Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_ASEc1G3uitICN25HW34dU3kW8Q.roa
File: _ASEc1G3uitICN25HW34dU3kW8Q.roa (raw, json)
Hash identifier: YsDIaMHk0IEZsAi0fqVTLIRHDbbsMcea7iMMGBll5oo=
Subject key identifier: FC:04:84:73:51:B7:BA:2B:48:08:DD:B9:1D:6D:F8:75:4D:E4:5B:C4
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0195849315152872DA31DD0FD7EB8CC2C8CA
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_ASEc1G3uitICN25HW34dU3kW8Q.roa
Signing time: Tue 11 Mar 2025 09:39:46 +0000
ROA not before: Tue 11 Mar 2025 09:39:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29262
IP address blocks: 46.29.26.0/24 maxlen: 24
46.29.27.0/24 maxlen: 24
93.190.12.0/24 maxlen: 24
93.190.13.0/24 maxlen: 24
160.20.108.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.191.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.85.238.0/24 maxlen: 24
185.85.239.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.86.153.0/24 maxlen: 24
185.86.154.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.24.0/24 maxlen: 24
185.87.26.0/24 maxlen: 24
185.87.27.0/24 maxlen: 24
185.87.121.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
185.98.60.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.119.81.0/24 maxlen: 24
185.119.82.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
185.141.32.0/24 maxlen: 24
2a0b:6780::/29 maxlen: 29
2a0c:67c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:93:15:15:28:72:da:31:dd:0f:d7:eb:8c:c2:c8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 11 09:39:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc04847351b7ba2b4808ddb91d6df8754de45bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:a7:7e:07:4a:a7:97:0e:6d:f8:0d:aa:b9:
b1:e2:f8:f7:2a:6a:99:e1:5d:9e:3f:ae:07:74:2e:
e1:b9:ef:95:49:6e:67:86:08:ba:6b:25:f2:94:a3:
4c:2a:b5:f3:e6:c1:17:b7:eb:d7:ae:79:81:fb:ec:
1f:1b:61:a9:6a:70:62:1c:f3:be:b0:4c:f0:36:78:
bb:92:0b:40:bd:00:6d:93:2a:71:3c:03:8d:f5:19:
fc:8d:14:d8:16:52:1f:6e:c7:f8:b5:00:93:36:50:
cf:26:9b:78:7f:af:b9:2b:98:10:3e:2e:83:df:72:
46:d6:ee:dd:ab:03:d8:ad:0f:3a:c3:4d:c2:85:f1:
ae:a6:0d:14:bb:6d:39:1b:81:81:a2:b2:18:be:f8:
ac:a4:18:af:63:5f:e3:43:97:2a:48:6d:5b:51:b1:
35:16:2d:9d:cc:7d:0a:cc:44:dd:f7:9a:89:1b:3e:
14:8b:a5:c5:2d:b6:0d:c0:27:bf:80:95:60:0d:7c:
b7:a4:83:45:70:b3:ae:5b:19:a8:92:0f:9b:f8:0f:
b0:88:e5:09:9d:dd:67:98:56:23:3f:cf:d2:c3:02:
33:2e:52:2a:0e:25:c1:4a:df:75:6e:88:bc:6f:c6:
49:e0:38:46:ed:3b:a9:19:b5:72:77:d2:1c:66:69:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:84:73:51:B7:BA:2B:48:08:DD:B9:1D:6D:F8:75:4D:E4:5B:C4
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_ASEc1G3uitICN25HW34dU3kW8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.26.0/23
93.190.12.0/23
160.20.108.0/23
185.85.189.0-185.85.191.255
185.85.237.0-185.85.239.255
185.86.5.0/24
185.86.13.0/24
185.86.153.0-185.86.154.255
185.86.164.0/22
185.87.24.0/24
185.87.26.0/23
185.87.121.0-185.87.123.255
185.98.60.0/24
185.119.80.0/22
185.141.32.0/24
IPv6:
2a0b:6780::/29
2a0c:67c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:dc:e9:4b:f8:c5:e9:9c:fe:ce:80:49:72:c9:87:7e:bb:f5:
1a:ed:96:d3:2a:5e:f9:f7:da:bf:3d:2d:64:4c:58:8a:cb:28:
dd:d0:8e:56:09:85:1a:0b:af:9b:6f:c6:94:f2:93:c6:b7:86:
20:a1:49:5f:fd:15:da:f5:1d:d4:b3:e3:7f:6a:f3:ba:f0:f3:
bd:f1:97:63:e2:eb:fc:26:e4:17:93:54:4e:bf:4d:a9:5a:8c:
48:53:6a:8f:b3:b6:7d:08:3d:c2:6d:23:71:b5:02:6e:f2:76:
08:eb:ab:3f:5e:cb:52:1c:63:bf:2c:52:96:27:e0:6a:02:49:
9f:e0:ba:90:33:21:66:7e:0b:e2:88:c5:db:34:ce:b8:cc:87:
c1:07:5c:19:22:71:f0:f3:71:f3:b6:32:9c:da:b6:65:06:5d:
9e:82:72:ce:c5:81:65:28:a5:1d:e1:fa:65:f0:90:0b:a4:32:
4b:9b:ca:ca:d1:d9:bd:01:f0:3b:19:e9:54:d1:5f:05:91:b8:
fa:63:e0:a8:83:ec:1a:99:35:a2:e8:7e:62:2c:18:24:31:7d:
c4:a0:cd:15:5f:9a:fa:9a:05:c1:dd:bb:b6:ab:20:82:4a:c6:
1e:b4:69:ab:38:1d:14:4c:ac:af:c8:f1:6c:be:23:9e:0b:4c:
f7:ac:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:19:25 2025 by rpki-client