Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1yLqeGpvwkZjtN9yRbe02sce3Tk.roa
File: 1yLqeGpvwkZjtN9yRbe02sce3Tk.roa (raw, json)
Hash identifier: A1MUoP4I0vUFiGhJqGh4cTDKVsCAVPivH1/BnL2HxPI=
Subject key identifier: D7:22:EA:78:6A:6F:C2:46:63:B4:DF:72:45:B7:B4:DA:C7:1E:DD:39
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0190E434821FB49C726DC4417C4477E3565F
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1yLqeGpvwkZjtN9yRbe02sce3Tk.roa
Signing time: Wed 24 Jul 2024 10:06:04 +0000
ROA not before: Wed 24 Jul 2024 10:06:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
94.131.124.0/24 maxlen: 24
94.131.127.0/24 maxlen: 24
95.164.12.0/23 maxlen: 23
95.164.15.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/22 maxlen: 22
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.92.0/23 maxlen: 24
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.122.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/23 maxlen: 23
95.164.251.0/24 maxlen: 24
195.214.208.0/21 maxlen: 21
195.214.208.0/22 maxlen: 22
195.214.210.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
2a01:d0::/32 maxlen: 32
2a01:d0:4::/48 maxlen: 48
2a01:d0:a::/48 maxlen: 48
2a01:d0:28::/48 maxlen: 48
2a01:d0:3b::/48 maxlen: 48
2a01:d0:43::/48 maxlen: 48
2a01:d0:105::/48 maxlen: 48
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:34:82:1f:b4:9c:72:6d:c4:41:7c:44:77:e3:56:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 24 10:06:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d722ea786a6fc24663b4df7245b7b4dac71edd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:8c:da:c8:19:de:e8:46:bf:24:55:83:a9:
20:82:dc:3e:09:7e:be:ff:75:dd:46:99:77:02:ac:
b6:de:cb:57:b2:46:1d:7c:44:60:8a:87:76:ee:d3:
80:58:30:36:c4:b5:eb:b4:f1:14:ed:24:34:22:e3:
9b:8f:b3:52:d0:63:ff:aa:74:cb:7a:81:3d:07:0d:
3b:21:77:ab:6b:7d:cf:ab:52:2f:c8:26:a4:f0:14:
6f:7b:31:24:f2:ab:62:47:2b:5c:d2:b5:ea:f8:a0:
4e:54:c6:35:ae:23:bf:5a:8f:7e:c2:c6:14:24:68:
7f:e1:67:9d:2e:58:67:8d:33:56:87:49:a5:36:b1:
16:51:8c:f8:ff:b9:75:ab:f0:19:b4:ca:0e:41:eb:
4b:fc:1d:f5:48:6d:6c:c1:9b:d9:1c:ea:a4:1e:a5:
08:15:b0:78:0f:08:b0:21:1f:4b:da:ba:8d:a4:ca:
ee:a2:ff:67:a8:9c:98:0b:2a:e7:a0:98:fa:ce:8b:
e9:fd:2c:fe:55:89:88:d4:63:e6:fa:d2:c4:1b:b4:
d8:20:88:ec:eb:68:3a:2d:a1:61:90:a2:c7:1e:92:
bb:b0:ef:85:ac:11:95:ff:d2:21:13:b4:ad:37:9e:
65:a4:42:6e:56:b2:b2:b7:23:11:c4:b4:e6:04:b4:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:EA:78:6A:6F:C2:46:63:B4:DF:72:45:B7:B4:DA:C7:1E:DD:39
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1yLqeGpvwkZjtN9yRbe02sce3Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
94.131.124.0/24
94.131.127.0/24
95.164.12.0/23
95.164.15.0/24
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/23
95.164.120.0/22
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
51:12:ab:2d:31:34:a3:37:a2:32:ed:76:e3:eb:67:b3:f2:a9:
f8:6e:10:52:7c:78:cd:58:82:ca:e5:76:49:ce:42:75:62:69:
e9:1b:38:56:8f:5b:33:6b:5c:42:17:51:ec:3f:ab:5a:5a:af:
18:48:db:73:39:a2:09:2e:3e:d2:18:67:03:82:21:09:5c:82:
59:e8:2b:63:0e:4f:fc:35:a3:dd:2b:70:ba:3d:19:32:b5:b5:
e1:e5:70:45:87:b9:c8:9a:43:8f:07:eb:e2:ae:1a:84:fd:8b:
f6:eb:0a:7a:9e:57:1e:b9:d2:c5:d9:0c:cb:e5:c8:d8:e2:0c:
64:38:57:3d:8d:dc:2d:3c:d9:a3:ee:6a:2d:e7:1f:8e:d3:42:
f1:04:75:c5:ff:9c:22:9a:8d:57:e1:0d:f7:26:57:e9:b4:53:
22:ea:12:2a:65:39:58:d8:8e:b5:ac:03:b7:10:94:8f:01:6d:
af:6d:1d:ea:dc:39:31:5f:f4:1b:7a:9b:5e:0e:66:98:9f:2e:
24:eb:56:e3:36:6c:4f:c2:4e:4f:fe:8b:13:ec:51:dc:e8:66:
aa:97:55:61:2a:c4:aa:47:b3:7e:52:a6:b9:44:4c:33:95:35:
ea:b9:ae:9d:cd:c7:48:9c:b5:b1:c7:ba:20:9f:a6:6e:13:3c:
31:75:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:07 2025 by rpki-client