Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/c4MYGWmvVOMW-ZPyh_ObdmpCyok.roa
File: c4MYGWmvVOMW-ZPyh_ObdmpCyok.roa (raw, json)
Hash identifier: iiX0/7ceYrxAZ0AuZvAYsNf52pGqXWpA6PCw202RMj0=
Subject key identifier: 73:83:18:19:69:AF:54:E3:16:F9:93:F2:87:F3:9B:76:6A:42:CA:89
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 018E3FAFBB1431899E9F908D39113AB2FA0B
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/c4MYGWmvVOMW-ZPyh_ObdmpCyok.roa
Signing time: Fri 15 Mar 2024 01:17:45 +0000
ROA not before: Fri 15 Mar 2024 01:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24768
IP address blocks: 82.102.7.0/24 maxlen: 24
94.46.12.0/22 maxlen: 22
94.46.12.0/24 maxlen: 24
94.46.13.0/24 maxlen: 24
94.46.14.0/24 maxlen: 24
94.46.15.0/24 maxlen: 24
94.46.16.0/22 maxlen: 22
94.46.16.0/24 maxlen: 24
94.46.20.0/22 maxlen: 22
94.46.20.0/24 maxlen: 24
94.46.21.0/24 maxlen: 24
94.46.22.0/24 maxlen: 24
94.46.23.0/24 maxlen: 24
94.46.25.0/24 maxlen: 24
94.46.26.0/24 maxlen: 24
94.46.27.0/24 maxlen: 24
94.46.28.0/22 maxlen: 22
94.46.28.0/24 maxlen: 24
94.46.29.0/24 maxlen: 24
94.46.30.0/24 maxlen: 24
94.46.128.0/21 maxlen: 21
94.46.132.0/24 maxlen: 24
94.46.133.0/24 maxlen: 24
94.46.160.0/20 maxlen: 24
94.46.176.0/21 maxlen: 21
109.71.40.0/21 maxlen: 21
109.71.40.0/24 maxlen: 24
109.71.41.0/24 maxlen: 24
109.71.42.0/24 maxlen: 24
109.71.43.0/24 maxlen: 24
109.71.44.0/24 maxlen: 24
109.71.45.0/24 maxlen: 24
109.71.46.0/24 maxlen: 24
109.71.47.0/24 maxlen: 24
130.185.80.0/21 maxlen: 21
130.185.81.0/24 maxlen: 24
130.185.82.0/24 maxlen: 24
130.185.83.0/24 maxlen: 24
130.185.84.0/24 maxlen: 24
130.185.85.0/24 maxlen: 24
130.185.86.0/24 maxlen: 24
130.185.87.0/24 maxlen: 24
185.15.20.0/22 maxlen: 22
185.15.20.0/24 maxlen: 24
185.15.22.0/24 maxlen: 24
185.15.23.0/24 maxlen: 24
2a00:1650::/33 maxlen: 33
2a00:1650:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3f:af:bb:14:31:89:9e:9f:90:8d:39:11:3a:b2:fa:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Mar 15 01:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7383181969af54e316f993f287f39b766a42ca89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:dd:dc:16:ef:c4:1d:17:8a:66:fc:8e:7c:
59:25:dc:b8:04:48:7d:9f:56:95:b8:34:1f:5c:2d:
12:9d:f8:2a:6b:34:fd:e1:b5:31:9a:39:b0:12:eb:
68:4d:32:35:9d:42:e4:d9:da:87:9c:ad:0a:4f:17:
bd:fc:12:02:b9:1d:af:6f:43:c9:58:17:83:95:5b:
2b:9b:31:b3:47:ef:df:94:6b:57:f5:f5:7b:f2:51:
74:89:5d:8e:c5:8a:ef:9e:9d:51:2e:a7:d7:27:ab:
7f:68:be:51:14:5a:ad:c3:d2:27:56:b2:d0:7c:d0:
a8:f5:c3:92:d4:84:31:f7:05:81:53:c5:2d:7d:53:
4f:16:4d:bc:1e:9e:7b:6a:5f:ea:57:52:9d:3a:ed:
b3:41:a4:80:35:87:32:31:39:bf:ae:85:ab:ce:64:
86:c8:cb:cf:85:36:35:e9:d6:b5:56:2a:a7:cc:e2:
09:fd:ca:83:29:91:8d:6b:f5:f8:59:11:eb:24:90:
09:bf:52:a4:6f:32:59:7c:85:a6:0f:74:fb:e6:f9:
68:3a:6e:fb:13:7a:cb:7f:1c:3d:d4:d9:99:f6:00:
97:82:19:ad:40:8a:f1:52:13:2c:d7:fe:08:2c:77:
a8:15:4a:dd:fa:a4:02:d3:7a:26:87:a4:e1:f1:52:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:18:19:69:AF:54:E3:16:F9:93:F2:87:F3:9B:76:6A:42:CA:89
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/c4MYGWmvVOMW-ZPyh_ObdmpCyok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.102.7.0/24
94.46.12.0-94.46.23.255
94.46.25.0-94.46.31.255
94.46.128.0/21
94.46.160.0-94.46.183.255
109.71.40.0/21
130.185.80.0/21
185.15.20.0/22
IPv6:
2a00:1650::/32
Signature Algorithm: sha256WithRSAEncryption
2b:82:f7:d6:b9:db:0f:8a:45:f4:e6:98:fc:db:c9:79:da:05:
97:3e:16:5b:7c:bb:ba:8e:31:41:ff:a5:20:60:1b:26:2e:6e:
ba:df:73:79:3a:7a:4e:4f:05:f2:8a:11:fe:a7:0f:05:cd:1b:
af:2f:f0:6e:72:0c:ea:5d:9c:c8:e0:72:e1:87:35:e8:67:47:
d4:28:f1:16:2f:ef:e6:80:54:0b:02:7e:f0:87:bd:db:c9:b8:
51:bf:0f:6e:f2:66:bf:e4:c0:47:49:03:72:db:96:45:2e:3c:
73:21:05:ce:dd:40:ab:7f:d8:bc:94:b9:99:8a:1b:12:29:7d:
59:fb:d6:80:da:91:44:04:09:b8:ec:c4:e9:cd:fa:db:d7:99:
9e:27:6c:9d:b6:c9:0f:8d:0c:5d:f5:99:84:6c:1a:eb:9d:f2:
61:d9:eb:35:c6:e9:9e:10:97:34:e3:39:4f:5c:33:6a:2f:d2:
c5:e3:4e:65:b9:d1:c5:97:0f:5a:08:85:0d:94:d3:e3:f2:df:
a2:68:22:79:92:26:58:f0:e0:51:5b:d0:56:d4:64:a6:50:97:
06:fe:5a:e3:2b:88:e3:3d:fb:54:26:c3:93:46:13:7b:83:8f:
a3:9f:d2:ba:20:29:d1:10:c5:d8:c3:89:35:ad:45:61:d8:66:
ed:bb:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:29:05 2025 by rpki-client