Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/_6ri1KyGrKWa-tqTjRsqpyUSZCk.roa
File: _6ri1KyGrKWa-tqTjRsqpyUSZCk.roa (raw, json)
Hash identifier: isLYHAJU5J3ZPuL1/UUePiNJm0MmjXaPrbTm1cYHTyQ=
Subject key identifier: FF:AA:E2:D4:AC:86:AC:A5:9A:FA:DA:93:8D:1B:2A:A7:25:12:64:29
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E0ED36806FA5ED884798A6E710354
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/_6ri1KyGrKWa-tqTjRsqpyUSZCk.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49074
IP address blocks: 85.255.112.0/22 maxlen: 22
91.228.140.0/22 maxlen: 22
91.234.56.0/22 maxlen: 22
151.248.95.0/24 maxlen: 24
178.212.207.0/24 maxlen: 24
194.40.204.0/22 maxlen: 22
2a04:2041::/32 maxlen: 32
2a04:2043::/32 maxlen: 32
2a04:2045::/32 maxlen: 32
2a04:2047::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0e:d3:68:06:fa:5e:d8:84:79:8a:6e:71:03:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffaae2d4ac86aca59afada938d1b2aa725126429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:7d:14:0c:79:d1:68:48:7c:8d:b1:53:41:
cd:92:e9:aa:b1:f5:17:0c:91:95:96:12:88:74:18:
f8:af:e9:63:26:89:f9:78:fb:c5:f5:b8:db:86:20:
5c:54:7c:ff:14:f3:54:f4:45:1e:e2:41:46:0c:c5:
4e:bf:d5:33:04:d3:28:5d:5e:7c:f3:bc:98:54:6d:
a9:72:5a:5b:9d:57:28:85:79:91:8e:5c:02:a3:13:
55:a4:cf:75:89:37:17:16:07:4c:e0:18:90:88:23:
e3:8f:29:d7:3f:c2:8a:b0:8a:e5:8b:40:7d:22:2b:
21:81:0a:b1:94:72:78:fa:c0:e1:77:44:95:28:1d:
ed:bd:0a:db:33:cd:1a:65:d5:e7:a3:9c:cd:38:0e:
73:37:0f:09:43:59:2d:7e:b1:4b:eb:24:e1:ff:26:
ef:be:f5:b9:29:0f:f1:b7:97:83:92:55:b4:b3:9b:
48:8f:e6:8c:b8:80:88:2f:d1:b5:a5:47:6d:3f:6b:
2b:21:56:b9:20:1e:d8:46:17:3a:65:49:2d:d1:65:
88:b8:e5:e3:ea:d8:54:e8:48:98:0c:68:6f:97:69:
17:e0:dc:da:92:74:42:7c:7b:4c:15:d5:14:07:5c:
7e:58:00:40:f1:50:3a:97:0a:59:73:1a:24:3a:e0:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:E2:D4:AC:86:AC:A5:9A:FA:DA:93:8D:1B:2A:A7:25:12:64:29
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/_6ri1KyGrKWa-tqTjRsqpyUSZCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.112.0/22
91.228.140.0/22
91.234.56.0/22
151.248.95.0/24
178.212.207.0/24
194.40.204.0/22
IPv6:
2a04:2041::/32
2a04:2043::/32
2a04:2045::/32
2a04:2047::/32
Signature Algorithm: sha256WithRSAEncryption
02:db:2b:5d:d2:a3:28:d2:06:c8:87:a6:84:1d:4d:67:bd:d4:
38:ce:18:be:f0:8a:0e:13:d4:ea:03:09:95:16:48:10:14:d2:
d2:ca:99:a3:a1:ee:c1:d7:ba:7c:c6:c5:e4:22:fb:ab:b5:43:
75:24:14:33:d9:30:3a:a3:6a:a9:f7:b8:95:fb:32:e5:4c:5a:
fa:db:8c:4c:9a:03:eb:1f:1e:43:55:fb:f0:bc:b5:e2:57:93:
6f:14:74:cf:e6:bf:6c:50:d6:54:4e:16:f5:e5:76:34:37:93:
e7:61:84:3b:46:c1:ab:70:7a:46:dd:75:2e:18:bd:37:f3:08:
04:5a:8b:89:95:b7:72:3b:7e:ef:6c:85:81:ce:63:ab:e1:ba:
cb:96:99:e3:67:e0:31:f3:00:bd:7c:9e:57:87:71:08:8a:72:
c4:51:f9:2d:94:ad:f7:64:2e:94:c3:1c:84:1a:ec:89:90:b2:
22:48:4a:c9:f4:b7:2f:74:34:dd:d9:ba:60:80:e7:78:05:b4:
0a:61:71:b1:d7:2c:b5:2b:3a:49:59:88:4f:48:a3:c3:df:09:
41:d2:61:e4:c0:9f:f2:dd:76:b0:60:d5:04:f8:56:d0:e7:f6:
26:2f:54:3b:19:c2:95:60:75:01:75:90:91:0e:42:1b:12:90:
24:13:7e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:38:45 2025 by rpki-client