Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/geqGl2141HyeGGUfagy6MXSyewk.roa
File: geqGl2141HyeGGUfagy6MXSyewk.roa (raw, json)
Hash identifier: Gu6ie1MtKVUJAm03q96qGZdEA5STHvJ2M8ia/H8REGQ=
Subject key identifier: 81:EA:86:97:6D:78:D4:7C:9E:18:65:1F:6A:0C:BA:31:74:B2:7B:09
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 0193BA5CC691643E60B4989DEFD43688BB91
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/geqGl2141HyeGGUfagy6MXSyewk.roa
Signing time: Thu 12 Dec 2024 10:14:22 +0000
ROA not before: Thu 12 Dec 2024 10:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 31.22.12.0/22 maxlen: 24
45.89.4.0/22 maxlen: 24
51.179.192.0/18 maxlen: 24
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
62.64.144.0/20 maxlen: 24
141.195.128.0/18 maxlen: 24
185.102.148.0/22 maxlen: 24
185.147.244.0/23 maxlen: 24
188.74.64.0/19 maxlen: 24
193.17.86.0/23 maxlen: 24
193.17.176.0/23 maxlen: 24
212.132.160.0/19 maxlen: 24
217.142.64.0/18 maxlen: 24
217.168.248.0/21 maxlen: 24
2a04:c880::/32 maxlen: 48
2a05:87c0::/29 maxlen: 48
2a0a:5580::/29 maxlen: 48
2a0f:9d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:5c:c6:91:64:3e:60:b4:98:9d:ef:d4:36:88:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Dec 12 10:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81ea86976d78d47c9e18651f6a0cba3174b27b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:86:3f:7d:4e:66:6b:d9:dd:01:f6:4b:89:
3b:f8:27:de:17:1b:60:3f:d5:20:18:b6:5b:6b:58:
5f:b0:dd:46:18:e3:34:e9:94:87:1e:d5:36:96:bb:
85:2a:f3:8e:1c:6b:42:27:8e:83:32:b2:fa:1b:7f:
d0:53:4f:b7:11:f4:ac:37:5a:ca:38:6c:80:be:71:
e7:17:58:3a:0c:0e:08:e9:f9:8d:c3:c6:e5:0b:6c:
5b:a4:57:ff:5c:a6:96:95:b9:84:98:af:b9:d4:60:
1c:27:f1:ee:8c:df:ff:bd:6b:d9:10:37:ba:4e:c5:
29:77:6d:bd:3c:83:31:db:da:bd:90:23:f6:74:73:
7e:4e:9c:55:47:cb:8f:11:ef:0a:9d:67:b9:76:f9:
12:88:6e:f7:93:1f:40:e3:24:20:dd:2e:89:2a:e8:
c5:d7:08:cb:0a:28:65:a0:e0:bf:e7:e1:b3:e0:1b:
63:dc:b7:70:b2:14:49:0d:0b:c3:3f:9d:a7:e3:82:
0b:6c:75:75:37:9f:97:c5:fe:ac:e2:cd:fa:32:82:
29:76:c6:9c:e4:40:72:34:4b:63:c3:e6:57:1c:15:
c7:e5:ef:03:7e:e1:08:76:09:b3:19:34:f5:2f:fb:
92:5c:93:67:06:a0:3f:28:be:d9:5f:7f:be:ac:49:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:86:97:6D:78:D4:7C:9E:18:65:1F:6A:0C:BA:31:74:B2:7B:09
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/geqGl2141HyeGGUfagy6MXSyewk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.12.0/22
45.89.4.0/22
51.179.192.0/18
62.64.128.0-62.64.139.255
62.64.144.0/20
141.195.128.0/18
185.102.148.0/22
185.147.244.0/23
188.74.64.0/19
193.17.86.0/23
193.17.176.0/23
212.132.160.0/19
217.142.64.0/18
217.168.248.0/21
IPv6:
2a04:c880::/32
2a05:87c0::/29
2a0a:5580::/29
2a0f:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
61:e4:40:13:2f:15:e9:89:96:c0:6c:ec:cf:f1:90:bc:92:cf:
84:ad:d8:9a:6c:15:9a:48:d8:3f:73:88:f0:0c:cf:a9:ab:c8:
d3:e0:62:ed:57:b9:19:5b:1c:e2:87:f9:24:5e:63:ef:28:b3:
28:16:24:84:8d:a2:d9:97:f7:4f:2e:10:68:d1:b3:87:73:7a:
01:76:21:2d:38:86:d2:6f:68:67:f1:83:db:5c:b8:e7:51:2d:
5b:fa:9d:95:d0:7d:47:eb:35:8f:26:97:d8:3b:22:b7:56:ea:
1f:e1:0b:6e:4e:fe:14:08:9d:f9:ba:76:47:76:26:b9:fa:f0:
bc:43:18:b0:02:c0:60:b7:f5:6e:d3:5e:3d:e1:d6:6e:8e:11:
9f:e4:3b:84:ba:c2:66:95:1b:a8:39:ee:f3:2d:e8:81:b5:90:
f9:7a:ed:26:9d:55:ab:a7:27:52:b3:3a:27:f0:84:b4:4b:30:
00:b1:d2:78:9f:cc:4e:64:70:90:da:cc:5d:58:74:af:c6:76:
8d:0b:6b:02:59:63:e1:5a:b0:2f:0f:8b:f1:b5:73:e5:e8:f9:
f7:1f:87:9f:fc:f2:6e:74:33:ec:9f:85:99:46:2d:dd:55:c0:
1f:31:67:aa:71:fb:cf:db:72:60:e3:a9:7e:34:dd:f2:ab:ce:
be:e2:17:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:39 2025 by rpki-client