Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/F1wmpLmNMSlE5QeCShWK4EIl1YE.roa
File: F1wmpLmNMSlE5QeCShWK4EIl1YE.roa (raw, json)
Hash identifier: G2+DvvZG72N+pmexxEdGry49BBEsGqhCw5jCn61+utM=
Subject key identifier: 17:5C:26:A4:B9:8D:31:29:44:E5:07:82:4A:15:8A:E0:42:25:D5:81
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 0194C327173EC723545A0776F0CD7CB3CB5B
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/F1wmpLmNMSlE5QeCShWK4EIl1YE.roa
Signing time: Sat 01 Feb 2025 20:15:06 +0000
ROA not before: Sat 01 Feb 2025 20:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60144
IP address blocks: 45.138.36.0/22 maxlen: 32
45.150.76.0/22 maxlen: 32
91.215.156.0/22 maxlen: 32
146.19.105.0/24 maxlen: 32
185.27.236.0/24 maxlen: 32
185.27.237.0/24 maxlen: 32
185.27.238.0/24 maxlen: 32
185.27.239.0/24 maxlen: 32
185.53.8.0/22 maxlen: 32
185.56.28.0/22 maxlen: 32
185.234.218.0/24 maxlen: 32
192.162.136.0/22 maxlen: 32
2a02:5060::/32 maxlen: 128
2a07:f9c0::/29 maxlen: 128
2a12:1680::/29 maxlen: 128
2a12:8f00::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:27:17:3e:c7:23:54:5a:07:76:f0:cd:7c:b3:cb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Feb 1 20:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=175c26a4b98d312944e507824a158ae04225d581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:33:d2:b9:bd:c1:ee:cc:fb:8e:61:29:54:
12:fe:9e:e8:57:b3:6a:7f:f9:5f:3b:c6:01:df:2c:
f8:68:d7:7e:af:03:44:82:c2:a0:a5:33:34:cf:63:
80:fa:6b:59:b3:23:76:26:e9:52:2c:1f:ed:8e:e5:
88:61:81:93:47:cd:25:d9:d3:ae:c9:eb:e8:dc:a8:
21:15:32:2f:f4:4f:31:d8:c0:4b:4c:e1:9b:32:d7:
b6:c2:dc:4a:b2:41:31:65:c9:92:01:bb:5c:61:25:
39:19:51:b1:f4:4e:76:d5:ff:53:c2:11:29:1b:70:
16:7c:5d:24:da:5d:b2:69:0c:34:98:51:bb:93:0c:
bd:d9:08:6b:04:aa:74:bb:14:39:ee:8b:c2:f0:2d:
a2:de:9a:39:e6:28:aa:b1:f8:e3:c3:46:c9:39:cc:
25:cb:4c:85:5d:e3:12:4b:48:a1:41:ac:d2:6a:07:
ce:89:f7:db:9b:0e:e0:c6:5a:a9:b5:28:2d:39:f7:
18:98:33:5d:e3:b5:64:63:02:6d:26:6d:01:6e:66:
89:d2:cc:cb:d9:40:a1:3f:58:b8:f0:36:e2:d8:74:
fc:6e:52:fb:b4:57:eb:c2:39:44:33:63:1d:69:58:
6d:7a:03:8c:57:0b:2b:93:2d:de:72:6f:2a:c0:bc:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5C:26:A4:B9:8D:31:29:44:E5:07:82:4A:15:8A:E0:42:25:D5:81
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/F1wmpLmNMSlE5QeCShWK4EIl1YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.36.0/22
45.150.76.0/22
91.215.156.0/22
146.19.105.0/24
185.27.236.0/22
185.53.8.0/22
185.56.28.0/22
185.234.218.0/24
192.162.136.0/22
IPv6:
2a02:5060::/32
2a07:f9c0::/29
2a12:1680::/29
2a12:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
7f:f3:99:ae:d5:2a:c5:fe:7e:de:3d:72:1a:a8:44:c2:c4:85:
0d:d0:53:2c:5a:1a:4c:3e:2a:dc:f2:5d:b5:b7:6f:87:42:72:
36:ca:65:10:44:7b:a7:3b:4f:9e:af:04:55:10:e2:5b:cd:4b:
44:e7:97:c5:3b:9a:83:ae:89:f6:cf:1d:82:46:a7:0b:eb:e8:
18:6d:a9:cf:6f:42:ba:c9:c9:b6:a0:3d:71:b4:90:7e:f5:45:
30:2e:e5:38:9e:2b:7f:5b:6a:9b:a5:ac:9b:8f:2f:cc:c1:4a:
d1:64:fe:05:d3:d0:26:8d:93:23:d3:eb:4e:4f:9a:ad:d5:06:
a1:ee:a0:47:f8:af:11:fd:e5:9d:d6:3b:b0:8b:a6:e5:da:06:
3d:90:de:4c:a7:55:a6:7a:11:85:d1:94:a4:ad:3e:ba:c8:ff:
e2:f4:b6:7a:98:83:d5:c3:7a:d7:85:f5:ac:3d:d1:09:e5:e6:
f7:d7:0c:91:63:dc:05:65:e0:fe:53:fb:1a:bf:f1:1e:b6:a3:
32:4c:86:d5:61:ca:22:7b:9c:e7:ae:a3:1f:b3:08:6d:17:7d:
23:5e:14:37:06:ce:3b:3f:f0:1c:a3:8b:d2:f9:f2:89:3b:ed:
5b:0c:2b:fe:28:15:3a:75:97:87:c5:a9:ce:78:b9:2a:2b:c1:
75:31:38:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:22:08 2025 by rpki-client