Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/V_74GcUr3VNDUUYvRdcrr6BZ3NQ.roa
File: V_74GcUr3VNDUUYvRdcrr6BZ3NQ.roa (raw, json)
Hash identifier: rRNTgMx/CkgVrGTklN6Tit/Gw2HvhonKuJL8q3FnXKs=
Subject key identifier: 57:FE:F8:19:C5:2B:DD:53:43:51:46:2F:45:D7:2B:AF:A0:59:DC:D4
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD132C82E9A6B948B269C4DA8B91E6
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/V_74GcUr3VNDUUYvRdcrr6BZ3NQ.roa
Signing time: Thu 02 Jan 2025 07:48:50 +0000
ROA not before: Thu 02 Jan 2025 07:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 64.137.29.0/24 maxlen: 24
64.137.34.0/23 maxlen: 23
64.137.40.0/23 maxlen: 23
64.137.114.0/24 maxlen: 24
64.137.119.0/24 maxlen: 24
64.137.125.0/24 maxlen: 24
64.137.127.0/24 maxlen: 24
84.246.108.0/24 maxlen: 24
204.52.112.0/20 maxlen: 24
204.52.120.0/24 maxlen: 24
204.52.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:13:2c:82:e9:a6:b9:48:b2:69:c4:da:8b:91:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57fef819c52bdd534351462f45d72bafa059dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:47:d2:05:48:6f:87:15:d7:18:1c:7e:64:
dc:8b:57:5a:0f:b3:43:59:f4:b4:24:7f:87:bf:88:
bd:65:b7:2d:47:23:c6:84:7a:8c:4c:30:3d:f5:5b:
d0:1e:6b:0e:9a:24:f6:9b:b8:73:56:2a:99:c6:47:
c5:87:d8:f0:7e:6e:07:0b:5f:a5:87:2e:78:49:8f:
39:3b:e0:5a:7b:5c:14:a0:db:8f:0e:32:be:f6:e9:
9a:ac:48:69:a6:7c:3b:d6:78:9a:26:b0:ea:5d:b4:
28:20:5c:ca:c8:f7:bf:50:e3:dd:32:9b:6b:34:46:
3d:3b:08:17:79:5a:90:3a:4b:a8:56:28:82:9f:21:
ce:3b:a0:5a:e9:17:7e:95:9b:8a:bb:c4:24:f8:c2:
a3:a6:e6:bf:48:c7:8b:cf:63:1b:ca:7d:8f:2f:bb:
22:b3:ed:48:7f:c9:c4:4e:1b:d9:0b:59:54:5f:de:
fc:19:1c:3f:7f:ba:d7:39:b4:a8:ee:1a:01:d5:ad:
79:cd:65:69:71:6e:85:b7:a5:c3:5e:27:7d:9f:46:
61:8d:4d:f7:ee:68:57:76:4a:f1:72:9a:9e:66:31:
c6:86:45:58:e4:59:f2:55:4d:9e:99:65:58:34:be:
62:46:3c:b1:f2:5f:c2:3a:4d:84:25:08:2a:8d:7c:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FE:F8:19:C5:2B:DD:53:43:51:46:2F:45:D7:2B:AF:A0:59:DC:D4
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/V_74GcUr3VNDUUYvRdcrr6BZ3NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.29.0/24
64.137.34.0/23
64.137.40.0/23
64.137.114.0/24
64.137.119.0/24
64.137.125.0/24
64.137.127.0/24
84.246.108.0/24
204.52.112.0/20
Signature Algorithm: sha256WithRSAEncryption
51:42:da:79:c7:0b:02:d6:f4:00:ea:a2:bb:ee:08:d3:a5:47:
a0:8f:de:05:f8:2d:af:f2:5f:d2:28:1d:8d:7d:59:6e:97:fc:
f7:1a:88:47:3d:e9:b5:6a:c5:b5:83:8a:a4:bf:ae:4e:f2:55:
80:16:8e:bd:1d:e3:6b:99:05:43:ad:86:45:cd:81:24:d6:8a:
2c:c1:d2:bd:0f:3c:3a:d2:a9:cd:27:74:48:f1:ad:f8:c4:19:
86:17:dc:09:c7:2d:11:9b:89:36:85:f1:a5:70:57:5b:1e:91:
47:b2:90:c2:95:7c:b6:aa:36:5e:81:78:07:db:2c:c3:cc:b2:
6e:fc:c0:f3:a0:7e:e6:d2:fe:45:ce:f8:07:55:d3:f0:4d:9a:
b7:08:4c:fe:c8:06:7a:75:d5:54:c7:d8:9b:8c:22:b8:6d:24:
92:a0:b0:0a:f7:ca:73:32:7c:04:63:e4:25:ae:95:9f:ec:2e:
d0:cf:ac:75:0b:7b:f1:2a:59:47:29:38:86:3f:e2:ba:06:ab:
2c:bd:4b:4f:b9:81:e1:57:83:08:82:eb:ec:14:f2:9e:59:c9:
76:7f:f7:40:4e:ab:ab:4f:76:a7:ef:98:22:d4:b7:76:f8:47:
d4:9b:51:ac:50:26:1e:b0:40:cc:26:76:a2:f9:42:34:11:33:
2b:40:75:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:01 2025 by rpki-client