Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/76NAlm9TjFUCcmC50dxOYbJ3ibM.roa
File: 76NAlm9TjFUCcmC50dxOYbJ3ibM.roa (raw, json)
Hash identifier: dyjeL6g6+zSZa2KMeYm0hKmHzgduNDSoQiug/KbB7TM=
Subject key identifier: EF:A3:40:96:6F:53:8C:55:02:72:60:B9:D1:DC:4E:61:B2:77:89:B3
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 019423D6F182045EF07B62EA3A6FBFE0ADD0
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/76NAlm9TjFUCcmC50dxOYbJ3ibM.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9026
IP address blocks: 62.212.0.0/19 maxlen: 19
185.120.40.0/22 maxlen: 22
2a02:20::/29 maxlen: 29
2a02:20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f1:82:04:5e:f0:7b:62:ea:3a:6f:bf:e0:ad:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa340966f538c55027260b9d1dc4e61b27789b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:b1:3f:b6:d8:ce:d5:fa:b7:89:66:f0:0c:
97:3e:f1:eb:c6:b6:2a:2e:ac:4d:c9:a8:36:e1:3f:
df:84:1f:15:a2:9e:7f:11:1a:09:74:d7:a9:f3:ae:
47:10:59:b3:9c:68:38:e6:81:f0:fb:41:35:21:03:
6b:07:df:78:f1:0c:bf:84:ed:77:7c:98:e3:74:c9:
20:a4:27:81:ed:77:a5:2f:7b:06:d9:2a:d6:ae:0d:
32:68:dc:8f:3c:56:73:ec:93:4e:f8:b5:6d:c8:fa:
79:25:43:bf:58:01:a0:a3:62:47:3a:a0:e4:1c:0e:
ba:94:a6:46:cb:67:b8:7a:5f:e7:f6:40:6d:3e:42:
10:e4:60:b7:21:f7:6e:80:0d:73:53:4a:fb:37:27:
51:d2:e9:ad:9c:35:72:0a:33:47:27:94:67:b1:2d:
c0:e9:12:61:6d:b3:61:cd:07:01:41:5c:0d:bf:76:
ca:ba:9b:24:05:a0:af:ba:8c:fa:81:5a:9e:56:6a:
bf:a0:f2:7e:be:e8:e4:58:c8:a6:ad:31:04:19:6c:
6c:d0:da:5d:a3:7f:c9:d5:b3:d6:c4:7a:c9:d3:12:
e3:aa:dc:dc:ae:e4:cd:66:52:e3:60:fb:fe:9d:7d:
d8:c5:05:01:e2:d2:fd:cf:fb:af:d1:54:bb:27:a2:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A3:40:96:6F:53:8C:55:02:72:60:B9:D1:DC:4E:61:B2:77:89:B3
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/76NAlm9TjFUCcmC50dxOYbJ3ibM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.212.0.0/19
185.120.40.0/22
IPv6:
2a02:20::/29
Signature Algorithm: sha256WithRSAEncryption
41:b1:31:e6:1a:1a:54:52:6b:90:c0:2b:57:cb:8c:20:7b:cf:
ef:78:7a:c6:cc:12:18:d7:58:9e:77:42:09:44:3c:a6:e1:1c:
51:d7:d4:86:8d:6e:36:39:f7:78:53:47:1e:15:1d:76:d5:b6:
b4:df:d9:ad:c6:1e:d3:72:0b:04:a0:cb:60:34:99:2a:22:55:
a4:77:b2:b1:ec:0f:ed:d8:a6:76:4c:fa:85:52:ca:61:3c:f9:
5c:b8:3e:62:4d:3c:86:aa:d3:e6:ba:4f:d1:1b:82:48:c3:f4:
f8:24:57:a8:5b:aa:15:de:5b:08:63:c0:d0:09:5e:b9:86:e5:
08:ec:68:e5:5b:3e:06:92:6d:84:08:dc:70:5b:e5:39:9c:5c:
3b:30:a9:17:d7:30:0e:b0:40:fa:0d:b4:b4:e2:19:3d:c1:71:
3e:07:b0:9e:fc:6e:51:68:c3:3e:ea:a9:51:5a:7a:6d:ca:d5:
fa:da:08:26:c0:3b:fa:33:66:e5:94:63:e0:99:29:f2:77:58:
35:e2:22:5e:d9:6a:68:d8:a6:21:5d:2c:fa:db:b4:56:25:2f:
55:44:1a:a4:26:c2:a0:15:0a:72:c0:86:a6:e9:6d:0f:ff:04:
d5:df:d7:26:f2:12:74:ee:16:2a:e0:f1:25:02:d1:96:6d:e9:
eb:6d:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net