c:76:ad:cb:91:86:b1:95:a9:73:a7:83:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Jan 2 13:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a2b04b258c0ef99c0039a08b21fe4e06542838c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:82:44:00:ed:9a:83:89:69:3e:65:8d:8e:
49:4b:07:db:55:7c:18:50:af:54:ca:70:fe:bf:07:
a9:63:c8:04:42:2f:a8:16:af:2d:d3:f9:62:7a:63:
9a:50:4a:8a:50:31:52:48:11:20:a4:ae:23:21:79:
f1:e2:94:a9:23:bd:24:5a:a2:6a:c8:c3:35:51:7b:
58:57:9d:1a:0f:d3:79:dd:eb:59:1e:cf:34:49:89:
8a:28:4f:c2:33:1b:1c:ae:c0:b2:c6:bf:eb:a4:ab:
38:04:87:54:bb:9a:d9:36:ca:07:04:60:9b:31:d5:
a4:da:99:0c:11:05:e2:1f:13:79:01:f5:98:c0:8f:
f8:65:a4:6b:a5:98:a1:37:98:c6:22:a2:1c:11:7d:
69:9d:ad:b7:a9:45:4b:03:40:23:a0:99:b2:3e:2b:
11:64:4e:27:25:da:bc:39:d6:8c:c6:33:3c:b8:5b:
dd:72:26:4a:01:ed:20:6f:4e:bc:cb:89:35:6b:78:
18:1f:43:82:1c:9e:84:50:72:d7:f6:c4:82:34:ad:
6f:26:71:0e:05:7b:8f:65:30:0c:12:8b:91:93:7a:
92:ac:b7:2a:10:91:78:89:ca:d1:e2:19:0b:ff:f8:
d2:74:1d:76:5f:ed:76:10:74:f7:6c:37:70:f4:e2:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2B:04:B2:58:C0:EF:99:C0:03:9A:08:B2:1F:E4:E0:65:42:83:8C
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/misEsljA75nAA5oIsh_k4GVCg4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.88.0/21
46.228.144.0/20
87.248.192.0/19
95.140.224.0/20
178.79.192.0/18
178.249.104.0/21
185.116.100.0/22
185.178.52.0/22
216.247.120.0/21
IPv6:
2a02:3d0::/32
Signature Algorithm: sha256WithRSAEncryption
64:5b:92:b4:ae:c9:72:fa:c7:fc:25:e4:9a:b3:95:cd:7a:35:
f2:e5:d3:f4:ab:28:dc:a7:41:cc:a7:b2:1a:20:22:3a:71:7c:
cf:b7:2d:7b:e7:48:2e:f4:70:f6:9e:0b:12:18:99:31:ae:7b:
f5:c1:c0:66:df:fa:8d:3b:9d:13:4f:a8:8b:5b:6b:85:2c:b1:
e2:21:5f:2f:1c:61:d0:82:69:27:38:2b:0d:f3:7e:37:a3:09:
42:15:27:47:59:95:2f:c3:70:d2:b3:88:9a:de:77:94:49:7d:
41:50:eb:02:38:dc:1b:db:a6:e4:27:d0:bc:3d:6d:9d:1b:f0:
ab:11:7d:fb:bd:e0:27:2f:21:ae:ea:29:d0:99:7e:8e:f3:e1:
f4:27:49:94:e0:11:28:9f:70:e3:5b:c0:d0:18:10:b9:96:0c:
ad:1a:d4:73:61:99:46:f9:d6:0b:37:86:ff:45:dd:3d:5d:1f:
f7:da:bf:3a:24:87:25:f5:6c:fd:54:ae:af:5a:aa:ad:9f:e3:
85:64:9a:6d:74:69:56:05:7f:94:94:02:2c:02:09:6c:22:31:
d6:d2:c3:1f:11:91:43:2e:22:51:28:18:fd:48:a8:10:b6:fd:
36:28:c4:b3:6d:6c:a5:83:16:b4:b7:a7:db:6c:ea:aa:41:98:
cc:41:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:48 2025 by rpki-client