Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rYHxvZNZo2X7LhRLXq8toqICPwg.roa
File: rYHxvZNZo2X7LhRLXq8toqICPwg.roa (raw, json)
Hash identifier: KakC8JymnTtxLI376q7vxrp0WS4eY3E6HK5yD7Q6LDk=
Subject key identifier: AD:81:F1:BD:93:59:A3:65:FB:2E:14:4B:5E:AF:2D:A2:A2:02:3F:08
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0188F2D26CAE2F969628E2D13F5CCEE540FF
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rYHxvZNZo2X7LhRLXq8toqICPwg.roa
Signing time: Sun 25 Jun 2023 13:50:56 +0000
ROA not before: Sun 25 Jun 2023 13:50:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34872
IP address blocks: 62.3.50.0/24 maxlen: 24
45.154.97.0/24 maxlen: 24
194.28.98.0/23 maxlen: 24
2a0c:b641:540::/44 maxlen: 48
2a0f:8400::/32 maxlen: 48
2a0c:b641::/44 maxlen: 48
2a0c:b641:30::/44 maxlen: 48
2a0c:b640::/32 maxlen: 48
2a0c:b641:70f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f2:d2:6c:ae:2f:96:96:28:e2:d1:3f:5c:ce:e5:40:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 25 13:50:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad81f1bd9359a365fb2e144b5eaf2da2a2023f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:fd:ac:68:80:ec:3a:09:65:3d:8f:e0:23:
44:95:f2:1b:46:10:8f:17:f6:5f:84:be:9c:87:57:
43:b1:df:b5:25:bc:12:74:a8:40:aa:9c:05:89:9e:
30:df:4a:f0:8a:6b:bb:df:f6:a3:2f:c7:72:ad:dd:
f3:bc:03:1f:9f:43:f1:31:df:60:8c:b8:52:78:50:
73:0d:4e:39:0d:e6:a0:48:ff:c1:9a:9c:f8:e2:f4:
6f:1f:63:86:a6:6a:d2:a2:5a:cf:a2:5f:26:9e:b6:
ec:ea:22:12:49:c4:88:ae:7d:a0:73:27:52:29:2d:
96:74:83:ca:5a:be:bb:d0:bb:44:86:b1:ee:ab:3b:
2e:16:93:d9:10:bb:5c:fc:a7:7d:8e:f7:a4:75:8b:
e9:cb:34:89:ae:3a:4f:bb:2c:b2:2f:bf:3d:c5:99:
a5:51:2c:14:04:b2:b5:d7:11:90:77:e2:67:ea:f0:
24:d8:02:a3:62:44:7a:57:97:17:80:36:9f:32:2f:
13:07:68:4c:c6:96:19:12:77:0b:44:b0:b5:46:a8:
0c:a8:2c:96:e0:c7:57:93:06:56:04:08:1b:72:cd:
f3:84:b8:c3:58:00:d0:7b:e8:4a:08:95:63:9e:e3:
b6:fc:ed:22:fe:b3:17:80:85:f7:d2:fb:ad:c0:b7:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:81:F1:BD:93:59:A3:65:FB:2E:14:4B:5E:AF:2D:A2:A2:02:3F:08
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rYHxvZNZo2X7LhRLXq8toqICPwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.97.0/24
62.3.50.0/24
194.28.98.0/23
IPv6:
2a0c:b640::-2a0c:b641:f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:30::/44
2a0c:b641:540::/44
2a0c:b641:70f::/48
2a0f:8400::/32
Signature Algorithm: sha256WithRSAEncryption
88:8d:b0:b9:31:d3:30:b0:5a:15:c3:a9:c8:55:c8:ae:3b:69:
d0:90:59:cb:d0:78:c9:0b:a9:29:fa:c1:19:9b:e6:a4:4b:0a:
6b:ba:c3:dc:0a:95:38:e3:77:26:e6:ff:ba:8e:b7:14:b9:ba:
09:05:80:25:46:0f:1d:6e:df:d0:b4:ac:83:e9:89:52:c2:b4:
08:5d:3a:78:e4:75:ac:4d:c5:17:68:4d:32:13:20:bc:76:00:
5d:1b:43:69:85:70:a1:d5:94:39:a4:38:88:ea:6e:bd:61:94:
82:ed:d4:e3:8a:15:13:38:51:93:44:e4:b8:d2:56:40:b6:c4:
7d:4c:f0:51:a3:97:ab:92:f2:64:c7:d1:24:7c:44:7c:b2:f5:
23:59:5e:1c:8f:e5:e3:5b:4c:2c:b0:02:23:83:bb:cc:91:0b:
ca:b2:5a:7e:ce:2a:6c:da:02:bf:5c:1a:f9:b7:e5:14:87:de:
ae:e2:7c:70:b5:82:0a:53:fe:dd:73:bb:63:8f:0b:ea:be:31:
de:7a:40:ac:e7:cb:dd:25:58:c6:ea:9c:e2:97:75:a6:7f:e6:
72:40:10:ce:44:16:34:22:a2:cc:91:f6:df:17:61:6e:2d:89:
ca:23:c4:12:58:f6:d7:61:34:ad:0f:ff:14:6e:c8:3c:ba:6d:
88:90:9b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:10 2025 by rpki-client