Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/aG52Y6nNy1WTuClZNR4W50-wZlc.roa
File: aG52Y6nNy1WTuClZNR4W50-wZlc.roa (raw, json)
Hash identifier: 4Hz+lKV4MwWFE34J22GvG985+QyeoEsaBTfbkY0Bang=
Subject key identifier: 68:6E:76:63:A9:CD:CB:55:93:B8:29:59:35:1E:16:E7:4F:B0:66:57
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 0185720C8418E84BA310164B323035A77DC7
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/aG52Y6nNy1WTuClZNR4W50-wZlc.roa
Signing time: Mon 02 Jan 2023 10:35:00 +0000
ROA not before: Mon 02 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 185.162.144.0/24 maxlen: 24
185.162.145.0/24 maxlen: 24
185.162.146.0/24 maxlen: 24
185.162.147.0/24 maxlen: 24
185.171.24.0/24 maxlen: 24
185.171.25.0/24 maxlen: 24
185.171.26.0/24 maxlen: 24
185.171.27.0/24 maxlen: 24
185.247.136.0/24 maxlen: 24
185.247.137.0/24 maxlen: 24
185.247.138.0/24 maxlen: 24
185.247.139.0/24 maxlen: 24
45.136.104.0/24 maxlen: 24
45.136.105.0/24 maxlen: 24
185.26.144.0/24 maxlen: 24
185.26.145.0/24 maxlen: 24
185.26.146.0/24 maxlen: 24
185.26.147.0/24 maxlen: 24
185.126.177.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.126.176.0/24 maxlen: 24
45.136.106.0/24 maxlen: 24
45.136.107.0/24 maxlen: 24
185.153.228.0/24 maxlen: 24
185.153.229.0/24 maxlen: 24
185.153.230.0/24 maxlen: 24
185.153.231.0/24 maxlen: 24
2a0d:c480::/29 maxlen: 29
2a04:3880::/30 maxlen: 30
2a0d:a2c0::/29 maxlen: 29
2a06:c380::/29 maxlen: 29
2a0b:6000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:84:18:e8:4b:a3:10:16:4b:32:30:35:a7:7d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Jan 2 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=686e7663a9cdcb5593b82959351e16e74fb06657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:c4:43:aa:3a:38:74:24:11:4d:1c:82:c1:
51:23:45:e5:87:c9:e0:78:e9:64:cc:f7:b1:3d:11:
d5:04:cb:a7:d0:e3:bf:87:3a:d0:8c:86:11:f0:e5:
62:ba:bd:c3:9c:83:ff:73:b6:07:15:70:0e:ee:64:
9c:ba:e8:8e:25:63:a5:4a:be:7c:fd:b8:6d:a3:2f:
2b:fb:3e:97:d3:7e:8e:cc:59:df:b9:76:09:8e:a1:
5e:a8:0b:49:43:f2:a9:97:2e:29:79:28:7f:5c:4c:
60:57:9d:85:f3:cf:d1:2f:ed:eb:d0:7c:fd:42:d7:
85:7e:3f:72:7f:37:5b:0d:61:09:b0:91:0d:04:9e:
72:e5:1c:10:c5:78:47:ba:af:3f:e0:42:06:2e:37:
6a:9b:63:70:05:f9:0c:f3:8f:3a:f5:25:39:56:b3:
20:6d:cf:cd:22:fe:1e:56:75:f3:24:94:c7:b4:30:
98:26:4e:0a:3c:e7:48:e8:42:ff:40:94:e4:ff:ae:
54:43:9e:04:35:f3:7e:24:b3:96:6e:81:f1:e3:6b:
4c:52:5f:8c:11:22:a8:73:d8:12:55:b8:5b:72:47:
32:5c:c5:b9:4c:1b:b0:fd:83:25:05:40:c8:28:b3:
61:5a:d3:b2:ff:dd:01:47:cd:e3:b5:8d:0b:3e:3c:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6E:76:63:A9:CD:CB:55:93:B8:29:59:35:1E:16:E7:4F:B0:66:57
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/aG52Y6nNy1WTuClZNR4W50-wZlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.104.0/22
185.26.144.0/22
185.126.176.0/22
185.153.228.0/22
185.162.144.0/22
185.171.24.0/22
185.247.136.0/22
IPv6:
2a04:3880::/30
2a06:c380::/29
2a0b:6000::/29
2a0d:a2c0::/29
2a0d:c480::/29
Signature Algorithm: sha256WithRSAEncryption
5f:b4:e8:4d:ae:e2:11:57:cb:10:92:d0:d3:ff:68:01:e3:26:
b4:65:29:fb:16:16:f6:95:1d:e8:fb:ed:23:c3:94:46:30:09:
27:04:ba:b2:fb:14:6d:08:52:97:7f:2a:67:cf:20:53:fe:73:
35:9d:51:44:ca:1b:8e:45:d9:3f:75:93:47:00:ce:ee:fc:66:
1c:c0:5b:f6:b4:a0:25:b3:eb:90:28:7e:93:09:e5:bc:bb:ab:
37:7a:c4:f9:20:ec:dd:83:b5:df:e8:57:40:78:07:d5:cf:e7:
5d:3c:bc:1c:3c:56:47:af:b0:39:44:26:cf:96:24:07:ab:cc:
f4:50:9a:23:aa:fe:29:34:c1:0c:a0:fa:6e:cc:7a:b6:58:af:
13:72:58:be:38:f8:f3:87:5d:0a:69:17:18:8a:3d:31:da:f9:
24:d4:a2:2b:26:d6:8b:b0:69:54:1b:20:9c:dc:11:b8:d9:64:
dd:40:47:d0:b1:19:65:85:49:6e:1b:ab:3e:31:f2:f5:d0:f8:
6d:5c:1b:32:b6:62:d0:a6:4b:dc:84:18:91:71:97:aa:77:76:
86:04:88:10:7d:4c:61:e8:50:d5:08:aa:81:09:be:42:b2:27:
3d:6f:30:b1:54:84:40:99:4c:54:59:f5:9d:9c:38:dd:92:4a:
13:e8:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:01 2025 by rpki-client