Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/O5iaaYeqLCJ4GfN6m0BiKDaQO40.roa
File: O5iaaYeqLCJ4GfN6m0BiKDaQO40.roa (raw, json)
Hash identifier: 8JLKQSWbsxt8H9yQtaCnvWD22lbA7gfT/I/wkjN/HKQ=
Subject key identifier: 3B:98:9A:69:87:AA:2C:22:78:19:F3:7A:9B:40:62:28:36:90:3B:8D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194D6198E5D05DAA912CD97DB498486B457
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/O5iaaYeqLCJ4GfN6m0BiKDaQO40.roa
Signing time: Wed 05 Feb 2025 12:33:06 +0000
ROA not before: Wed 05 Feb 2025 12:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 217.179.7.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:19:8e:5d:05:da:a9:12:cd:97:db:49:84:86:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 5 12:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b989a6987aa2c227819f37a9b40622836903b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:91:b8:a0:30:8d:a7:a9:9a:69:22:f0:25:
ee:68:ad:6b:c1:00:a1:65:1d:82:1b:82:8b:e5:a3:
19:a2:b1:cb:19:bd:93:20:be:8f:2f:5c:b6:2d:6f:
7f:29:7c:cc:80:6b:94:af:e0:6d:b4:2b:9e:4e:1b:
9d:85:1b:e9:31:8b:c6:4d:a2:73:5e:52:ec:0c:ff:
fe:1b:12:6b:1a:3f:08:5a:b9:2b:dc:5c:65:e8:65:
7c:a7:d3:b4:c6:b9:03:21:6d:4b:28:5c:83:b2:c9:
19:4d:1a:3d:b8:30:14:ac:4e:fc:25:73:ea:f9:01:
71:13:8e:c4:df:a8:75:70:5a:27:ca:3b:6a:fa:a6:
f3:44:ce:81:a1:30:b7:dd:60:c8:93:d1:00:85:36:
4c:1c:b6:1d:44:c7:24:c3:75:b9:54:ef:97:54:b9:
d0:f4:2c:8d:81:95:ae:fd:2a:37:50:4b:52:c8:fb:
b5:93:03:33:c5:b1:0d:41:42:0e:27:0e:1e:fb:09:
3e:47:af:2a:71:d2:7e:22:aa:f6:e1:de:72:0f:99:
80:ab:80:e7:34:22:a6:0b:c7:23:07:84:50:7a:20:
a4:36:56:b1:56:28:4b:95:ba:59:bc:23:5f:f5:65:
da:04:35:12:ff:ff:d5:66:d6:83:2e:46:46:50:b4:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:9A:69:87:AA:2C:22:78:19:F3:7A:9B:40:62:28:36:90:3B:8D
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/O5iaaYeqLCJ4GfN6m0BiKDaQO40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.7.0/24
217.180.13.0-217.180.14.255
217.180.20.0/24
217.180.38.0/24
217.180.45.0/24
217.180.59.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e4:bf:32:46:46:8d:4b:3f:92:cb:d3:47:fe:b6:60:c4:72:
ca:cd:01:dc:58:b6:88:37:52:c9:60:dd:6b:3f:c7:0e:80:57:
40:2b:e7:80:e0:bd:b3:a6:45:d2:91:c1:e2:cd:1d:3c:2b:ca:
ba:ac:04:04:a6:06:24:95:fa:06:31:64:17:1d:86:6f:1e:7d:
e1:21:e8:dd:a6:a0:41:05:6d:5f:b5:fd:9f:42:1f:a9:76:b8:
10:b4:f2:82:b7:36:91:8d:cf:cb:4c:5a:5f:5f:05:55:99:f5:
c3:5b:78:7f:33:c5:42:24:6b:5f:15:f1:b7:7f:0b:60:6f:20:
5b:41:81:7d:cf:cf:83:64:32:69:74:00:07:c4:82:c1:68:d3:
6c:7e:35:42:0c:0a:6b:65:fc:1d:38:2e:7d:43:4b:b5:b1:ae:
3a:ad:09:4e:72:19:2d:3d:c3:02:b1:e0:70:86:c0:d1:a0:bf:
a0:19:86:ae:69:9a:12:ae:66:97:88:6f:34:dd:32:67:da:f7:
ed:08:66:d1:d1:14:44:00:e1:73:24:ca:d8:7d:b7:1b:f6:df:
f2:b0:bc:c3:5b:04:1d:77:e6:67:04:0d:14:ae:46:a0:5e:77:
85:73:e2:4b:bc:54:ca:0f:05:35:a0:d0:9a:76:76:0d:75:9c:
1a:e0:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:28 2025 by rpki-client