Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AiO1HRTfUe2vOiQrcn4eIpCAyeg.roa
File: AiO1HRTfUe2vOiQrcn4eIpCAyeg.roa (raw, json)
Hash identifier: l484VXhb55rIiF/y4SkOcQOfu2WyfAjYkWmS1k5CH1c=
Subject key identifier: 02:23:B5:1D:14:DF:51:ED:AF:3A:24:2B:72:7E:1E:22:90:80:C9:E8
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA5ABD37D888D0A1B0800A3CA65333
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AiO1HRTfUe2vOiQrcn4eIpCAyeg.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208555
IP address blocks: 62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5a:bd:37:d8:88:d0:a1:b0:80:0a:3c:a6:53:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0223b51d14df51edaf3a242b727e1e229080c9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:05:cf:85:73:98:e2:93:b6:3b:6b:7f:3e:
44:96:4f:e3:0e:3d:48:db:ed:97:ee:16:de:02:e4:
ac:28:64:7f:9f:df:12:97:a7:c5:ad:77:dc:e1:43:
30:bf:7c:9a:fa:3b:28:13:97:9c:b8:c0:fc:88:03:
3e:41:57:8d:17:e8:61:61:ad:db:d4:01:34:ca:10:
27:df:38:22:1b:54:35:50:a2:6e:20:ca:a4:e3:08:
43:4a:61:e8:75:5d:dc:e9:f0:1c:0e:c2:81:0c:cd:
ee:0b:76:cf:cd:45:d5:ab:e2:2e:7a:62:f5:fc:43:
37:7f:12:b9:a7:33:c7:3a:aa:5d:81:18:b8:08:40:
f3:65:9a:0b:38:fe:9e:9f:82:fc:53:81:67:10:c5:
b8:5d:87:7c:6f:ea:d5:ef:dd:2a:77:2c:f4:65:25:
61:67:5c:3a:53:57:f4:3d:9f:c3:19:f6:d8:5a:e2:
59:07:db:47:4c:c2:e6:f0:58:9d:b2:d8:30:f5:b3:
ff:a6:64:22:e6:95:79:b3:02:ae:d9:75:f8:75:c7:
7a:d7:61:53:34:b7:8d:e6:9e:e6:07:24:86:d9:8b:
9c:62:f4:f0:6e:11:77:45:f4:e7:f2:31:f2:2b:af:
07:a1:15:6f:e0:99:68:55:45:35:2e:cc:4d:f6:cb:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:23:B5:1D:14:DF:51:ED:AF:3A:24:2B:72:7E:1E:22:90:80:C9:E8
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AiO1HRTfUe2vOiQrcn4eIpCAyeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.24.0/22
81.12.30.0/23
87.107.110.0/23
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:96:f2:a4:2a:c2:c6:e8:0b:43:fa:e5:66:a1:00:c3:24:25:
b3:6a:34:71:27:5f:e6:83:aa:44:9d:74:c2:ba:d6:94:48:ab:
32:61:4c:9d:ae:72:b3:c0:38:b3:bc:be:da:c9:9d:fc:92:d0:
a3:83:42:dc:a4:71:57:2e:7d:f2:da:3a:17:db:88:a8:06:79:
5f:2b:40:f4:f3:b6:19:8f:19:12:24:c4:9b:f2:23:59:9c:10:
51:33:da:17:36:97:0b:39:1d:4c:03:db:26:2a:06:00:e0:d9:
23:90:25:fd:0c:0e:73:f5:99:07:4e:71:50:ca:25:a8:40:66:
3b:50:53:b8:5b:86:71:22:8e:cc:da:18:05:52:44:39:a0:94:
7e:c0:83:9a:c0:e6:fc:7f:3b:78:28:8c:ff:7d:3c:1b:0c:32:
2d:42:04:c5:18:6a:26:fd:aa:03:52:5e:3f:38:e6:c7:1e:b7:
2e:23:50:03:a4:18:9c:e7:97:61:ab:bb:a8:e6:b4:1a:7f:68:
a0:c0:64:e2:70:bc:f9:13:36:29:b9:ed:78:b6:7e:50:0b:da:
ec:65:c2:fa:44:1c:9c:9b:55:22:4d:98:87:9d:0d:78:6c:0d:
02:25:0e:d7:46:bd:71:3f:38:22:39:d9:c9:27:2a:c8:3d:98:
c9:ad:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:33:46 2025 by rpki-client