Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/FLkrvqHmD6eBeMa1h2bO_ZNKhg4.roa
File: FLkrvqHmD6eBeMa1h2bO_ZNKhg4.roa (raw, json)
Hash identifier: /mPez/L0Vr+EoPocb/dhaqkaLues0KokkJJZezW2ow8=
Subject key identifier: 14:B9:2B:BE:A1:E6:0F:A7:81:78:C6:B5:87:66:CE:FD:93:4A:86:0E
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019426D9EFE56119B55DE7645D92DEF9F5F0
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/FLkrvqHmD6eBeMa1h2bO_ZNKhg4.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42263
IP address blocks: 5.253.192.0/22 maxlen: 22
45.94.108.0/22 maxlen: 22
45.136.96.0/22 maxlen: 22
45.140.116.0/22 maxlen: 22
185.32.80.0/22 maxlen: 22
185.115.48.0/22 maxlen: 22
185.116.244.0/22 maxlen: 22
185.145.196.0/22 maxlen: 22
185.173.240.0/22 maxlen: 22
185.182.32.0/22 maxlen: 22
192.70.192.0/22 maxlen: 22
2a00:c320::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ef:e5:61:19:b5:5d:e7:64:5d:92:de:f9:f5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14b92bbea1e60fa78178c6b58766cefd934a860e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:9b:aa:84:a2:97:d2:86:19:c8:3f:a2:fc:
6a:74:c4:31:de:47:34:46:cf:4d:af:96:2d:54:ac:
db:84:35:94:95:ca:ef:4a:88:16:ed:d4:a0:47:24:
31:75:31:34:5d:f7:f3:36:66:db:2a:f6:0e:ad:a8:
a1:b3:81:4c:cd:18:02:71:2f:79:b9:76:28:24:cc:
82:75:a0:04:09:8a:ea:d9:46:45:b8:56:dc:9e:de:
38:d9:18:e3:fc:73:81:89:b9:da:67:db:9c:c3:7c:
b6:2e:e2:0b:45:8b:e9:cd:00:9d:f7:6c:8b:ac:fe:
12:43:4a:f1:bd:83:29:b2:55:40:ce:58:14:f9:89:
32:c7:d9:23:a0:23:1b:65:d0:d3:50:ca:65:94:4e:
99:7e:23:ef:25:3f:4b:2c:a2:fa:e1:cb:73:9d:1a:
ca:28:f7:40:d3:87:a5:64:05:a0:7f:01:2c:18:f9:
68:ed:67:c3:1a:c4:13:54:66:e2:34:ac:15:cb:82:
ee:28:dc:0c:3f:0f:74:19:4c:64:b8:72:12:81:e1:
1a:6a:23:7d:26:6c:9d:06:31:52:ea:88:79:cb:31:
cf:0b:0b:e4:02:f1:91:14:92:ce:50:b3:2b:2b:c4:
08:b7:53:ca:5f:18:97:23:2e:98:31:ee:ad:ec:1c:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B9:2B:BE:A1:E6:0F:A7:81:78:C6:B5:87:66:CE:FD:93:4A:86:0E
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/FLkrvqHmD6eBeMa1h2bO_ZNKhg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.192.0/22
45.94.108.0/22
45.136.96.0/22
45.140.116.0/22
185.32.80.0/22
185.115.48.0/22
185.116.244.0/22
185.145.196.0/22
185.173.240.0/22
185.182.32.0/22
192.70.192.0/22
IPv6:
2a00:c320::/29
Signature Algorithm: sha256WithRSAEncryption
a9:1c:e3:0d:2d:2c:d2:e4:cd:71:e5:4e:0a:7d:5d:b2:bd:33:
5a:9d:12:c6:68:93:e3:ba:30:70:71:4a:74:1c:58:c9:c2:02:
29:72:06:54:05:bd:b2:fa:a1:31:d4:14:bb:dc:93:af:7e:d0:
f2:50:d3:d9:81:74:a6:be:b2:51:4a:56:91:3d:fd:2a:f6:4f:
2f:13:e8:53:a3:38:49:77:06:a9:ae:0a:40:f7:5b:50:c5:6e:
5a:1f:8c:7c:53:7f:d3:f3:8d:93:93:14:c1:05:38:68:6e:ea:
7e:e5:aa:c4:c7:fd:f3:47:a1:2e:9b:38:38:44:8e:0c:30:c5:
46:08:91:c5:04:3e:a2:ba:fd:5a:e1:3b:d9:cc:e3:7b:16:c7:
20:0a:ab:17:fa:65:ce:f5:83:46:d4:db:52:e0:1e:f3:64:83:
22:f9:62:2e:0c:16:90:c9:05:8a:ff:9d:cc:6d:8b:30:48:14:
78:70:8f:17:c6:b9:ba:ff:06:ef:23:8f:4b:ce:f0:91:56:7c:
3d:16:f2:c8:2e:4a:26:da:db:05:cf:0d:96:54:47:14:f1:da:
89:c2:35:e0:86:58:01:49:35:0f:8b:81:21:3d:33:e5:b0:52:
ca:d7:f2:f7:22:09:ec:e5:eb:83:b9:e1:35:00:6b:f0:0a:2d:
ca:b8:54:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:44:29 2025 by rpki-client