Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6vDQYPHKKR4SmL3nIPzN9m7Idps.roa
File: 6vDQYPHKKR4SmL3nIPzN9m7Idps.roa (raw, json)
Hash identifier: EhuxDV5yZFHZPBp7ekdrqkG28facSKPgSweXpfW2fuY=
Subject key identifier: EA:F0:D0:60:F1:CA:29:1E:12:98:BD:E7:20:FC:CD:F6:6E:C8:76:9B
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01942BDAFB72FA7A8B9CE0AFA2F64CFEEF15
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6vDQYPHKKR4SmL3nIPzN9m7Idps.roa
Signing time: Fri 03 Jan 2025 11:09:19 +0000
ROA not before: Fri 03 Jan 2025 11:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.182.32.0/23 maxlen: 23
62.182.34.0/23 maxlen: 23
84.54.2.0/23 maxlen: 23
139.28.48.0/23 maxlen: 23
139.28.50.0/23 maxlen: 23
139.28.240.0/23 maxlen: 23
139.28.242.0/23 maxlen: 23
176.53.156.0/23 maxlen: 23
176.53.158.0/23 maxlen: 23
193.32.204.0/23 maxlen: 23
193.32.206.0/23 maxlen: 23
193.38.44.0/23 maxlen: 23
193.38.46.0/23 maxlen: 23
193.187.132.0/23 maxlen: 23
193.187.134.0/23 maxlen: 23
193.187.134.0/24 maxlen: 24
193.187.135.0/24 maxlen: 24
194.93.48.0/23 maxlen: 23
194.93.50.0/23 maxlen: 23
194.93.60.0/23 maxlen: 23
194.93.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:da:fb:72:fa:7a:8b:9c:e0:af:a2:f6:4c:fe:ef:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 3 11:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf0d060f1ca291e1298bde720fccdf66ec8769b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:07:c9:7c:cc:51:23:dc:07:14:64:d0:10:
89:1a:ff:d1:8e:4c:07:64:46:67:69:4c:76:f3:38:
36:cd:c3:4f:21:9f:98:65:98:ff:fd:60:6f:41:ca:
ce:00:cb:5d:e3:d2:d7:0f:3f:ae:62:cb:45:fe:11:
82:19:2f:20:6e:9e:19:60:b5:79:dc:fa:85:00:d3:
5a:ad:7d:08:ae:5f:04:b3:21:1e:c9:4e:49:85:3a:
c0:6b:3d:59:a4:ee:90:a1:a5:bf:f3:ea:9b:43:e3:
b8:b2:d7:61:56:bf:88:b0:64:99:48:5f:8a:cf:79:
9f:9d:ac:66:b1:f7:22:c8:21:75:05:d8:a2:47:f4:
07:80:e5:d8:3b:f9:ed:27:75:8e:b6:67:84:f4:76:
2e:1b:11:88:35:7d:66:c0:7e:87:51:e1:b7:f7:7b:
2e:20:3b:45:a5:ca:f0:ec:87:83:c2:fd:e7:74:db:
1a:d3:0a:c9:38:76:6e:4d:ae:7f:08:5c:d9:d3:35:
1c:57:01:3f:27:09:ec:21:86:d7:83:f3:fd:8e:57:
d0:ca:52:74:a3:0a:3f:24:02:16:9b:63:14:6b:17:
e2:77:6f:bd:65:2e:58:bc:c0:af:d9:f5:3e:ae:40:
fe:a1:58:fe:fd:f2:45:69:f0:f8:cd:8c:1e:af:5d:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:D0:60:F1:CA:29:1E:12:98:BD:E7:20:FC:CD:F6:6E:C8:76:9B
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6vDQYPHKKR4SmL3nIPzN9m7Idps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
84.54.2.0/23
139.28.48.0/22
139.28.240.0/22
176.53.156.0/22
193.32.204.0/22
193.38.44.0/22
193.187.132.0/22
194.93.48.0/22
194.93.60.0/22
Signature Algorithm: sha256WithRSAEncryption
76:97:9e:c9:b4:2a:26:1d:f6:f6:ac:eb:15:a2:fa:5b:8d:cd:
03:7d:19:62:c5:26:c8:63:f1:7c:1c:40:19:1c:7a:16:b8:a9:
55:a0:34:d8:72:04:79:5f:5e:df:a2:b4:26:68:18:90:00:48:
37:36:1c:85:c5:7b:09:d4:ed:ac:73:24:a2:22:ff:b7:f8:fc:
35:12:cd:96:99:c2:8a:03:3f:36:88:49:0e:67:ba:93:1d:49:
3c:10:08:9c:b6:9d:4d:e5:65:e4:0e:3c:9d:1a:cd:da:fc:80:
48:f1:c4:b4:eb:d7:98:26:37:92:c1:6c:84:da:68:ed:80:30:
6b:91:3f:8c:f8:1f:b2:fb:09:43:c2:9f:0e:6e:47:da:41:18:
76:87:9f:71:84:86:99:b9:78:45:d1:63:bf:21:c1:e6:6d:79:
f9:12:ee:67:d9:5f:46:d8:c9:9a:92:df:f2:9d:29:b8:04:e2:
89:d7:24:3c:cc:42:66:3f:74:63:40:ca:0e:10:0b:a2:c6:ee:
15:2e:c9:4e:d0:20:51:f6:4c:68:58:44:6f:d5:59:8a:2f:b9:
d0:09:0f:e0:81:f8:0c:12:af:61:41:6d:05:f5:20:5d:5c:71:
b2:c4:c2:2c:d8:75:35:9f:9d:08:02:2d:17:46:57:f9:e0:bd:
fd:41:41:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:25 2025 by rpki-client