Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa
File: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (raw, json)
Hash identifier: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=
Subject key identifier: 9B:E9:84:0B:73:10:58:42:8F:18:61:BE:95:29:1F:73:F6:24:8C:A6
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 01942444864A09DC3B42BA96C68B0D5F5923
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62371
IP address blocks: 79.135.106.0/24 maxlen: 24
79.135.107.0/24 maxlen: 24
185.70.40.0/22 maxlen: 22
185.70.40.0/24 maxlen: 24
185.70.41.0/24 maxlen: 24
185.70.42.0/24 maxlen: 24
185.70.43.0/24 maxlen: 24
2a05:2700::/29 maxlen: 29
2a05:2700::/32 maxlen: 32
2a05:2701::/32 maxlen: 32
2a05:2701:f00::/40 maxlen: 40
2a05:2701:f00::/44 maxlen: 44
2a05:2701:f10::/44 maxlen: 44
2a05:2701:f40::/44 maxlen: 44
2a05:2701:f50::/44 maxlen: 44
2a05:2701:fe00::/48 maxlen: 48
2a05:2701:fe01::/48 maxlen: 48
2a05:2701:fe02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:86:4a:09:dc:3b:42:ba:96:c6:8b:0d:5f:59:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be9840b731058428f1861be95291f73f6248ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:3a:98:97:97:00:17:6f:a0:ce:83:a0:9b:
9b:6d:ee:df:c6:43:2b:04:ae:cd:86:47:d6:be:2c:
e1:2b:39:fd:be:46:b5:4d:d5:0a:a2:1d:d7:5c:50:
11:a5:4e:4b:2c:7c:e6:ef:f0:66:bc:0b:98:94:63:
fe:b8:6d:a0:37:82:7e:bf:7f:70:10:f2:37:e3:18:
e1:8b:a9:7b:44:c2:52:00:d8:9c:70:f0:ed:8a:09:
8b:92:dc:3b:53:d5:1c:4e:75:30:8b:9f:c6:14:21:
a8:89:53:a6:30:3a:57:0c:b1:d4:3f:6e:04:63:a9:
41:aa:37:89:a8:05:88:60:db:f3:e9:26:cb:66:a0:
fe:6d:21:3c:ec:d0:0b:4e:b3:ea:f3:45:39:7b:28:
de:f7:d5:46:8a:28:9e:c3:75:8e:0f:64:c3:d5:ef:
97:38:9f:85:f0:28:19:44:82:4b:4e:4a:3a:9e:7f:
0a:e6:e0:20:ef:9d:f4:dc:0a:f2:f5:64:85:b2:c9:
21:97:82:52:b6:58:f1:f7:d3:78:1d:9e:17:3c:4e:
9f:d2:16:e6:e1:04:99:1d:54:27:2b:ed:82:2a:d1:
04:f5:3d:a9:29:68:f7:24:c9:00:87:2d:94:74:45:
d7:c6:d3:b7:a1:59:8f:01:61:4d:2f:fb:25:23:9b:
c7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E9:84:0B:73:10:58:42:8F:18:61:BE:95:29:1F:73:F6:24:8C:A6
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.106.0/23
185.70.40.0/22
IPv6:
2a05:2700::/29
Signature Algorithm: sha256WithRSAEncryption
29:95:9d:77:da:b4:e8:32:86:dc:0a:f1:d9:9a:9f:fb:e2:76:
e8:6f:3d:81:7b:30:ef:50:59:47:bc:f7:f3:5e:e1:32:90:d7:
40:be:62:fd:d0:09:af:34:1e:a6:47:cf:9d:00:cf:6f:a1:ac:
a4:e9:46:27:12:b8:36:f4:55:26:f2:fe:3a:18:72:ff:cf:e0:
bb:d5:49:cf:b2:d7:40:af:8e:29:5d:fc:dc:2e:55:bb:70:b6:
09:54:d5:cc:2e:c5:45:f2:a2:4e:08:31:81:66:55:ef:12:fe:
91:e5:05:dd:04:bd:9d:93:83:f2:be:09:67:1a:53:eb:ff:cb:
ac:1e:0b:35:2f:ee:0a:d1:f7:46:9c:ce:5a:c1:fc:e6:7e:f8:
44:c3:02:b6:76:69:0e:09:5f:2e:6f:dc:8f:7f:d0:9d:ef:17:
13:4b:d7:58:2d:75:2b:41:f4:b1:3a:86:22:a8:4e:03:2c:66:
c8:bc:5e:c7:32:80:03:36:6d:34:a4:ff:01:d4:7e:a4:4b:da:
95:cf:e6:c8:ff:e7:6d:20:f0:8a:dd:86:ff:aa:34:04:ed:c5:
91:5c:12:80:0c:e6:e5:04:49:91:cf:47:79:37:2f:13:a0:bc:
f6:11:3d:9a:55:5f:99:19:fe:8b:09:65:bb:70:6c:7c:ed:3c:
40:29:09:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:21 2025 by rpki-client