Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/6w0gIr5GhviPqkkvs4GaFVr-9d4.roa
File: 6w0gIr5GhviPqkkvs4GaFVr-9d4.roa (raw, json)
Hash identifier: TrDNV5J9DbNo1sKUXpeavMKuduJbzcbAPxPvhZGM+HI=
Subject key identifier: EB:0D:20:22:BE:46:86:F8:8F:AA:49:2F:B3:81:9A:15:5A:FE:F5:DE
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 045B8934
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/6w0gIr5GhviPqkkvs4GaFVr-9d4.roa
Signing time: Sat 02 Jul 2022 00:35:25 +0000
ROA not before: Sat 02 Jul 2022 00:35:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.94.144.0/20 maxlen: 24
84.247.4.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
185.200.204.0/22 maxlen: 24
213.159.136.0/21 maxlen: 24
193.17.225.0/24 maxlen: 24
88.135.96.0/20 maxlen: 24
37.251.176.0/20 maxlen: 24
84.247.40.0/22 maxlen: 24
89.40.220.0/23 maxlen: 24
86.106.152.0/22 maxlen: 24
141.136.16.0/20 maxlen: 24
176.223.172.0/22 maxlen: 24
86.104.20.0/22 maxlen: 24
94.24.24.0/22 maxlen: 24
176.223.176.0/22 maxlen: 24
195.128.136.0/24 maxlen: 24
86.104.248.0/22 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73107764 (0x45b8934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jul 2 00:35:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb0d2022be4686f88faa492fb3819a155afef5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:cf:76:4e:11:93:27:96:2c:6c:f5:8e:0c:
da:21:cd:60:ab:fa:2c:b4:bc:08:e0:e9:03:a7:aa:
66:60:b5:c8:5b:03:77:53:9a:55:97:2d:e3:0e:4e:
a3:a3:cd:d1:31:fd:2e:81:08:e1:18:ae:0d:5b:e7:
8c:24:cb:88:5f:d4:c1:76:29:66:7b:65:b8:5e:db:
de:2b:6e:1f:67:43:68:26:9c:d9:6f:2d:e5:cf:9d:
d7:e1:14:0b:a7:21:d2:ba:a0:bc:55:15:e2:e1:83:
f4:d6:36:d5:73:77:ad:a4:a6:e6:41:08:9f:04:a4:
ff:eb:7b:55:ef:63:02:fa:1f:03:3e:10:c3:d5:ec:
c2:1f:28:9d:c9:6d:ff:8d:b6:d4:2e:0d:d9:d9:b5:
1c:e7:65:32:86:fc:bb:1b:ab:be:d1:ea:30:51:67:
34:0e:eb:81:a1:a3:23:e0:2f:ee:b1:ad:69:52:56:
1d:72:e1:ab:6d:01:32:c6:d1:3a:f8:57:3c:92:7a:
5d:2e:7e:df:01:8d:2e:cb:98:64:c1:56:66:7a:80:
63:cb:20:92:af:9b:d6:31:3a:55:51:34:14:e3:79:
d0:77:cb:2a:9b:61:bf:2d:0d:ee:9b:2e:a3:05:62:
f5:7c:4a:b0:7c:e0:2c:94:f5:61:91:c4:79:26:04:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0D:20:22:BE:46:86:F8:8F:AA:49:2F:B3:81:9A:15:5A:FE:F5:DE
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/6w0gIr5GhviPqkkvs4GaFVr-9d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.176.0/20
84.247.4.0/22
84.247.40.0/22
86.104.20.0/22
86.104.248.0/22
86.106.152.0/22
88.135.96.0/20
89.40.220.0/23
91.227.240.0/23
94.24.24.0/22
109.94.144.0/20
141.136.16.0/20
176.223.172.0-176.223.179.255
185.200.204.0/22
192.109.205.0/24
193.17.225.0/24
195.128.136.0/24
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:76:b1:23:9f:98:77:4e:0b:5d:35:50:07:8c:01:b3:26:c1:
39:8d:59:bf:32:07:fd:d0:c8:5c:d3:c2:c6:50:eb:b6:77:ec:
26:55:fb:16:c4:a9:ce:a5:2a:26:b5:4f:e4:25:8c:90:2b:f6:
32:de:04:f8:4c:05:1d:fa:f6:40:85:91:de:0c:9b:b5:d8:87:
a1:96:1f:1b:4a:f2:5c:3e:3f:c7:a6:9d:4c:7f:68:15:7a:8c:
84:52:62:f3:a0:54:40:14:ce:78:57:97:15:56:f5:42:fb:02:
81:01:b2:23:bc:26:d0:7a:09:cc:7e:a5:6c:60:6a:95:42:f5:
88:a4:82:e7:f9:3c:ea:28:66:28:4d:35:da:2b:43:0c:22:d2:
94:76:af:3e:ae:6e:8b:8e:1b:61:c4:54:66:4f:29:a8:c0:8a:
0d:39:c4:36:39:bb:f0:42:90:d2:13:a6:3e:6f:c3:12:93:ab:
f9:04:43:b3:77:ff:65:ce:3c:51:93:9f:a9:d9:6f:05:01:eb:
ab:77:86:ef:b1:da:db:b0:1b:6a:65:71:87:d2:3a:c9:76:31:
db:9f:4a:78:07:4d:99:a1:20:40:81:17:d0:45:0d:79:b3:5f:
a7:c3:7b:1b:bf:b2:25:cd:5b:ec:b8:83:1d:c4:db:cb:06:85:
45:50:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:53:29 2025 by rpki-client