Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/IToPllDsr4xQft5YpECWPhbaxic.roa
File: IToPllDsr4xQft5YpECWPhbaxic.roa (raw, json)
Hash identifier: iA339JgrkHvOUwtBrlDpj0JMtenbRgjIS2jHaIgw4OY=
Subject key identifier: 21:3A:0F:96:50:EC:AF:8C:50:7E:DE:58:A4:40:96:3E:16:DA:C6:27
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 019539250715027AFD08B6810A1CA02A6BA6
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/IToPllDsr4xQft5YpECWPhbaxic.roa
Signing time: Mon 24 Feb 2025 18:08:02 +0000
ROA not before: Mon 24 Feb 2025 18:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6700
IP address blocks: 62.108.96.0/19 maxlen: 24
62.193.128.0/19 maxlen: 24
85.222.160.0/23 maxlen: 24
91.148.64.0/18 maxlen: 24
91.223.162.0/24 maxlen: 24
178.20.205.0/24 maxlen: 24
178.20.207.0/24 maxlen: 24
185.47.210.0/24 maxlen: 24
194.106.160.0/19 maxlen: 24
195.252.64.0/18 maxlen: 24
213.244.228.0/22 maxlen: 24
213.244.232.0/21 maxlen: 24
217.26.64.0/20 maxlen: 24
2001:8c8::/32 maxlen: 32
2a02:e40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:39:25:07:15:02:7a:fd:08:b6:81:0a:1c:a0:2a:6b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Feb 24 18:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=213a0f9650ecaf8c507ede58a440963e16dac627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:1c:27:50:c0:1f:1b:96:96:57:18:99:70:
48:b9:d8:12:40:07:c8:9b:6f:f6:c7:c0:b6:a5:8e:
15:48:42:84:cd:b3:61:2b:84:cd:fc:37:8a:3d:a2:
72:dd:4a:36:fc:bc:b7:09:8b:d8:d2:b8:d8:4f:3c:
3c:a7:2a:bf:83:29:c2:67:b2:39:12:8c:a0:48:ec:
fc:32:37:9f:5d:f3:dd:ec:e4:9e:42:b6:57:f7:22:
7c:e0:9e:4a:3d:48:e1:42:92:7b:c1:54:3a:b8:22:
84:33:3e:83:2e:a4:2b:86:1f:f5:ee:8a:c3:1f:13:
6c:d0:e1:63:05:12:56:08:75:5c:51:a4:b2:cc:7e:
c9:50:56:15:a6:9a:4f:f0:6d:9d:27:3d:24:83:04:
c1:d7:8c:fe:2e:4b:80:f2:05:d1:fc:5f:ff:01:74:
34:17:c7:2b:54:9e:82:3a:e4:4c:52:89:9b:dc:76:
ad:61:a0:9d:56:c6:0c:da:fb:7d:97:22:5c:2b:00:
2d:c7:31:1d:c7:b4:a7:04:22:23:29:54:fe:91:c8:
b6:51:64:2c:c7:f8:5c:18:57:53:ed:b4:01:8d:c9:
42:7b:f7:2f:c9:09:05:40:8c:4d:bd:d7:3c:de:0f:
62:1d:a4:35:54:35:83:d1:85:86:8d:8d:e8:c5:20:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3A:0F:96:50:EC:AF:8C:50:7E:DE:58:A4:40:96:3E:16:DA:C6:27
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/IToPllDsr4xQft5YpECWPhbaxic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.96.0/19
62.193.128.0/19
85.222.160.0/23
91.148.64.0/18
91.223.162.0/24
178.20.205.0/24
178.20.207.0/24
185.47.210.0/24
194.106.160.0/19
195.252.64.0/18
213.244.228.0-213.244.239.255
217.26.64.0/20
IPv6:
2001:8c8::/32
2a02:e40::/32
Signature Algorithm: sha256WithRSAEncryption
51:3a:66:87:50:df:a3:4a:67:73:a7:85:ba:fa:b9:b4:3d:2a:
6f:c1:db:02:de:ad:aa:a8:3e:6b:41:4b:c2:1c:3b:c6:a9:3e:
53:32:35:02:11:57:ce:8c:69:a9:ed:81:2a:02:97:0c:96:cd:
e6:25:90:20:bf:a8:f9:1e:ed:a9:a2:c1:55:c1:68:c0:d0:4e:
33:01:36:ec:1d:bc:f8:75:1e:04:b1:cf:45:8d:5d:b1:c2:9f:
39:53:d2:83:5d:28:6d:be:7e:8a:d3:15:f7:ec:bd:13:b9:e1:
92:40:7b:1a:63:08:12:db:d3:33:4c:a6:42:67:1d:bd:4f:1c:
b4:78:ff:2b:b6:4d:7a:d7:d0:04:97:ca:5d:ca:e8:05:af:e8:
ae:1b:b7:e2:3c:5f:f3:85:2d:ec:8b:09:32:f0:bb:91:9e:36:
5e:ea:f5:1b:b2:ff:4b:cb:e3:43:12:77:1a:a7:ac:a7:41:aa:
4a:0f:93:57:4b:cb:4a:e5:2d:b6:f3:31:7e:7a:da:32:59:84:
a2:d3:51:38:00:28:7e:26:ca:c6:77:7a:bf:bf:82:2f:87:e1:
3b:80:f2:34:f2:f0:04:d0:75:13:54:1a:56:d1:07:6b:71:79:
0e:2d:10:f9:e1:5c:59:f2:44:78:79:04:e1:fe:4b:02:9b:27:
25:e7:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net