Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/4GJ7Bv25Hc_2E_7WXPdnlb8GbTA.roa
File: 4GJ7Bv25Hc_2E_7WXPdnlb8GbTA.roa (raw, json)
Hash identifier: 22adB2cFCEYOPZkebhHLhxFQZ4hYXaYbg55hDEc1Js0=
Subject key identifier: E0:62:7B:06:FD:B9:1D:CF:F6:13:FE:D6:5C:F7:67:95:BF:06:6D:30
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 049DFADA
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/4GJ7Bv25Hc_2E_7WXPdnlb8GbTA.roa
Signing time: Thu 03 Mar 2022 02:57:10 +0000
ROA not before: Thu 03 Mar 2022 02:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.228.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.212.0/22 maxlen: 24
2.59.61.0/24 maxlen: 24
194.31.195.0/24 maxlen: 24
194.31.194.0/23 maxlen: 23
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77462234 (0x49dfada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Mar 3 02:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0627b06fdb91dcff613fed65cf76795bf066d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:f2:66:3e:61:41:31:ea:c1:41:c3:30:8b:
bc:0e:47:de:11:4c:6a:2c:7c:45:29:dc:ac:45:ab:
32:1d:83:28:e6:a0:20:31:14:cc:a5:a8:d7:c1:c9:
b9:ba:fe:a0:d9:12:97:ba:61:94:71:0c:28:19:cb:
8b:65:83:66:bb:d2:57:e0:68:f5:10:ff:2c:8c:f2:
9f:89:3b:96:7f:d4:d1:6a:ba:8a:2e:93:48:01:12:
b9:06:d0:d6:65:93:84:a8:57:d1:b5:d2:3d:ed:a8:
21:0f:03:a5:f3:1a:5b:c3:8b:d8:50:fe:7d:68:84:
a3:9e:06:cc:1a:5d:f2:b1:ff:f9:e9:05:da:e9:b0:
87:bf:fb:81:c2:e1:14:01:e2:74:29:2c:4c:7a:da:
6a:3b:d5:b3:fe:e8:3d:36:ba:3f:b0:df:e7:96:e9:
da:bb:ca:cd:31:27:f6:f4:c5:a8:9c:83:f1:29:fb:
73:13:3e:ea:39:97:00:17:29:e0:45:a8:3e:af:cc:
67:6d:2d:b1:f5:ee:6c:02:ea:a7:91:a2:1c:d3:b1:
51:41:0e:a3:8d:0d:6e:91:83:f8:97:71:97:ec:8a:
e9:b4:de:46:ec:18:08:ba:cf:35:0e:bf:cc:dd:ed:
f5:48:49:c7:02:27:3a:d6:a9:8c:60:27:cd:43:39:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:62:7B:06:FD:B9:1D:CF:F6:13:FE:D6:5C:F7:67:95:BF:06:6D:30
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/4GJ7Bv25Hc_2E_7WXPdnlb8GbTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.61.0/24
45.95.212.0/22
85.209.228.0/24
85.209.230.0/24
194.31.194.0-194.31.197.255
Signature Algorithm: sha256WithRSAEncryption
ac:b3:4f:67:53:44:92:41:04:e7:33:e6:65:d2:6a:64:7b:e0:
f4:7d:e7:d7:f5:3f:70:60:0b:7d:55:17:29:c2:6d:7a:bb:cc:
f9:1b:37:41:56:ed:5c:fb:c5:7e:f6:1c:f6:2a:be:12:e7:a4:
ff:d0:54:00:3a:76:7d:74:1d:25:6b:7e:48:c5:80:0f:de:eb:
59:5b:f4:a0:df:94:c1:93:60:53:cd:25:b5:8b:0c:07:3e:7a:
df:0f:60:32:98:dd:9d:b4:f6:03:5e:88:09:62:3b:e7:e0:f0:
c3:ad:8a:6c:ab:66:43:83:7b:a9:52:2d:24:6c:bf:36:5e:26:
73:53:08:40:8a:8e:bc:5a:7c:2e:64:ef:3c:f8:56:87:72:c5:
f4:5c:b9:c9:ff:a3:ba:0b:dc:f5:32:0c:41:5f:53:34:49:5e:
c0:7d:33:4d:04:eb:c3:e5:b8:1c:e0:d1:8d:6d:36:34:7e:91:
9b:c3:60:75:c5:e1:ff:bc:a9:39:b6:15:2a:b0:4c:8d:8a:5c:
1e:be:af:83:42:31:a4:6f:f5:17:9e:a8:03:d2:38:01:23:84:
6f:80:09:91:66:8a:c5:03:01:0e:f6:dd:81:9d:3e:fb:86:2f:
3f:a8:a1:3f:39:37:06:5e:8f:d5:b5:10:7d:05:a2:96:22:52:
5a:f0:99:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:28 2025 by rpki-client