Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/7yVH8B9LNSXc5gjkJ0ey8OtTtBY.roa
File: 7yVH8B9LNSXc5gjkJ0ey8OtTtBY.roa (raw, json)
Hash identifier: 7+8ofNdQlSITDjhSy/4oCod+uWw15xav9FYrB+FUK2g=
Subject key identifier: EF:25:47:F0:1F:4B:35:25:DC:E6:08:E4:27:47:B2:F0:EB:53:B4:16
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 01859A7FB6A88FE67BB3EDB30416768C9A98
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/7yVH8B9LNSXc5gjkJ0ey8OtTtBY.roa
Signing time: Tue 10 Jan 2023 07:05:39 +0000
ROA not before: Tue 10 Jan 2023 07:05:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49628
IP address blocks: 185.46.176.0/22 maxlen: 22
193.176.215.0/24 maxlen: 24
78.40.106.0/24 maxlen: 24
78.40.107.0/24 maxlen: 24
193.176.214.0/24 maxlen: 24
5.187.9.0/24 maxlen: 24
5.187.10.0/24 maxlen: 24
5.187.8.0/24 maxlen: 24
5.187.8.0/21 maxlen: 21
193.176.212.0/24 maxlen: 24
193.176.212.0/22 maxlen: 22
78.40.104.0/24 maxlen: 24
78.40.104.0/22 maxlen: 22
193.176.213.0/24 maxlen: 24
78.40.105.0/24 maxlen: 24
185.168.224.0/24 maxlen: 24
185.168.224.0/22 maxlen: 22
185.168.225.0/24 maxlen: 24
185.168.226.0/24 maxlen: 24
185.168.227.0/24 maxlen: 24
37.75.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:7f:b6:a8:8f:e6:7b:b3:ed:b3:04:16:76:8c:9a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jan 10 07:05:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2547f01f4b3525dce608e42747b2f0eb53b416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:bb:ec:0d:11:30:50:1d:53:e2:3f:99:e7:
45:e5:2a:51:2d:0c:50:35:c0:82:06:be:45:4f:8a:
10:3c:bb:8e:b6:94:ef:f9:03:d4:58:4a:69:14:ac:
ec:1a:c8:b0:95:4e:12:1d:a8:cf:11:48:8e:ed:13:
da:25:59:a1:8f:25:aa:58:9d:93:bc:0c:fd:36:66:
84:18:95:6b:94:d3:12:f3:e2:19:1f:49:a3:74:c8:
20:37:80:51:d0:9f:c5:08:42:41:f0:2a:f9:8f:c9:
00:df:d6:b5:7d:cd:55:24:89:0b:65:c8:c0:72:2f:
9c:7c:e2:92:6f:c2:fe:4b:25:df:b3:31:47:cb:40:
33:35:d9:96:9c:6c:f4:3c:df:dd:a2:a6:43:f6:41:
13:42:4f:89:5b:f9:bc:99:fd:1a:19:41:b8:01:03:
e1:63:92:86:95:a3:2f:f9:3a:8e:37:df:43:d0:90:
08:37:32:c1:69:05:09:8c:3f:b8:82:25:9d:c6:31:
95:11:e3:53:b0:9f:6c:b8:7b:29:da:68:5e:d4:70:
ea:71:88:dd:35:5f:87:a2:de:76:e5:d7:8c:47:0d:
9f:da:da:0c:e7:2b:f6:76:b5:84:9f:26:84:d1:3c:
4a:8d:5d:73:72:bb:86:90:ed:e2:87:a1:b9:88:e2:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:25:47:F0:1F:4B:35:25:DC:E6:08:E4:27:47:B2:F0:EB:53:B4:16
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/7yVH8B9LNSXc5gjkJ0ey8OtTtBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.8.0/21
37.75.128.0/21
78.40.104.0/22
185.46.176.0/22
185.168.224.0/22
193.176.212.0/22
Signature Algorithm: sha256WithRSAEncryption
22:ea:23:c6:05:6f:8b:78:ae:90:b1:20:db:7f:b5:98:07:d9:
35:c0:7b:d8:38:9a:1a:a1:77:a5:5c:16:45:e2:c2:c7:76:ee:
bf:eb:41:ac:81:da:e8:9a:12:d9:83:f8:30:de:a5:e7:2d:52:
3e:95:59:cf:39:45:76:07:b5:9f:f2:fd:6f:d3:5d:84:6c:cf:
61:e7:9f:23:8f:69:70:02:70:5f:b2:4d:86:a0:e0:a5:a8:ef:
6e:55:f0:2a:8d:98:e4:24:0e:af:21:9c:ae:1f:9f:f9:56:d1:
24:39:85:43:05:a7:74:39:3b:fd:6d:c1:67:5b:3f:0d:50:9a:
01:0a:66:d0:2c:70:ef:d3:6b:cf:fb:d8:2e:f0:d9:51:ca:14:
0d:d1:c1:f6:a9:ed:17:e2:a0:f0:96:f0:76:a3:74:f4:f0:4b:
9c:2c:43:25:48:63:7a:8d:88:3f:11:e9:64:03:35:91:9d:36:
9a:7b:99:da:97:3e:fc:c1:2a:6e:84:f3:84:58:3e:c1:f6:49:
53:a3:30:f5:ec:a1:e1:4e:69:e0:ae:0b:50:ef:8f:b8:f3:2b:
38:52:83:9a:3f:6e:2e:5e:64:df:0b:3c:bf:fe:70:0e:e5:8a:
a7:46:c2:04:2e:8e:3a:a2:90:80:ee:a7:f6:75:a2:e5:7c:41:
79:c3:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:38:57 2025 by rpki-client