Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/EChZaKa0Cz2IX4jZxhi7bn8pK6c.roa
File: EChZaKa0Cz2IX4jZxhi7bn8pK6c.roa (raw, json)
Hash identifier: vYmi+J93Y9dc2MozCwELd6jXkEqT6SwAGb+op6KYL1w=
Subject key identifier: 10:28:59:68:A6:B4:0B:3D:88:5F:88:D9:C6:18:BB:6E:7F:29:2B:A7
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 019420680A02C4E6451EB4C526D87055239E
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/EChZaKa0Cz2IX4jZxhi7bn8pK6c.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6424
IP address blocks: 103.243.124.0/22 maxlen: 24
146.19.95.0/24 maxlen: 24
146.19.249.0/24 maxlen: 24
185.112.251.0/24 maxlen: 24
185.166.144.0/24 maxlen: 24
188.93.192.0/21 maxlen: 24
188.93.196.0/24 maxlen: 24
188.93.198.0/24 maxlen: 24
188.93.199.0/24 maxlen: 24
193.107.13.0/24 maxlen: 24
193.109.184.0/21 maxlen: 24
193.109.184.0/24 maxlen: 24
193.163.151.0/24 maxlen: 24
212.52.23.0/24 maxlen: 24
2001:b18::/32 maxlen: 48
2001:b18:a::/48 maxlen: 48
2001:b18:b::/48 maxlen: 48
2001:b18:1000::/48 maxlen: 48
2001:b18:1001::/48 maxlen: 48
2001:b18:1002::/48 maxlen: 48
2001:b18:1008::/48 maxlen: 48
2001:b18:1012::/48 maxlen: 48
2001:b18:1016::/48 maxlen: 48
2001:b18:1018::/48 maxlen: 48
2001:b18:1020::/48 maxlen: 48
2001:b18:1031::/48 maxlen: 48
2a0b:e740::/29 maxlen: 29
2a0d:82c0::/29 maxlen: 48
2a0d:82c0::/32 maxlen: 32
2a0d:82c7:d::/48 maxlen: 48
2a0e:5f00::/29 maxlen: 48
2a0e:5f00::/32 maxlen: 32
2a0f:7700::/29 maxlen: 29
2a0f:8900::/29 maxlen: 29
2a0f:d300::/29 maxlen: 29
2a10:ee40::/29 maxlen: 29
2a11:c00::/29 maxlen: 29
2a12:c1c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0a:02:c4:e6:45:1e:b4:c5:26:d8:70:55:23:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10285968a6b40b3d885f88d9c618bb6e7f292ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:0b:7a:ac:bc:51:53:3b:60:ea:22:08:66:
4f:1a:70:49:5d:fe:e7:15:58:2c:e0:d2:f8:05:83:
7e:2b:f4:2e:22:f1:4d:b4:f5:8a:2c:66:fe:7e:98:
ea:f3:a3:e2:fc:4a:17:ab:2a:41:62:09:b4:37:0f:
8a:47:8a:37:f2:bb:3d:5b:4a:da:45:b5:37:68:77:
ce:06:dd:cf:fd:f7:be:74:8a:bd:7d:c9:9f:f7:c4:
03:4d:a2:c9:67:e7:d6:f4:f2:ca:3c:33:0f:90:93:
34:05:2f:6a:2d:b4:c9:3c:68:62:41:a6:7a:45:ac:
cc:70:ab:69:8d:a1:6b:17:91:fa:38:66:44:b0:5f:
7d:2e:0d:7a:38:30:6f:b6:f3:a9:cf:ac:fe:56:2f:
8b:d1:54:d0:67:a1:e3:10:1d:d5:54:92:1d:61:ce:
dc:86:f4:02:8d:b1:5f:ec:a1:fe:70:21:26:1d:ad:
e5:88:e2:a7:a0:21:83:a9:fc:43:95:0c:82:75:c4:
52:c6:0a:d1:de:0d:93:4e:7e:c7:b0:4d:e7:48:1c:
ab:3a:3b:e4:32:75:5a:88:09:df:21:ae:4c:35:ee:
57:2f:ac:b6:5e:c0:3d:77:c1:7e:e8:33:5d:20:02:
36:59:de:0a:01:7c:be:6d:b8:65:3f:ec:4e:84:87:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:28:59:68:A6:B4:0B:3D:88:5F:88:D9:C6:18:BB:6E:7F:29:2B:A7
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/EChZaKa0Cz2IX4jZxhi7bn8pK6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.124.0/22
146.19.95.0/24
146.19.249.0/24
185.112.251.0/24
185.166.144.0/24
188.93.192.0/21
193.107.13.0/24
193.109.184.0/21
193.163.151.0/24
212.52.23.0/24
IPv6:
2001:b18::/32
2a0b:e740::/29
2a0d:82c0::/29
2a0e:5f00::/29
2a0f:7700::/29
2a0f:8900::/29
2a0f:d300::/29
2a10:ee40::/29
2a11:c00::/29
2a12:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:f7:87:08:0f:a8:55:28:7a:30:7d:81:8a:4c:60:59:be:1b:
da:fb:c1:10:bd:37:80:f8:34:ef:f2:f9:8e:e2:c0:5c:35:43:
86:92:e2:90:29:c4:4b:ce:87:0d:1a:16:ae:bd:ec:90:7b:f3:
29:45:be:51:fb:e2:38:07:39:4c:d3:01:9a:81:58:bd:70:32:
51:02:3a:cc:e3:79:99:b7:d6:0f:80:35:50:79:7b:29:65:b1:
ce:c5:a5:86:4e:7a:ba:d5:3c:de:9b:97:9f:9a:0c:aa:14:3a:
3f:e3:f5:c1:72:e5:19:77:a7:ba:3e:94:b0:a2:cb:45:54:10:
a5:0b:9f:fd:9b:9a:b5:fb:44:87:5e:b3:28:a3:d5:21:b8:dc:
0f:fe:21:5f:e6:bc:65:22:d8:d8:db:74:31:86:99:1e:be:55:
8e:44:45:9d:43:cc:77:d5:8e:59:a0:4c:4c:21:91:43:33:b1:
f1:d7:f3:3b:2b:4a:0d:03:ab:21:36:6a:00:68:b7:b5:34:34:
d6:f4:2c:06:5a:41:52:9a:f0:c5:6c:de:12:37:da:78:5c:05:
7c:a2:aa:1a:0e:58:df:96:1e:a4:f2:40:e3:de:08:37:19:fa:
9a:ed:14:0c:2d:5f:5a:2e:cf:a4:74:cc:93:05:78:ee:b2:b4:
f4:2e:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:00 2025 by rpki-client