Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/s9-XB7fq6ooFVEU2APJnE-xEn1k.roa
File: s9-XB7fq6ooFVEU2APJnE-xEn1k.roa (raw, json)
Hash identifier: iSrgIsftYuUfJ+iFxbx9V9EF5hCP5+nE2skxVy2zos8=
Subject key identifier: B3:DF:97:07:B7:EA:EA:8A:05:54:45:36:00:F2:67:13:EC:44:9F:59
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01937017D6A4467E071B224FA2E0A754CD01
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/s9-XB7fq6ooFVEU2APJnE-xEn1k.roa
Signing time: Thu 28 Nov 2024 00:07:10 +0000
ROA not before: Thu 28 Nov 2024 00:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29632
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.128.0/20 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/22 maxlen: 22
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
195.214.212.0/22 maxlen: 22
2a01:d0::/32 maxlen: 32
2a01:d0:4::/48 maxlen: 48
2a01:d0:a::/48 maxlen: 48
2a01:d0:28::/48 maxlen: 48
2a01:d0:43::/48 maxlen: 48
2a01:d0:105::/48 maxlen: 48
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:70:17:d6:a4:46:7e:07:1b:22:4f:a2:e0:a7:54:cd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Nov 28 00:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3df9707b7eaea8a0554453600f26713ec449f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:9e:3b:61:94:74:9e:96:b1:fb:5c:03:f8:
32:93:b8:da:8b:6d:ed:34:c3:38:1d:df:70:94:5b:
8d:6f:54:95:40:06:12:a7:65:03:f2:39:26:65:6d:
eb:16:fc:a7:b3:43:e3:03:af:18:b6:5f:06:d7:f2:
ee:5f:b5:71:17:ad:3a:16:55:a5:5b:53:c1:96:cf:
8d:f5:61:ba:0a:25:ea:18:78:c8:d2:8f:f4:6e:de:
1e:5b:d3:cb:02:cc:f9:6f:ef:03:12:37:99:4e:10:
a3:68:10:20:8c:46:3a:8c:c4:4e:c5:0c:7c:62:3d:
07:61:62:24:01:1f:b3:1e:f7:36:f8:25:b4:e0:cd:
43:91:1d:d5:22:66:58:85:68:2e:4b:17:e5:35:a3:
33:ff:86:8c:6c:62:c9:49:f4:21:73:ef:d8:c4:ff:
63:ff:43:9f:0d:78:51:6c:98:97:b6:c3:52:1d:fe:
3b:b8:c2:cb:47:c0:bf:eb:e7:70:5e:6f:16:d2:84:
0f:2a:52:86:16:30:63:e6:99:0f:ea:5c:e6:fd:d1:
9e:ba:7f:e7:b6:da:c5:7c:83:dd:e0:67:5e:21:98:
85:35:83:44:e6:62:68:9b:c5:6d:50:6d:7e:b2:ca:
70:00:c4:61:9a:0f:66:56:67:49:a4:8c:17:7e:8e:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DF:97:07:B7:EA:EA:8A:05:54:45:36:00:F2:67:13:EC:44:9F:59
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/s9-XB7fq6ooFVEU2APJnE-xEn1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.170.0-95.164.175.255
195.214.212.0/22
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
66:f0:ea:c6:a2:c2:46:e6:54:a3:a1:cc:48:da:93:18:55:8c:
4a:2f:0b:df:3d:96:d1:7f:27:b7:d3:0f:b0:1a:6d:71:e9:e3:
f7:5f:37:51:e1:2e:12:28:73:63:cf:88:94:f8:b6:d7:f8:07:
54:a1:aa:b9:68:c7:a8:70:8d:a4:33:68:92:71:bc:db:15:10:
63:a8:34:bf:a8:41:3a:f3:b6:fb:15:54:f0:2d:33:2f:db:6c:
79:ef:52:d9:7f:50:04:10:7c:18:49:5d:82:33:51:47:11:d1:
07:fc:7c:f0:63:b0:10:15:c6:d4:b5:df:39:68:cb:6a:65:2f:
56:91:ce:3d:78:5e:83:fb:a7:5a:43:86:76:07:c9:37:b1:82:
e3:f2:ff:2d:ad:56:74:bb:8f:e3:2d:4d:90:3a:52:a7:1b:6f:
b3:4d:bf:f8:61:ca:b8:b0:15:52:21:7e:27:a2:e5:64:13:0b:
79:31:40:d7:52:5e:3c:33:83:68:e5:b3:54:07:76:a7:3a:43:
8a:5d:cc:8a:80:b2:9c:fd:a4:f8:bd:9e:d5:f2:cf:ea:9d:69:
b9:b5:d6:f9:1f:47:5e:6c:fd:ff:16:15:42:0d:a0:da:fa:2d:
de:a7:1c:39:63:3d:92:da:aa:7a:d8:8f:a6:ff:72:50:80:03:
57:fb:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:31:23 2025 by rpki-client