Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6CB7JrroGT5PU_PrLUjK2WgCG6M.roa
File: 6CB7JrroGT5PU_PrLUjK2WgCG6M.roa (raw, json)
Hash identifier: rqvpz+EUV3OIsmbeoreXWNVGJ/BC57iT/oclvFvky3Q=
Subject key identifier: E8:20:7B:26:BA:E8:19:3E:4F:53:F3:EB:2D:48:CA:D9:68:02:1B:A3
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 018567DA1262355866B70B4EB66716B9D69E
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6CB7JrroGT5PU_PrLUjK2WgCG6M.roa
Signing time: Sat 31 Dec 2022 11:03:42 +0000
ROA not before: Sat 31 Dec 2022 11:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 185.242.232.0/22 maxlen: 24
185.242.232.0/23 maxlen: 23
185.242.234.0/23 maxlen: 23
185.245.40.0/22 maxlen: 24
185.239.84.0/23 maxlen: 23
185.239.84.0/22 maxlen: 24
185.239.86.0/23 maxlen: 23
109.206.244.0/22 maxlen: 24
91.132.48.0/22 maxlen: 24
93.177.76.0/22 maxlen: 24
185.243.240.0/22 maxlen: 24
84.252.102.0/23 maxlen: 24
2a0c:f480::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:67:da:12:62:35:58:66:b7:0b:4e:b6:67:16:b9:d6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Dec 31 11:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8207b26bae8193e4f53f3eb2d48cad968021ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8b:aa:95:3d:98:ad:2f:25:0c:2f:15:bd:cc:
ad:b3:03:f8:79:61:43:d6:95:a6:e2:3e:06:ce:8d:
4f:5d:25:ef:ad:31:3d:d3:43:7b:d5:18:46:e4:4c:
58:19:c7:0a:9e:6c:9a:77:d2:4d:ae:e1:76:0e:4c:
f7:ba:04:a1:43:f1:c6:6a:cc:ae:51:2c:34:6c:ce:
a7:54:ca:c7:3c:1d:8a:f6:b5:82:22:af:b7:7c:50:
36:ec:eb:c6:fe:42:78:fd:7f:1e:94:61:41:55:f6:
b8:e2:5b:ac:b5:60:13:00:11:c3:09:2c:8d:d5:b7:
7b:08:36:f1:57:07:a8:ed:56:8e:2f:e8:84:1e:77:
08:99:f4:b3:74:e9:e7:6d:a8:aa:f2:06:a3:2c:10:
ff:8b:c2:02:92:80:24:e2:05:aa:26:27:47:ea:70:
e6:9e:48:50:dd:b7:da:08:4d:83:3d:92:33:c6:27:
f8:36:2b:e0:fa:77:ca:c2:52:8d:06:c0:db:29:49:
18:04:9c:b5:ba:3c:14:6e:c8:5b:7f:5a:e8:b1:df:
7d:42:0b:c9:36:e3:bd:3b:65:75:fa:67:ef:5b:3a:
d4:f7:0e:2d:ea:28:8a:c0:0a:c8:59:fd:e9:c1:66:
e8:2b:08:2e:65:93:42:ed:a8:35:76:fa:3b:9e:ee:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:20:7B:26:BA:E8:19:3E:4F:53:F3:EB:2D:48:CA:D9:68:02:1B:A3
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6CB7JrroGT5PU_PrLUjK2WgCG6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.102.0/23
91.132.48.0/22
93.177.76.0/22
109.206.244.0/22
185.239.84.0/22
185.242.232.0/22
185.243.240.0/22
185.245.40.0/22
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
5d:85:65:fb:c2:b2:8e:5b:ac:00:d7:41:d9:07:ca:77:55:b3:
cb:da:63:1a:79:75:43:36:d4:b2:d2:05:69:32:d0:65:03:c0:
37:ee:19:2f:41:63:ce:a8:84:7b:3c:5b:f3:0e:7a:b4:60:f6:
5f:99:a6:9c:ce:52:27:72:94:6e:c9:86:e5:23:ab:7c:24:5d:
9f:28:18:58:20:2e:71:03:04:42:99:07:19:77:81:39:3a:34:
46:7b:70:4b:d5:c9:a7:68:6d:35:89:6c:48:f3:30:fa:2a:aa:
2d:7c:e0:58:50:a2:0c:a2:21:50:64:43:86:47:51:f2:9e:a1:
12:2d:27:50:f6:30:10:df:4d:8d:fa:d0:ac:25:74:e6:2a:f7:
22:bf:29:f2:79:25:9d:7d:48:5d:fb:a9:ca:c9:b1:a7:80:15:
11:5b:33:67:81:4e:e7:c0:74:20:2d:6b:70:94:9b:c4:b0:4c:
d5:68:25:15:b4:14:dd:ab:dd:c6:b9:10:6f:c6:7f:50:cc:46:
a0:d1:ed:34:0d:a2:d2:d6:4b:9d:9f:11:f0:86:37:9f:b0:b1:
56:67:3a:11:b2:11:88:2b:79:95:d4:3e:84:04:48:d0:75:7d:
5f:f1:1a:2d:b8:2a:ce:fa:1e:18:1b:9c:95:1a:b2:11:19:a5:
5b:58:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:31 2025 by rpki-client