Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/f46_qQD3jnenHxB8isMlElB8Ow8.roa
File: f46_qQD3jnenHxB8isMlElB8Ow8.roa (raw, json)
Hash identifier: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=
Subject key identifier: 7F:8E:BF:A9:00:F7:8E:77:A7:1F:10:7C:8A:C3:25:12:50:7C:3B:0F
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019427B6647D54636CFA70EFE5DB44EF8503
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/f46_qQD3jnenHxB8isMlElB8Ow8.roa
Signing time: Thu 02 Jan 2025 15:50:52 +0000
ROA not before: Thu 02 Jan 2025 15:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39039
IP address blocks: 5.134.68.0/22 maxlen: 22
46.31.36.0/22 maxlen: 22
77.95.48.0/21 maxlen: 21
83.243.32.0/21 maxlen: 21
185.170.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:64:7d:54:63:6c:fa:70:ef:e5:db:44:ef:85:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jan 2 15:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f8ebfa900f78e77a71f107c8ac32512507c3b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:d0:aa:84:9b:84:67:6b:1d:63:dc:f5:15:
18:06:e5:f9:8c:18:5d:33:ec:2c:c4:de:d1:90:eb:
e9:67:0b:3c:a7:2b:8b:68:d7:f6:6b:6a:d4:e0:cc:
42:67:78:a9:fa:63:69:cc:af:d9:db:f5:92:ee:63:
b8:c9:24:eb:5f:ef:22:f6:53:ad:4d:d6:6c:c6:78:
3a:0e:79:2e:55:c5:57:f8:3b:f9:e2:1d:ef:7c:2a:
c3:05:d8:10:40:46:05:3d:b7:47:88:b8:83:d5:5f:
3b:14:cd:2d:02:bd:d0:37:cd:9b:2c:80:4c:54:6e:
36:c4:79:84:81:43:18:8b:35:c8:73:62:0e:73:ae:
ee:38:4b:28:23:c8:03:16:e8:07:17:de:7c:c5:c0:
c5:b3:25:28:51:7d:d6:12:aa:ea:2e:1c:08:a5:b1:
0c:8e:aa:0f:c5:19:1d:40:08:4f:34:52:6d:c3:15:
4c:b2:0e:22:4b:8d:36:f6:60:fd:a7:fd:d5:0e:82:
31:89:db:7f:b0:12:e5:9b:f8:97:3c:ea:c6:3c:77:
73:67:52:6d:5d:e5:0f:f7:21:19:1b:21:0a:1d:4f:
fd:30:33:73:e8:3c:4d:05:7b:4a:f6:b6:b5:03:64:
90:07:9c:d3:f2:c4:dc:20:be:51:2c:90:1a:d1:15:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:BF:A9:00:F7:8E:77:A7:1F:10:7C:8A:C3:25:12:50:7C:3B:0F
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/f46_qQD3jnenHxB8isMlElB8Ow8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.68.0/22
46.31.36.0/22
77.95.48.0/21
83.243.32.0/21
185.170.32.0/22
Signature Algorithm: sha256WithRSAEncryption
14:d4:76:6c:b1:d0:28:6c:01:09:00:98:2c:ac:3b:ac:bc:25:
2d:8a:60:73:43:ae:16:09:c8:a5:84:f7:9b:29:45:2a:fc:b6:
c3:08:66:3d:dd:8c:59:c5:54:ef:6a:0c:7c:e2:de:74:e6:80:
65:50:71:f7:6e:23:16:b7:67:6c:ba:8d:27:0e:6e:26:98:84:
5b:be:e9:a5:bf:80:39:cf:e8:19:98:96:4a:d4:be:ab:3f:73:
c7:fb:6a:da:45:f0:2c:8e:16:28:84:cb:e8:ea:e8:14:19:18:
6d:41:00:86:2c:4f:90:62:44:66:39:3e:de:52:03:27:7d:91:
8f:6b:1c:9b:25:91:d1:a3:0c:ce:51:77:dc:3b:28:93:3c:ae:
a7:fb:0f:16:d6:8b:41:f3:4e:6e:dc:78:66:08:7b:f8:cd:fe:
a3:f4:8e:80:93:3e:68:f9:c7:ba:90:06:f5:98:d8:33:a6:b4:
64:6f:65:cb:0f:2a:6f:0d:7e:b5:0d:e5:95:34:fb:e2:d5:aa:
8f:c0:52:b9:ea:89:90:02:c4:cf:a7:f1:08:3f:4b:fb:a5:5b:
cc:53:c1:d2:e4:d1:7a:bd:73:6b:e9:3d:ce:63:a6:24:90:00:
c0:1d:e2:f7:24:0b:7f:07:0a:4d:a4:06:8d:63:5e:cf:8c:11:
9a:3a:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:43 2025 by rpki-client