Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/6xQfGOt_4QRi194ctt1Yy_IpWvk.roa
File: 6xQfGOt_4QRi194ctt1Yy_IpWvk.roa (raw, json)
Hash identifier: Zeq/X7clOOaPFxvhWK8RPC5T2Ckw08yRW0DPBjzvh6E=
Subject key identifier: EB:14:1F:18:EB:7F:E1:04:62:D7:DE:1C:B6:DD:58:CB:F2:29:5A:F9
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 01942368FE71261A90F486175C4743F8E73B
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/6xQfGOt_4QRi194ctt1Yy_IpWvk.roa
Signing time: Wed 01 Jan 2025 19:47:50 +0000
ROA not before: Wed 01 Jan 2025 19:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41114
IP address blocks: 31.11.40.0/21 maxlen: 24
45.151.16.0/22 maxlen: 22
45.157.248.0/22 maxlen: 22
62.192.140.0/22 maxlen: 22
77.83.228.0/22 maxlen: 22
109.106.24.0/22 maxlen: 22
147.78.164.0/22 maxlen: 22
153.92.104.0/21 maxlen: 21
185.42.112.0/22 maxlen: 22
185.98.64.0/22 maxlen: 22
193.148.80.0/22 maxlen: 22
213.226.72.0/22 maxlen: 22
2a00:7aa0::/32 maxlen: 32
2a01:60e0::/32 maxlen: 32
2a09:26c0::/32 maxlen: 32
2a09:4380::/32 maxlen: 32
2a0a:7980::/32 maxlen: 32
2a0d:e6c0::/32 maxlen: 48
2a0f:d00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:fe:71:26:1a:90:f4:86:17:5c:47:43:f8:e7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Jan 1 19:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb141f18eb7fe10462d7de1cb6dd58cbf2295af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a8:fd:2b:c9:e6:63:81:66:5b:35:df:8d:d4:
a5:8b:1d:f2:8c:da:aa:c2:cf:75:de:b2:22:5d:91:
9f:48:f3:da:94:d2:26:85:bc:8c:d0:85:44:44:7f:
b8:c7:6d:76:22:c2:0d:b9:f1:96:ea:0a:65:48:ec:
65:27:a3:cc:73:98:1e:44:f2:c2:db:e7:ce:07:33:
fc:cb:b4:7f:ba:83:4a:97:f3:00:c1:cf:42:a0:cc:
77:99:90:ed:71:e4:f1:9c:45:c8:3a:da:22:61:2f:
2e:fb:58:68:66:2c:01:a7:72:d1:80:3a:51:21:81:
89:31:87:30:17:64:ea:c6:32:24:cd:8f:3e:58:93:
27:10:50:f8:a7:f7:ff:55:bc:8c:8b:5e:ae:45:26:
ec:6f:de:37:fe:9e:40:78:59:3f:b9:bf:92:d3:51:
76:f2:7e:1e:4a:54:21:42:94:ab:4b:28:cf:00:cb:
df:da:ac:87:6e:47:32:b8:63:83:6e:c3:43:a0:a9:
de:59:c3:64:c1:2d:c3:4c:1e:3d:e7:87:00:98:07:
5d:56:fe:21:8c:8d:5a:e1:cb:20:b4:6f:b0:3b:5d:
6c:86:f7:5f:e2:84:c3:b6:6f:46:ea:63:8c:8c:1a:
61:69:d4:e7:79:27:7d:5c:2c:06:eb:df:13:ce:39:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:14:1F:18:EB:7F:E1:04:62:D7:DE:1C:B6:DD:58:CB:F2:29:5A:F9
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/6xQfGOt_4QRi194ctt1Yy_IpWvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.40.0/21
45.151.16.0/22
45.157.248.0/22
62.192.140.0/22
77.83.228.0/22
109.106.24.0/22
147.78.164.0/22
153.92.104.0/21
185.42.112.0/22
185.98.64.0/22
193.148.80.0/22
213.226.72.0/22
IPv6:
2a00:7aa0::/32
2a01:60e0::/32
2a09:26c0::/32
2a09:4380::/32
2a0a:7980::/32
2a0d:e6c0::/32
2a0f:d00::/32
Signature Algorithm: sha256WithRSAEncryption
64:48:65:f3:36:e2:3e:f9:10:bd:2c:eb:b0:f2:18:fc:6a:f1:
bd:e8:04:3c:e5:b6:ba:2b:6d:c1:43:14:ae:b8:a3:29:91:08:
48:55:9b:b4:75:a5:25:04:8b:02:87:65:86:47:db:35:1e:06:
02:58:26:1c:06:66:5c:a8:b7:0a:17:83:69:e6:70:a3:4f:28:
f0:c9:74:f9:31:2f:90:b8:2e:08:b2:98:5b:2b:eb:bd:08:8b:
b8:1a:be:72:25:b1:44:6e:d9:b6:39:36:ca:b1:de:55:c7:73:
d4:e8:0f:1e:69:f8:cd:67:32:dd:94:b9:b0:ce:07:1c:8b:13:
71:65:f1:32:c3:51:76:f4:82:e1:6f:b5:7a:a5:d2:a7:d7:d9:
3e:d8:4a:b4:b8:9e:06:25:54:cd:bf:c2:81:81:ca:40:06:89:
bb:e6:98:85:de:f4:c4:ad:ed:a9:97:7e:55:a3:cd:97:4e:9b:
40:25:57:95:9f:99:57:f8:5e:93:d1:c7:e3:71:d2:ad:c9:ef:
a2:10:d0:bc:49:4d:ae:11:ba:12:d4:e2:8a:3b:72:4f:b0:e1:
62:25:8c:f7:fa:f7:d2:6e:9c:0f:0c:7c:9d:a5:12:d0:f1:80:
a1:f4:98:98:53:ad:99:60:60:35:ae:47:1b:4f:d5:36:8f:05:
94:36:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net