Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/T94PGq-eWjYniItYGztzb3OiEUY.roa
File: T94PGq-eWjYniItYGztzb3OiEUY.roa (raw, json)
Hash identifier: fT3XH8Nt967S/av07WJbsq9vvvGHm5IDc+ITdZ2PmQA=
Subject key identifier: 4F:DE:0F:1A:AF:9E:5A:36:27:88:8B:58:1B:3B:73:6F:73:A2:11:46
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 01942747999665803AB8970B065AB0224802
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/T94PGq-eWjYniItYGztzb3OiEUY.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201454
IP address blocks: 45.140.0.0/22 maxlen: 22
185.73.24.0/22 maxlen: 22
185.112.24.0/22 maxlen: 22
188.94.216.0/21 maxlen: 21
2a01:6f80::/32 maxlen: 32
2a02:c340::/29 maxlen: 29
2a05:3f00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:99:96:65:80:3a:b8:97:0b:06:5a:b0:22:48:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fde0f1aaf9e5a3627888b581b3b736f73a21146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:16:8f:c6:f4:24:6a:75:53:75:91:d8:e8:
5e:1a:f0:49:82:b3:13:6e:55:c3:41:1e:3a:45:f4:
a3:f0:d9:ba:8c:61:98:c5:bd:93:b2:91:e0:0c:a1:
3a:c6:f1:dd:7f:2a:f4:55:89:95:90:dc:20:63:9a:
d5:d6:5a:2b:85:4c:54:52:83:e6:c3:ed:64:28:0b:
01:96:66:21:a9:db:ad:ab:54:86:34:b5:88:fc:17:
0b:99:66:02:8d:dc:10:06:a5:77:21:a3:22:7e:6c:
32:33:88:c4:40:61:e1:ce:f9:bb:cb:6b:8f:0e:aa:
87:74:2c:06:b0:fb:86:0a:91:c5:f0:8c:51:29:4d:
28:bb:ee:07:c1:da:92:27:30:89:44:d4:4f:ff:d8:
d1:b5:99:8d:3a:b3:9c:57:ab:58:81:ae:68:0f:6a:
45:21:6f:8f:0b:cb:c4:a9:f7:89:7c:bd:03:db:08:
df:b2:38:10:3b:39:07:c9:03:ce:e5:9c:c1:92:b3:
74:79:28:12:64:96:9c:38:cf:64:fb:b5:24:5b:3a:
8b:e9:5b:f2:84:57:31:8f:5c:9a:6d:13:c4:90:74:
92:a3:77:6a:f4:e3:e2:99:3d:a1:5e:35:4b:73:c1:
2e:36:9d:8c:bf:db:c5:ef:73:b8:a9:59:28:3e:a2:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:0F:1A:AF:9E:5A:36:27:88:8B:58:1B:3B:73:6F:73:A2:11:46
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/T94PGq-eWjYniItYGztzb3OiEUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.0.0/22
185.73.24.0/22
185.112.24.0/22
188.94.216.0/21
IPv6:
2a01:6f80::/32
2a02:c340::/29
2a05:3f00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:2e:db:35:4a:b1:b4:88:3a:57:38:ce:3b:ac:ff:e9:18:a3:
9f:07:51:59:64:f5:28:f9:f1:af:8c:59:70:82:d3:5e:4c:2e:
79:21:c8:a7:0c:c3:62:3c:b2:dd:33:7c:b6:b4:b5:3d:3a:ec:
e2:73:74:68:ab:c8:cd:18:ea:14:81:5f:00:ce:ba:ba:f5:69:
f1:b4:88:d6:7a:27:32:b9:c7:ca:be:63:ba:7e:cb:31:9d:c4:
27:0a:52:54:91:23:78:d5:e1:44:10:68:86:84:85:24:0d:57:
35:97:ec:e2:07:46:8c:ba:47:c9:e3:75:02:03:28:0e:a9:a0:
a7:f1:9d:a3:cf:46:f2:a6:3b:34:f3:22:a6:87:e1:c3:6f:07:
db:b4:ca:07:62:4b:6d:b0:49:5a:27:b1:87:f1:a0:a2:15:57:
75:a6:e5:63:eb:ad:03:9d:7e:ae:ae:4e:08:08:74:e2:1c:8b:
52:6d:8f:e8:48:82:01:c2:d3:06:ec:db:31:80:a1:fc:59:3a:
e4:7a:b1:cd:82:b6:ad:d6:43:ee:cc:57:a0:02:af:9b:9e:11:
1e:7d:9e:9a:a9:9e:37:05:45:0c:e0:78:dd:e7:ea:ab:5b:0b:
7f:b2:45:a1:6d:d0:9a:46:89:c5:c5:b7:22:e2:bf:4f:63:93:
ad:22:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:27 2025 by rpki-client