Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/lWJ3hYOjry-sWXFIH3YDnApsrG4.roa
File: lWJ3hYOjry-sWXFIH3YDnApsrG4.roa (raw, json)
Hash identifier: fNKJ2GQjqn/XQtPMxjPfQVbHecGri3iHnvEs9SlHZhg=
Subject key identifier: 95:62:77:85:83:A3:AF:2F:AC:59:71:48:1F:76:03:9C:0A:6C:AC:6E
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0195CC58D9E7D48B0FB7B9648E704B588C0D
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/lWJ3hYOjry-sWXFIH3YDnApsrG4.roa
Signing time: Tue 25 Mar 2025 08:08:49 +0000
ROA not before: Tue 25 Mar 2025 08:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/21 maxlen: 24
62.220.120.0/22 maxlen: 22
62.220.124.0/23 maxlen: 23
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.0.0/21 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.40.0/24 maxlen: 24
87.107.41.0/24 maxlen: 24
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 22
87.107.96.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.160.0/22 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.173.0/24 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:58:d9:e7:d4:8b:0f:b7:b9:64:8e:70:4b:58:8c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Mar 25 08:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9562778583a3af2fac5971481f76039c0a6cac6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:c3:8f:4b:b4:9b:6c:22:8e:2f:bf:3e:c3:
35:a4:39:60:08:b2:2e:b9:1b:d9:5d:34:40:0a:8c:
6f:9a:bc:28:19:28:ae:3f:ea:4e:e3:81:29:84:ed:
72:ef:d5:ea:42:a5:79:33:f6:0f:6f:aa:e6:1e:56:
02:9c:7c:fc:0d:0c:49:71:2d:51:9e:23:f8:2f:82:
5a:3d:85:77:8e:8b:d8:28:04:7e:52:8f:60:2d:50:
59:e6:d2:0a:39:73:f2:90:be:e5:91:e5:09:7c:0b:
79:62:28:7c:61:a5:02:02:b1:a1:48:1c:44:73:e8:
be:1f:5c:d7:30:25:f8:50:7d:ee:55:76:8d:b4:8f:
8f:cc:ee:2f:a6:88:f1:de:16:de:74:f3:b0:1b:4f:
45:7c:d6:7a:11:44:b1:04:5a:3e:05:8c:0e:a9:41:
8a:0e:e2:38:c9:54:ef:8f:4f:b3:db:15:47:04:15:
a6:b0:15:ac:fb:e2:c9:63:0e:af:ba:95:62:21:ce:
20:7d:72:36:8b:0d:89:33:cf:f8:c9:59:bc:e5:5c:
56:4b:37:be:70:65:30:3b:b0:e9:33:8a:57:e4:89:
3e:fd:f0:20:08:84:d0:c5:07:6c:2a:0c:9f:69:d0:
de:43:82:47:c5:4f:40:19:fe:8c:e5:b3:59:7a:c6:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:77:85:83:A3:AF:2F:AC:59:71:48:1F:76:03:9C:0A:6C:AC:6E
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/lWJ3hYOjry-sWXFIH3YDnApsrG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0/20
62.220.120.0-62.220.125.255
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.0.0/21
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.160.0/22
87.107.168.0/22
87.107.173.0/24
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
90:98:52:6c:02:a3:d8:f5:6f:47:ab:4a:98:a1:68:03:e3:b1:
f8:f2:7c:19:4e:62:66:7f:ce:9c:27:73:f6:c2:e7:f6:5d:04:
85:65:c7:ca:6e:c3:be:28:60:9b:c6:f4:e3:f1:cb:82:48:eb:
72:1b:86:8b:29:5b:88:a3:9f:17:8f:a5:ac:b5:64:6b:53:62:
b7:b7:6a:06:a5:93:c6:49:2b:0d:75:6f:c1:2b:96:1d:21:a1:
73:86:34:99:01:9a:f7:23:16:d4:6d:52:36:b8:5a:9f:35:ce:
71:1e:55:83:51:aa:ac:48:de:2e:42:38:10:c1:09:09:08:e8:
53:93:7f:e7:96:3d:06:58:78:6d:63:e4:b0:5c:e0:4b:70:fc:
a8:68:8c:f0:b1:e2:77:e4:b6:60:0b:7b:e5:6d:0c:40:e3:3a:
1e:53:60:7b:43:e4:33:0c:c1:8b:f7:bb:73:e3:5d:9e:8c:9f:
85:95:f6:1c:83:7b:34:88:50:00:b4:84:fb:30:b3:96:5e:ea:
1b:c4:a8:02:44:33:ca:14:d7:6f:d7:58:d5:ac:7f:6f:cb:2a:
fc:5f:e3:8c:3d:17:17:46:9a:be:43:24:49:04:65:48:14:40:
f2:dc:ea:95:f6:c5:31:f6:59:a0:43:64:a5:6d:5d:9e:66:8d:
f5:4a:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:36:00 2025 by rpki-client