Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/22_qyxA7vRhFDLCdu_1HZ19G2Vg.roa
File: 22_qyxA7vRhFDLCdu_1HZ19G2Vg.roa (raw, json)
Hash identifier: Q4AOFHpLVaOSTfkeHbQtH7lf6f1t3gvl21tY2kZ/YK4=
Subject key identifier: DB:6F:EA:CB:10:3B:BD:18:45:0C:B0:9D:BB:FD:47:67:5F:46:D9:58
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 08233287
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/22_qyxA7vRhFDLCdu_1HZ19G2Vg.roa
Signing time: Sat 01 Jan 2022 08:54:49 +0000
ROA not before: Sat 01 Jan 2022 08:54:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51248
IP address blocks: 185.8.56.0/22 maxlen: 24
176.74.216.0/21 maxlen: 24
91.241.168.0/21 maxlen: 24
158.255.32.0/21 maxlen: 24
188.124.56.0/21 maxlen: 24
158.255.39.0/24 maxlen: 24
193.161.84.0/22 maxlen: 24
5.43.224.0/21 maxlen: 24
2a03:1840:1::/48 maxlen: 64
2a03:1840:2::/48 maxlen: 64
2a03:1840::/48 maxlen: 64
2a03:1840:3::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136524423 (0x8233287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Jan 1 08:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db6feacb103bbd18450cb09dbbfd47675f46d958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:95:f2:00:1a:96:02:4c:84:42:e4:a2:7a:
f2:49:23:1d:79:14:62:be:d5:29:a3:5d:ef:04:49:
8c:eb:10:8e:55:d0:8e:d4:40:b6:f4:45:bb:01:fa:
d5:80:ca:d9:d1:c6:52:9e:cd:b4:7e:23:5e:7f:b0:
d6:cd:07:79:5b:76:11:78:ed:a3:fb:36:04:9f:f6:
57:6f:f9:31:76:ff:a1:38:7e:5f:e4:65:4f:b3:1f:
21:46:8d:ad:c8:5b:e8:71:c0:47:26:53:df:d0:57:
16:66:59:89:79:82:82:5d:d6:e6:a4:df:c8:9f:e2:
f3:80:56:6e:a2:7f:be:fd:d9:da:37:51:16:30:8c:
5f:d1:54:97:6a:94:0f:b8:51:17:e0:ab:00:e4:e8:
d3:05:ad:d9:be:71:6b:2b:33:91:ce:58:18:52:76:
08:01:1f:3e:43:f8:2b:fb:4c:65:2c:3d:b5:2a:5f:
c9:73:76:70:c9:9b:63:ed:3c:4c:3d:ae:ed:f1:08:
5c:a5:b5:bd:7d:63:8c:57:21:55:11:e1:5e:1d:ca:
98:e3:ee:26:ed:cd:d4:d0:93:5d:9a:00:ed:00:df:
51:ef:ef:64:7d:97:cf:bc:c6:e7:b9:d6:86:7e:fe:
e0:08:53:11:95:8d:0f:6b:bf:7f:09:26:af:60:b0:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6F:EA:CB:10:3B:BD:18:45:0C:B0:9D:BB:FD:47:67:5F:46:D9:58
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/22_qyxA7vRhFDLCdu_1HZ19G2Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.224.0/21
91.241.168.0/21
158.255.32.0/21
176.74.216.0/21
185.8.56.0/22
188.124.56.0/21
193.161.84.0/22
IPv6:
2a03:1840::/46
Signature Algorithm: sha256WithRSAEncryption
a5:75:63:ad:cc:6c:4b:65:9c:3b:da:55:85:1c:f9:6b:b9:1d:
18:eb:4b:e6:9c:99:ec:01:63:26:6d:43:60:6f:db:7b:52:21:
25:a4:64:ba:d5:d7:d5:ce:80:11:7d:4b:53:6e:90:c8:bf:f4:
4a:65:f6:8b:23:f6:85:d3:ec:5f:2f:e0:35:29:7a:1a:3c:0a:
33:57:52:31:6b:a7:32:56:e8:b2:0e:1d:cc:df:49:53:94:ad:
72:4f:62:f2:18:5c:bf:d0:b3:7b:fc:48:16:84:39:3b:20:83:
63:e0:b6:2b:4f:5a:2a:df:18:ca:3d:70:3c:04:c4:cf:65:34:
23:8b:91:56:2d:97:8f:dc:22:72:1b:05:73:fd:94:13:e5:d6:
a1:04:a8:2b:45:72:9e:e2:26:24:2a:50:a5:4c:12:33:fe:3d:
84:eb:78:00:20:1d:c2:45:dc:ed:72:ef:aa:a6:83:55:7a:b8:
60:9d:e2:8a:7e:6b:2a:56:9b:22:a8:91:32:00:52:b9:19:d3:
cf:df:e8:64:5c:f9:f3:e5:ef:3f:2f:45:7e:4d:97:08:eb:a7:
71:7f:c7:0e:81:da:bb:dd:8b:38:59:8a:69:52:00:06:ae:9b:
b8:be:b2:84:11:45:aa:b3:a9:58:5f:47:99:af:4c:c3:aa:99:
f4:72:92:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:02 2025 by rpki-client