Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/1jdZ1e38v3sfQPGtPR2i-syG8Lk.roa
File: 1jdZ1e38v3sfQPGtPR2i-syG8Lk.roa (raw, json)
Hash identifier: /DqwD9MGqICub86i+WvdMqQWX917N2Enfb0n91B4dLk=
Subject key identifier: D6:37:59:D5:ED:FC:BF:7B:1F:40:F1:AD:3D:1D:A2:FA:CC:86:F0:B9
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 018FC3C42455C70A2AD9AE63736FE6C4A496
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/1jdZ1e38v3sfQPGtPR2i-syG8Lk.roa
Signing time: Wed 29 May 2024 09:52:42 +0000
ROA not before: Wed 29 May 2024 09:52:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43915
IP address blocks: 45.66.36.0/22 maxlen: 22
62.169.148.0/23 maxlen: 23
79.135.122.0/23 maxlen: 24
87.117.64.0/22 maxlen: 22
87.117.68.0/23 maxlen: 23
91.239.57.0/24 maxlen: 24
94.154.184.0/22 maxlen: 24
109.224.224.0/22 maxlen: 24
109.224.224.0/23 maxlen: 23
109.224.226.0/23 maxlen: 24
109.224.234.0/23 maxlen: 24
109.224.236.0/22 maxlen: 22
109.224.240.0/23 maxlen: 24
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
144.178.252.0/23 maxlen: 23
147.189.156.0/22 maxlen: 24
147.189.214.0/24 maxlen: 24
176.116.116.0/22 maxlen: 22
178.248.128.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
185.147.184.0/22 maxlen: 22
185.161.4.0/22 maxlen: 22
185.231.136.0/21 maxlen: 21
193.35.146.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
194.146.160.0/22 maxlen: 24
195.184.250.0/23 maxlen: 23
195.206.172.0/22 maxlen: 24
212.59.72.0/21 maxlen: 24
212.108.90.0/23 maxlen: 23
213.225.224.0/22 maxlen: 24
217.14.184.0/21 maxlen: 21
217.20.244.0/22 maxlen: 24
2a07:5940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:c4:24:55:c7:0a:2a:d9:ae:63:73:6f:e6:c4:a4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: May 29 09:52:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d63759d5edfcbf7b1f40f1ad3d1da2facc86f0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:6c:f6:2a:82:82:f2:59:02:3c:2b:80:8d:
dd:a3:e2:b2:a8:a9:0b:52:19:d2:92:ab:03:91:40:
32:9d:c4:29:df:6f:26:55:42:6a:6b:b8:28:c7:48:
a9:e4:14:0b:c5:67:36:ec:66:57:74:0c:2c:0e:da:
64:df:ca:2d:15:26:59:9b:c4:cb:d7:a6:09:b3:f7:
6c:cc:ba:0d:bc:26:4b:b6:b4:75:86:c9:22:09:55:
c1:5b:5b:d3:a5:c0:c8:43:bc:e4:3d:83:25:61:33:
df:ad:48:16:5b:88:50:7b:a8:34:35:e7:74:6e:ea:
2c:fd:47:b9:6b:5d:56:3c:13:24:54:dc:d5:45:10:
79:56:e5:e5:a4:aa:61:71:cd:6a:f8:ef:8a:f1:16:
70:9f:38:93:c3:6c:59:cd:91:8a:9d:22:82:5f:74:
40:31:76:6b:48:65:6a:2f:ba:1e:10:38:be:bb:79:
05:07:2d:31:c5:34:53:35:ca:66:db:31:da:57:5b:
20:1f:1b:8e:3d:99:68:31:dd:9f:7f:b4:09:c8:4f:
7b:fa:b8:ed:82:4a:f3:d5:5a:17:a9:a7:65:d7:4f:
9c:ab:6f:bc:aa:5b:86:44:21:b5:d6:0b:c6:d6:f0:
6d:23:a7:fb:98:a0:bc:d6:f4:82:08:43:2c:7e:f5:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:59:D5:ED:FC:BF:7B:1F:40:F1:AD:3D:1D:A2:FA:CC:86:F0:B9
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/1jdZ1e38v3sfQPGtPR2i-syG8Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.36.0/22
62.169.148.0/23
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.224.0/22
109.224.234.0-109.224.241.255
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.184.250.0/23
195.206.172.0/22
212.59.72.0/21
212.108.90.0/23
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
18:b1:4a:19:53:cd:88:5f:ab:8f:5d:4e:8f:69:18:86:e1:e3:
aa:7e:c4:18:e2:fc:ac:3a:6f:1c:44:d6:88:ea:f7:64:d4:76:
58:a5:be:cc:58:dc:96:00:b4:b5:28:e8:b0:f1:bc:4b:3f:4d:
27:63:47:08:09:e0:da:9c:77:e1:d6:a1:d6:85:8f:83:21:46:
f8:d0:2c:50:41:f9:b9:ed:b2:79:d3:14:e0:ae:c4:9a:f0:67:
45:3c:54:d7:cd:ae:8c:9e:e6:0a:ec:c5:6a:3c:ce:9d:26:3a:
e8:26:7a:57:6d:85:e3:15:0c:c3:da:39:1a:90:88:96:50:32:
44:56:02:b0:36:c3:31:b0:89:c7:8a:f7:22:31:0b:cf:75:8d:
8e:76:90:8d:47:df:30:2e:7e:09:3a:25:95:34:e5:69:9c:b0:
67:fa:5c:f5:fb:01:93:2a:3c:da:4a:c2:c5:f1:da:5d:08:02:
79:bb:a6:7c:cd:85:78:bd:34:df:79:21:7b:d8:a0:28:83:9c:
68:80:ed:5e:52:a2:36:ca:b0:e8:39:aa:4d:18:71:6e:be:2b:
07:8a:91:98:01:a3:68:8c:4c:f0:87:29:5f:9b:b5:2b:91:a9:
ac:3f:a7:e9:f0:9d:ba:05:bd:2d:b4:0d:cc:26:25:bb:1a:98:
fb:81:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:50:34 2025 by rpki-client