Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/eNFcepR4Ka0wIPgxNah3BdbwEiY.roa
File: eNFcepR4Ka0wIPgxNah3BdbwEiY.roa (raw, json)
Hash identifier: tMa3FJur6GQB0hX3b661MvpnBIhFWkOo/kj28UWIJa8=
Subject key identifier: 78:D1:5C:7A:94:78:29:AD:30:20:F8:31:35:A8:77:05:D6:F0:12:26
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 01856D2F4E5BCBFC13D8E3E0A4B3FF1FD4FA
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/eNFcepR4Ka0wIPgxNah3BdbwEiY.roa
Signing time: Sun 01 Jan 2023 11:54:54 +0000
ROA not before: Sun 01 Jan 2023 11:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59586
IP address blocks: 185.148.140.0/22 maxlen: 22
91.240.252.0/23 maxlen: 23
2a07:6000::/29 maxlen: 29
2001:67c:1ba4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:4e:5b:cb:fc:13:d8:e3:e0:a4:b3:ff:1f:d4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jan 1 11:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78d15c7a947829ad3020f83135a87705d6f01226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:1d:44:85:5f:da:ea:43:15:94:92:29:bc:
36:fb:c7:13:d1:1c:cc:6c:f8:b3:e0:07:e4:94:99:
cc:d2:d5:ec:27:24:42:6b:0a:df:37:50:81:7e:fb:
81:37:a0:01:bf:23:25:26:96:bc:86:cb:42:bc:ed:
ff:07:01:e2:5b:d1:bd:be:90:2a:1e:c3:26:42:14:
5c:82:86:50:73:c1:6e:20:bf:cb:00:7c:4e:2c:14:
0c:cc:c0:74:4f:ec:eb:5f:e1:ee:d8:74:c3:58:e1:
b8:63:e8:9f:80:8f:41:07:74:7c:94:34:d1:02:a9:
95:27:7c:b8:d4:db:2b:bd:57:36:5f:4c:82:4c:d4:
45:0f:c1:f0:4e:56:f1:cb:bb:e7:b5:94:73:9d:71:
df:b5:89:e0:6e:15:a3:ba:1e:42:c2:35:78:6b:1d:
44:ac:5c:78:10:d9:77:f8:c3:e0:1d:73:17:ae:e7:
f5:4f:df:62:78:89:2d:c7:03:8f:5b:8a:0d:9c:5d:
fe:4e:22:f3:ed:06:88:af:ef:3c:68:48:cd:6b:67:
b3:03:58:f0:95:d4:20:ad:46:c7:c0:80:20:b7:f3:
29:1c:d2:f2:a8:1b:4a:b0:08:1e:09:b5:56:c5:03:
6e:d3:ee:03:4a:7f:f5:9d:0a:d1:a8:a2:ce:ba:ce:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:5C:7A:94:78:29:AD:30:20:F8:31:35:A8:77:05:D6:F0:12:26
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/eNFcepR4Ka0wIPgxNah3BdbwEiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.252.0/23
185.148.140.0/22
IPv6:
2001:67c:1ba4::/48
2a07:6000::/29
Signature Algorithm: sha256WithRSAEncryption
83:07:d9:41:a2:a9:e5:87:46:f3:f1:63:cb:88:66:6e:92:c3:
62:ee:88:db:19:2b:f0:cc:6f:36:e8:4b:76:83:86:0a:65:08:
64:ab:5e:da:7a:89:a9:ce:d9:8e:6a:2c:9a:7e:be:7e:b6:68:
af:51:10:f4:20:08:71:c2:75:12:85:a7:a2:e9:a6:b8:e4:47:
49:1a:3c:5e:7b:c1:f1:09:5b:b3:3f:d7:63:af:71:e0:20:ae:
17:68:f9:46:da:02:d1:a1:98:15:94:a8:b0:12:37:8e:d5:51:
21:10:ce:d2:bb:df:db:83:e8:51:d2:1d:89:e3:fa:83:fe:35:
6a:63:e0:fc:10:ab:9e:32:f6:7a:bb:a9:83:ae:97:93:2c:75:
d6:1e:21:b6:01:52:5e:7b:c8:6f:ea:2d:7a:5f:cc:3f:83:bc:
8c:0d:d5:fb:95:9c:65:a2:22:10:58:8f:fe:d0:d6:38:aa:69:
84:01:7a:29:6c:f4:55:ae:6e:0b:92:81:5a:9b:0d:fd:fb:c5:
05:1f:56:5d:c7:60:91:13:e6:5b:cf:2c:dd:8f:32:54:15:d8:
e0:5a:4d:cd:4b:60:cc:00:ad:3a:5b:c8:d0:f4:0e:7a:3f:95:
20:4f:f3:ed:f3:0b:77:6f:92:de:22:81:98:2e:cb:53:69:4d:
b1:1c:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:51:47 2025 by rpki-client