Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/T8_Qwu4VwC8XZHnovkCrbf1IhTE.roa
File: T8_Qwu4VwC8XZHnovkCrbf1IhTE.roa (raw, json)
Hash identifier: Z+VV/JnAxOmaWy4EWZA3UqkBhneuuZxWMHS1AYqhfog=
Subject key identifier: 4F:CF:D0:C2:EE:15:C0:2F:17:64:79:E8:BE:40:AB:6D:FD:48:85:31
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0194A49AA88206186E8B2274397B5DB22910
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/T8_Qwu4VwC8XZHnovkCrbf1IhTE.roa
Signing time: Sun 26 Jan 2025 21:53:06 +0000
ROA not before: Sun 26 Jan 2025 21:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29632
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.128.0/20 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
195.214.212.0/22 maxlen: 22
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a4:9a:a8:82:06:18:6e:8b:22:74:39:7b:5d:b2:29:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 26 21:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fcfd0c2ee15c02f176479e8be40ab6dfd488531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:12:e9:f0:10:d1:a0:a5:2e:20:5c:25:75:
9f:5b:58:41:82:c9:5f:7d:15:0c:9a:79:3a:d1:4e:
85:ac:d0:27:07:92:58:40:05:02:82:30:f1:59:f4:
14:7a:f5:74:5f:f4:f9:f0:46:c1:b2:4d:1e:d3:a4:
86:0c:64:4c:b7:fd:ad:d5:27:49:7a:3a:b0:bd:9c:
5e:43:3e:07:3b:de:ac:46:7d:5b:af:1c:6e:06:70:
87:9a:1f:97:12:bb:c9:58:78:a1:6d:a3:de:45:00:
7a:cf:fb:aa:8c:e0:ff:37:24:c2:a7:4e:e4:a8:a2:
0c:20:01:ad:04:3e:5c:ae:dc:2b:58:5b:be:ab:91:
64:ce:46:f7:5b:ad:d0:93:b2:02:40:46:1e:0b:02:
b9:52:80:aa:cf:8c:51:39:89:e3:8e:68:ab:90:03:
d8:bd:78:72:f9:60:01:dd:cb:21:bd:7c:0b:0e:d3:
a3:45:81:e9:a0:4e:93:b1:6d:77:9a:60:cb:6c:01:
b1:e7:ae:00:54:64:0c:a5:87:c3:6d:f6:9e:43:8d:
3a:9b:ad:da:1b:c9:85:f8:50:87:c0:d6:e6:6d:4f:
9b:51:de:2d:9e:6f:6b:d8:44:89:77:14:9a:04:95:
c1:1f:1f:3b:6e:db:ef:f3:15:ce:f3:aa:fe:17:fd:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CF:D0:C2:EE:15:C0:2F:17:64:79:E8:BE:40:AB:6D:FD:48:85:31
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/T8_Qwu4VwC8XZHnovkCrbf1IhTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0/24
95.164.56.0/22
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.170.0-95.164.175.255
195.214.212.0/22
IPv6:
2a01:d0:303::/48
2a01:d0:305::/48
2a01:d0:308::/48
2a01:d0:317::/48
2a01:d0:31d::/48
2a01:d0:333::/48
2a01:d0:962::/48
2a01:d0:1657::/48
2a01:d0:7fff::-2a01:d0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:50:67:00:82:fa:a8:8f:d7:ba:65:c8:c4:83:c1:91:c8:5e:
f9:c1:bd:b0:40:8d:f9:d4:41:2e:0f:40:13:f0:f8:4a:d2:e6:
c8:61:0c:d4:cc:a2:7a:9f:17:eb:bc:03:d3:89:1d:34:ec:02:
9d:49:6a:25:fe:d5:00:2f:63:41:c2:40:10:de:a7:02:22:d2:
6b:4a:28:98:f2:da:12:a8:b0:32:6e:dc:62:b8:0c:48:09:0e:
5a:65:16:89:6e:f4:e0:a0:d5:8f:97:b2:0f:77:a7:d8:1e:66:
55:d0:b5:61:2a:9a:3a:e2:c3:6e:ad:66:2b:59:8f:e2:f7:c0:
ce:03:d4:ab:7f:5e:58:03:16:4b:1b:c4:8c:6f:9e:97:b5:33:
e6:ae:fb:0c:5a:9d:1e:8b:ad:58:23:9b:2c:47:82:4f:a6:b1:
e3:56:cc:97:69:ee:5f:e7:52:de:38:4a:5f:84:06:b0:7f:f1:
91:6d:8a:29:8d:7f:99:77:78:c2:c4:4f:c5:5d:34:82:a7:97:
33:32:61:a9:54:a6:cd:5c:46:1f:f9:fe:f7:23:42:32:3f:4d:
fa:e8:90:2a:4f:27:bf:b3:e2:08:21:d7:68:97:e9:5e:c5:8d:
80:55:44:e8:14:72:bb:af:cc:9d:50:90:c1:9e:52:98:c1:46:
3c:15:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:39:08 2025 by rpki-client