
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/7UAk0cN_93o1IqUzEsLzy3OF8t8.roa
File: 7UAk0cN_93o1IqUzEsLzy3OF8t8.roa (raw, json)
Hash identifier: X/DccKCPSXNbl5PAX4IP4Kv17+DSYA35yARpxNApl1o=
Subject key identifier: ED:40:24:D1:C3:7F:F7:7A:35:22:A5:33:12:C2:F3:CB:73:85:F2:DF
Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial: 0194FA90B57090D941CF071F10610C99BDFC
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/7UAk0cN_93o1IqUzEsLzy3OF8t8.roa
Signing time: Wed 12 Feb 2025 14:29:35 +0000
ROA not before: Wed 12 Feb 2025 14:29:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31042
IP address blocks: 24.135.0.0/16 maxlen: 17
46.17.144.0/21 maxlen: 21
46.240.128.0/17 maxlen: 17
80.93.224.0/19 maxlen: 19
82.117.192.0/19 maxlen: 24
82.117.195.0/24 maxlen: 24
87.116.128.0/18 maxlen: 24
87.116.128.0/19 maxlen: 19
87.116.140.0/24 maxlen: 24
87.116.141.0/24 maxlen: 24
87.116.160.0/19 maxlen: 19
89.216.0.0/16 maxlen: 24
91.143.208.0/20 maxlen: 20
94.189.128.0/17 maxlen: 18
94.230.176.0/20 maxlen: 20
95.180.0.0/17 maxlen: 17
178.148.0.0/15 maxlen: 16
188.2.0.0/16 maxlen: 17
188.246.32.0/19 maxlen: 19
213.244.224.0/22 maxlen: 24
2a00:1dd8::/29 maxlen: 29
2a00:1dd8::/32 maxlen: 32
2a03:87c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:90:b5:70:90:d9:41:cf:07:1f:10:61:0c:99:bd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
Validity
Not Before: Feb 12 14:29:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed4024d1c37ff77a3522a53312c2f3cb7385f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:6a:ea:13:18:c2:2f:c0:4d:d5:1b:9d:e7:
6e:30:35:02:39:f3:5a:74:ba:33:5f:76:fb:25:da:
03:a0:e7:d0:27:12:c5:bf:96:5a:c6:13:00:f1:38:
29:9d:89:1c:d1:07:18:e0:b7:11:44:19:c8:70:cd:
e9:3c:53:89:d4:37:30:cd:33:2c:82:96:67:2b:b2:
91:80:d0:4a:15:86:a6:8e:a3:c1:63:b7:2d:95:50:
ce:81:53:23:c2:bd:dd:fa:8e:a1:f5:bb:13:9d:8b:
d6:06:7f:9d:0b:e9:d8:6a:e7:8f:5d:a6:7c:6b:c6:
00:9c:a2:6c:00:21:92:24:9b:3b:f7:fc:39:d4:53:
b2:a0:f7:e7:c7:52:c9:46:90:a8:30:02:e3:0c:0b:
72:70:fe:73:4e:30:c2:71:b5:aa:81:0d:11:e3:ac:
07:3c:ba:50:98:96:e2:07:92:ae:39:50:83:30:06:
b4:e2:9e:5d:57:29:71:12:ec:c4:88:12:d2:73:55:
29:00:03:87:97:08:9a:9c:f6:6c:4c:7a:96:99:fe:
1a:a9:a7:5a:71:18:cf:c6:1b:93:23:0a:e9:bd:ca:
ed:52:a5:a6:1c:a1:09:5d:da:19:42:6a:78:12:3c:
cc:cb:cf:1f:6d:f4:be:80:48:5c:bd:95:c5:5d:13:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:24:D1:C3:7F:F7:7A:35:22:A5:33:12:C2:F3:CB:73:85:F2:DF
X509v3 Authority Key Identifier:
keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/7UAk0cN_93o1IqUzEsLzy3OF8t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.135.0.0/16
46.17.144.0/21
46.240.128.0/17
80.93.224.0/19
82.117.192.0/19
87.116.128.0/18
89.216.0.0/16
91.143.208.0/20
94.189.128.0/17
94.230.176.0/20
95.180.0.0/17
178.148.0.0/15
188.2.0.0/16
188.246.32.0/19
213.244.224.0/22
IPv6:
2a00:1dd8::/29
2a03:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:c9:f9:fd:df:8e:1d:13:e1:12:d2:fa:46:a3:0d:82:c2:7c:
1f:e3:95:d7:92:64:47:c1:07:2f:a2:5f:23:75:b9:7a:b3:43:
70:a8:44:d8:bc:6c:1b:89:f0:4b:a5:f3:d8:bf:7f:dc:c0:2a:
07:c9:3a:b8:7e:6b:db:66:b7:14:47:a8:7c:a2:e8:40:56:d7:
b4:15:17:d9:5e:9f:3b:b2:8a:2e:c7:bf:cb:a3:36:d5:a9:05:
46:4b:0a:2c:d4:c5:32:bf:b2:69:79:34:cf:95:a9:dc:ca:1e:
5f:ef:3e:e7:ca:52:0f:2c:2e:a6:56:9b:1d:c1:0f:b9:28:92:
57:c1:15:14:bb:28:03:f9:4c:4a:a9:93:97:55:a4:2a:8f:e7:
25:89:53:cd:23:6d:ec:2d:14:2a:f7:e1:40:5d:d9:b9:26:b1:
2a:34:c3:f9:0c:a4:4a:20:bf:03:52:d7:68:15:af:48:0e:50:
22:79:7d:97:77:a4:92:16:74:c6:e1:cd:b7:cd:80:23:c0:7d:
a9:72:8d:d5:48:05:7d:eb:5a:05:8f:65:2f:c5:b9:e3:30:39:
a6:17:7c:ce:88:84:4f:f7:74:81:0e:6a:f2:7e:b1:8a:2e:67:
cc:3e:08:d4:18:14:8c:6f:53:12:ef:e4:95:41:b8:44:99:35:
47:5d:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net