Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/4MYG8BAB6VnwbMnW0vIjt3XDnNs.roa
File: 4MYG8BAB6VnwbMnW0vIjt3XDnNs.roa (raw, json)
Hash identifier: zsesu8NOLksulS1Xa6gIxBG/rKsNNJvMG1C/0IUza3E=
Subject key identifier: E0:C6:06:F0:10:01:E9:59:F0:6C:C9:D6:D2:F2:23:B7:75:C3:9C:DB
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0184E9C4823D17F41E6C61F6C7358C44404B
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/4MYG8BAB6VnwbMnW0vIjt3XDnNs.roa
Signing time: Tue 06 Dec 2022 23:28:00 +0000
ROA not before: Tue 06 Dec 2022 23:28:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 85.209.16.0/24 maxlen: 24
85.209.16.0/23 maxlen: 23
2.58.84.0/23 maxlen: 24
2.58.86.0/23 maxlen: 24
85.209.18.0/23 maxlen: 23
45.66.148.0/22 maxlen: 24
45.13.150.0/23 maxlen: 24
212.102.114.0/24 maxlen: 24
77.83.253.0/24 maxlen: 24
77.83.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e9:c4:82:3d:17:f4:1e:6c:61:f6:c7:35:8c:44:40:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Dec 6 23:28:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0c606f01001e959f06cc9d6d2f223b775c39cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:1c:86:53:23:29:91:19:be:50:c8:31:53:
a0:0f:b9:7c:1b:a2:46:ec:fc:da:60:c6:97:06:19:
85:e0:f5:0e:7e:26:96:e8:ae:ae:9d:5c:7b:e7:8a:
8a:8c:b6:87:9b:2c:4c:77:1c:79:89:8d:7f:2f:cd:
30:27:1f:d5:5f:89:1a:c4:db:ce:4d:1b:d8:f8:32:
02:37:fc:dc:46:a7:50:d4:99:15:59:19:22:73:33:
3a:94:8d:49:22:61:22:ec:15:71:ed:a4:61:ba:e3:
a0:d2:16:b5:8f:01:83:5b:f4:05:77:c9:bc:b4:2b:
a3:89:34:92:39:ef:30:6d:4f:69:f4:8d:6e:f3:0e:
a7:4e:4f:79:de:72:8f:c3:f4:14:bf:20:21:97:2c:
c8:ca:31:4c:28:5f:ea:79:71:e1:c0:26:06:55:5b:
14:41:aa:81:34:59:d8:92:a5:c7:cf:b1:4c:e6:a9:
8c:c4:aa:61:89:0b:59:b6:ec:da:4d:97:0d:7f:6c:
45:aa:c9:d0:09:de:07:8b:7c:24:79:21:99:60:72:
66:75:f6:d4:f8:56:8b:03:14:92:e8:b1:47:23:79:
9f:b4:16:d3:cc:ed:e7:e7:47:fe:14:45:f7:15:b8:
21:b9:22:66:0f:9b:a4:f0:ae:f0:62:d1:09:87:84:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C6:06:F0:10:01:E9:59:F0:6C:C9:D6:D2:F2:23:B7:75:C3:9C:DB
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/4MYG8BAB6VnwbMnW0vIjt3XDnNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/22
45.13.150.0/23
45.66.148.0/22
77.83.252.0/22
85.209.16.0/22
212.102.114.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:5e:e2:cc:ab:a5:7d:67:02:b4:bc:9e:95:76:98:9e:29:7a:
c8:ca:54:26:ba:49:7e:17:b2:c2:05:ea:de:da:e6:6b:ab:3a:
36:83:75:ad:fe:40:44:9b:80:2b:55:26:d6:7c:5c:ec:71:b6:
ef:99:c0:5b:16:06:1c:2c:30:6a:ff:77:65:46:77:15:67:03:
85:b4:50:06:d4:e7:3c:cd:02:fe:1f:2a:14:82:30:6c:f0:a0:
38:72:3e:46:99:fd:e8:88:d9:a5:81:56:69:30:89:c3:de:7f:
72:41:19:94:28:b7:37:ba:a0:1e:7b:97:14:37:39:7f:1a:8c:
74:5e:b7:6c:63:38:ad:70:3d:a2:b7:6a:be:ea:1c:ac:c5:d4:
0f:eb:ae:aa:49:7f:71:0d:df:69:d1:d7:ba:e7:12:47:2e:62:
91:a8:3a:df:cd:1c:b6:c6:2e:d7:a0:fc:a1:bb:55:6f:fa:54:
36:48:ff:17:0e:98:e2:b6:e2:c7:da:75:93:59:d1:a0:f4:60:
79:dd:96:6c:65:cd:62:80:92:4a:60:82:17:e8:7c:c7:b8:37:
9f:09:da:e1:97:17:f9:19:ef:f9:f6:60:19:f2:aa:11:a3:7c:
b0:5a:cd:aa:7f:e2:ea:35:7b:22:84:a9:df:48:ce:94:89:57:
c6:08:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:50 2025 by rpki-client