Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/oTERYQxbfcdAepRJdL-H3PXCPnk.roa
File: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (raw, json)
Hash identifier: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=
Subject key identifier: A1:31:11:61:0C:5B:7D:C7:40:7A:94:49:74:BF:87:DC:F5:C2:3E:79
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 019423693A6BAA775BC45964A28B773DDF9C
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/oTERYQxbfcdAepRJdL-H3PXCPnk.roa
Signing time: Wed 01 Jan 2025 19:48:06 +0000
ROA not before: Wed 01 Jan 2025 19:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202087
IP address blocks: 45.89.212.0/22 maxlen: 22
45.94.8.0/22 maxlen: 24
45.94.10.0/24 maxlen: 24
94.26.93.0/24 maxlen: 24
94.26.95.0/24 maxlen: 24
94.26.97.0/24 maxlen: 24
94.26.98.0/23 maxlen: 23
94.26.101.0/24 maxlen: 24
94.26.103.0/24 maxlen: 24
94.26.109.0/24 maxlen: 24
94.190.196.0/22 maxlen: 22
94.190.196.0/24 maxlen: 24
94.190.197.0/24 maxlen: 24
94.190.198.0/24 maxlen: 24
94.190.199.0/24 maxlen: 24
104.255.128.0/21 maxlen: 21
153.94.56.0/21 maxlen: 21
185.9.212.0/22 maxlen: 22
185.49.216.0/22 maxlen: 22
185.75.80.0/22 maxlen: 22
185.83.148.0/23 maxlen: 23
185.83.150.0/23 maxlen: 23
185.94.76.0/23 maxlen: 23
185.94.78.0/23 maxlen: 23
192.190.168.0/22 maxlen: 22
2a03:50c0::/32 maxlen: 32
2a03:50c0:1000::/36 maxlen: 36
2a03:50c0:3300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:3a:6b:aa:77:5b:c4:59:64:a2:8b:77:3d:df:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Jan 1 19:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a13111610c5b7dc7407a944974bf87dcf5c23e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:35:f5:bc:ea:72:f9:46:be:00:d7:22:2f:
4b:e5:24:fd:14:ad:22:c0:f2:5f:3f:0d:3e:d4:1b:
92:a7:e5:57:95:d4:73:44:e0:fd:f2:10:22:1c:93:
b4:f6:60:d3:26:dd:d3:b1:18:9a:19:18:4c:f2:f3:
4f:fe:9f:d0:22:45:1e:59:7a:2b:69:66:65:5d:91:
f6:12:80:ca:ef:1a:5f:9f:d6:d3:1c:d6:ff:db:89:
ee:73:31:d5:b9:42:bd:c2:e0:5a:a6:56:bc:2c:50:
9f:b1:97:e7:d0:29:d3:18:1c:35:a2:f6:7d:b1:ee:
99:23:07:a5:4c:fe:51:6f:8d:21:9a:69:05:a4:e5:
ed:21:c9:0e:f6:fe:76:b5:9f:35:c1:ad:f0:35:e0:
71:4d:22:e5:c5:16:b5:f0:69:ef:88:fd:34:fc:56:
1f:ae:46:a9:6b:b0:2c:ba:9a:8d:e8:a0:ba:10:ec:
1e:26:32:87:26:ac:de:4a:0b:7a:4c:22:51:30:d9:
c0:45:52:45:71:11:da:5d:92:16:03:35:ca:05:d2:
2c:ce:fe:12:4d:ce:bb:a5:d6:d9:1a:5d:67:c8:80:
a9:de:2c:4f:75:46:31:57:f4:4b:36:cf:88:f1:c6:
b9:42:06:21:13:cd:4f:02:80:15:55:60:cc:b3:cb:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:11:61:0C:5B:7D:C7:40:7A:94:49:74:BF:87:DC:F5:C2:3E:79
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/oTERYQxbfcdAepRJdL-H3PXCPnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.212.0/22
45.94.8.0/22
94.26.93.0/24
94.26.95.0/24
94.26.97.0-94.26.99.255
94.26.101.0/24
94.26.103.0/24
94.26.109.0/24
94.190.196.0/22
104.255.128.0/21
153.94.56.0/21
185.9.212.0/22
185.49.216.0/22
185.75.80.0/22
185.83.148.0/22
185.94.76.0/22
192.190.168.0/22
IPv6:
2a03:50c0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:3e:0a:f0:14:20:a0:70:35:92:89:1c:4e:10:de:14:a9:b0:
29:86:5b:ec:12:d5:ac:bd:5a:00:70:89:c8:60:10:47:c4:6a:
28:de:85:6d:a1:0a:10:7e:53:90:89:33:2b:4b:7c:73:aa:3f:
1a:18:c8:f1:84:35:9b:b3:c4:ef:d7:4d:12:ec:e4:7d:1a:40:
dd:22:39:b2:93:3e:1b:2c:e9:0d:a4:3d:e3:45:48:93:f9:62:
20:ab:a7:ee:fb:10:f4:85:0f:78:bc:99:b2:27:10:de:f7:58:
0f:c0:ea:b9:1f:cd:4c:23:d3:dc:ba:ae:04:37:f3:53:b8:2c:
b1:16:51:a8:87:bd:2f:e1:95:bd:63:d1:ee:db:f6:04:43:6f:
e0:46:f3:d4:2a:99:10:f7:cc:fc:d1:ab:89:a3:04:70:64:5d:
f7:95:4e:e0:95:92:6e:89:11:a3:b0:55:6e:85:7a:89:5d:6f:
3e:76:bf:db:96:2e:84:9b:b8:e8:58:3a:7b:7c:04:24:02:d5:
e3:75:91:ba:67:29:85:ad:bb:1c:e7:93:6f:98:d5:23:af:75:
d1:0b:5b:8b:77:26:e3:33:ca:43:d5:20:5f:be:20:1f:5d:67:
60:26:89:29:66:99:a1:bf:3d:17:16:92:7f:ac:08:a7:f9:b4:
8b:4e:87:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net