Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa
File: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (raw, json)
Hash identifier: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=
Subject key identifier: 20:03:F1:BB:81:D1:2D:C5:09:08:C9:C8:9C:F9:5B:1B:6B:81:E0:CA
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 0195EB54FB35045B1F9B3C716FE4019B5D45
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa
Signing time: Mon 31 Mar 2025 08:32:49 +0000
ROA not before: Mon 31 Mar 2025 08:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 62.239.0.0/16 maxlen: 16
193.113.0.0/16 maxlen: 16
194.102.0.0/19 maxlen: 19
195.218.32.0/19 maxlen: 19
217.15.64.0/20 maxlen: 20
2a00:2380::/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:54:fb:35:04:5b:1f:9b:3c:71:6f:e4:01:9b:5d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Mar 31 08:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2003f1bb81d12dc50908c9c89cf95b1b6b81e0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:9a:f3:6b:56:3a:45:4b:ff:fd:17:23:31:
2c:1f:79:d0:eb:73:c2:53:86:0b:6a:1e:53:3a:89:
b8:a8:c3:a5:34:44:02:ba:69:f5:be:43:40:cb:63:
ad:58:c7:88:90:fd:a8:7e:33:ca:3b:89:04:6a:4a:
f6:49:d9:38:3a:5e:cb:9c:7d:5a:79:a6:da:71:35:
9d:fe:89:d5:d4:55:a5:8e:37:28:7b:a3:eb:48:36:
89:24:b3:b6:f1:ab:c4:a7:1e:c4:af:5f:3f:d7:2f:
48:64:c2:43:09:2a:63:68:07:62:0c:10:a9:ca:41:
82:2e:f1:87:03:0a:8b:74:25:5e:d3:fa:5c:74:ce:
fb:3d:89:e5:e2:56:67:2b:19:ae:05:50:bc:f4:25:
c3:40:a2:2e:23:1c:b3:fc:39:75:5a:13:b8:d7:71:
9b:74:ae:e8:a3:ae:1a:f5:a9:36:b4:c7:74:ee:01:
18:1a:e7:bc:08:46:25:ae:16:b7:34:47:35:ff:47:
d6:b6:16:c2:a9:a6:59:bb:dc:06:85:b1:1c:51:44:
a1:ac:dd:1d:60:0a:6c:44:5d:c1:20:ae:98:5c:87:
6d:ee:18:84:a5:da:54:8f:05:9e:1e:8e:65:02:be:
41:4f:cd:99:cd:86:e4:8a:4f:14:08:11:72:26:e4:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:03:F1:BB:81:D1:2D:C5:09:08:C9:C8:9C:F9:5B:1B:6B:81:E0:CA
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.239.0.0/16
193.113.0.0/16
194.102.0.0/19
195.218.32.0/19
217.15.64.0/20
IPv6:
2a00:2380::/25
Signature Algorithm: sha256WithRSAEncryption
85:70:37:f3:9c:03:61:2e:93:84:37:2a:96:e5:9a:cf:1a:87:
d5:3d:1b:cf:84:4f:a8:b1:cf:84:e0:d6:3c:9b:89:e6:8e:c5:
2c:8c:82:d3:ac:37:b1:8d:0e:54:5e:e7:78:b6:a5:44:24:89:
b8:2e:97:4f:15:3a:66:97:51:02:6a:8c:18:c9:04:dc:3a:98:
aa:69:07:8f:9a:fa:c9:75:4e:cd:38:be:20:26:ce:26:e9:d8:
66:bb:3b:83:de:bc:49:60:25:da:5a:a3:46:15:40:84:26:0c:
44:ae:5d:8e:b6:4e:53:3d:5d:2f:38:5e:59:fd:a9:48:52:e9:
e2:a5:05:d9:9e:82:c3:64:63:d9:09:41:c8:68:14:23:e8:d4:
24:c0:53:c2:52:57:e9:70:4a:46:33:6f:16:b1:ea:ea:a1:64:
b1:58:14:1d:9b:5a:33:70:c0:a6:6f:09:56:80:b9:ac:aa:56:
b7:05:d7:67:b2:ab:1f:0c:6d:0f:c6:6c:0f:23:96:c3:de:2b:
20:12:cc:b4:1c:47:1b:9d:a0:26:51:b4:dc:88:68:3d:f6:99:
e7:72:1b:af:7d:28:ee:f5:54:da:0a:f6:cf:bf:a7:11:9f:0e:
8c:fe:bc:a1:89:9e:8c:ad:24:00:d0:0b:5f:74:6d:b8:ca:d9:
34:74:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net