Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/3RJ7Qumrqbx1zAII8e5Bvhxes-w.roa
File: 3RJ7Qumrqbx1zAII8e5Bvhxes-w.roa (raw, json)
Hash identifier: 4po0Jy/PzrGlMQ2cblmC5UzezbzvXSlgpHU/PNv6Tiw=
Subject key identifier: DD:12:7B:42:E9:AB:A9:BC:75:CC:02:08:F1:EE:41:BE:1C:5E:B3:EC
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0189444DB9BA9083086D5AC5A072DFA7504B
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/3RJ7Qumrqbx1zAII8e5Bvhxes-w.roa
Signing time: Tue 11 Jul 2023 09:34:51 +0000
ROA not before: Tue 11 Jul 2023 09:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29632
IP address blocks: 95.164.52.0/22 maxlen: 22
95.164.56.0/22 maxlen: 22
95.164.70.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
195.214.210.0/24 maxlen: 24
195.214.208.0/21 maxlen: 21
195.214.208.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.72.0/22 maxlen: 22
95.164.80.0/22 maxlen: 22
95.164.92.0/22 maxlen: 22
95.164.172.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
94.131.0.0/23 maxlen: 23
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
62.205.128.0/20 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.128.0/19 maxlen: 20
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.50.0/24 maxlen: 24
95.164.49.0/24 maxlen: 24
2a01:d0:8000::/33 maxlen: 33
2a01:d0::/32 maxlen: 32
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:ffff::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:4d:b9:ba:90:83:08:6d:5a:c5:a0:72:df:a7:50:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 11 09:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd127b42e9aba9bc75cc0208f1ee41be1c5eb3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:70:8e:67:ee:b2:3b:96:36:6d:de:e2:a5:39:
ac:74:ed:f4:f7:12:5f:37:d0:2b:de:79:c4:57:f8:
42:fb:5d:58:77:93:42:fb:83:f0:3b:9a:9f:1c:ba:
28:9a:8d:5e:f7:a1:dc:c5:ef:f5:2d:18:8a:43:78:
9a:7d:e2:fe:4d:08:75:04:43:4e:b5:46:f8:5f:e2:
4a:12:cf:ce:b7:93:ec:d8:14:ad:c2:56:1f:3a:64:
3d:f3:50:39:8a:27:b7:10:7d:d0:e3:31:51:85:4f:
bd:99:06:8e:d9:7d:de:df:25:26:40:7d:0c:7a:94:
ca:b7:20:ad:a3:25:35:57:d9:98:bb:1a:56:7a:0c:
c2:21:87:82:33:38:06:e3:03:a5:82:56:3f:8d:e5:
df:a5:21:5a:f9:8c:2b:83:b6:a5:6f:33:b1:5b:c3:
b7:29:3b:de:fb:de:5d:f4:48:d4:7f:fd:f1:5d:a0:
bb:9b:3f:6e:06:96:48:2b:a7:f7:78:72:e9:67:83:
54:7a:95:c3:4c:ac:22:5d:36:2e:be:1e:5b:78:c0:
a5:6c:20:0d:01:a6:ed:55:34:70:95:88:ca:70:40:
91:d0:17:5a:71:00:f1:ec:3a:d9:a7:56:15:bd:4a:
b0:f0:8c:3b:26:80:ff:9d:bb:d9:66:d6:34:96:f5:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:12:7B:42:E9:AB:A9:BC:75:CC:02:08:F1:EE:41:BE:1C:5E:B3:EC
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/3RJ7Qumrqbx1zAII8e5Bvhxes-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/24
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.70.0/24
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/22
95.164.170.0-95.164.175.255
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
35:5b:87:e4:f2:32:c6:1c:b0:dd:64:3f:58:74:0f:8c:48:6b:
8c:da:fa:09:69:12:6b:29:5f:c7:df:5d:87:9f:13:5f:bc:65:
8d:7c:74:32:65:2f:f5:ac:ff:f0:d3:d6:dd:d8:1f:32:1f:35:
d2:dd:44:ec:ca:6d:69:a5:b7:32:96:62:84:56:30:ca:68:d2:
0f:27:47:1e:fe:c5:90:8f:a7:6c:bb:79:67:21:b7:f3:ba:4c:
40:f2:23:59:da:3e:4f:ab:1c:eb:e4:d1:a3:64:cb:5a:b0:f2:
d3:fe:0e:cc:09:7d:dc:23:78:57:a1:e4:d4:c4:96:e1:15:e2:
6d:3b:26:b9:6b:e3:7c:ad:2e:0b:ea:19:e6:2c:7c:9f:7e:90:
a9:3a:43:45:d8:ff:b8:e4:3d:cd:d4:34:07:2a:aa:08:12:e4:
2b:52:0a:77:55:f2:df:da:d1:26:58:a8:49:ed:82:d9:a4:98:
4e:ba:4e:51:76:17:74:07:6f:cb:10:57:b4:b7:bd:ce:de:50:
36:f3:94:45:a5:25:82:f4:a6:a1:f1:1f:93:33:41:43:13:6a:
21:a6:34:bb:27:d5:b5:fa:22:a3:61:b6:16:3e:47:52:08:09:
8a:f3:1c:5e:9e:13:26:e5:82:22:f4:ba:9a:1e:0c:e7:fb:c1:
8a:64:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:09 2025 by rpki-client