Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/TF6vPvFxs5WUrrHSqmKpxsQvB18.roa
File: TF6vPvFxs5WUrrHSqmKpxsQvB18.roa (raw, json)
Hash identifier: skdmvC6iLpguLmAUBf5CQp9okNf5/hjKRW8eNCLvcbU=
Subject key identifier: 4C:5E:AF:3E:F1:71:B3:95:94:AE:B1:D2:AA:62:A9:C6:C4:2F:07:5F
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 019425222839DCB6674C40A63500413ADEF2
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/TF6vPvFxs5WUrrHSqmKpxsQvB18.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25447
IP address blocks: 62.93.64.0/19 maxlen: 19
62.93.68.0/24 maxlen: 24
62.93.73.0/24 maxlen: 24
62.93.74.0/24 maxlen: 24
62.93.76.0/24 maxlen: 24
62.93.88.0/24 maxlen: 24
62.93.96.0/20 maxlen: 20
62.93.96.0/21 maxlen: 21
62.93.104.0/21 maxlen: 24
62.93.112.0/22 maxlen: 22
62.93.120.0/21 maxlen: 21
82.192.0.0/19 maxlen: 19
82.192.0.0/23 maxlen: 23
82.192.5.0/24 maxlen: 24
82.192.6.0/24 maxlen: 24
82.192.18.0/24 maxlen: 24
85.13.0.0/18 maxlen: 18
85.13.2.0/24 maxlen: 24
85.13.8.0/24 maxlen: 24
85.13.14.0/24 maxlen: 24
85.13.16.0/24 maxlen: 24
176.61.160.0/19 maxlen: 24
185.51.220.0/22 maxlen: 24
188.117.192.0/18 maxlen: 18
188.117.200.0/22 maxlen: 22
188.117.208.0/22 maxlen: 22
188.117.220.0/22 maxlen: 22
188.117.240.0/20 maxlen: 20
217.16.112.0/20 maxlen: 20
217.16.113.0/24 maxlen: 24
217.16.114.0/24 maxlen: 24
217.16.124.0/24 maxlen: 24
217.16.127.0/24 maxlen: 24
217.199.80.0/20 maxlen: 20
217.199.83.0/24 maxlen: 24
217.199.90.0/24 maxlen: 24
2a03:4e40::/29 maxlen: 29
2a03:4e40::/32 maxlen: 32
2a03:4e47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:28:39:dc:b6:67:4c:40:a6:35:00:41:3a:de:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c5eaf3ef171b39594aeb1d2aa62a9c6c42f075f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:c7:17:ed:6a:2e:f2:c3:7a:6f:b8:a0:a1:
0d:a4:46:7f:c8:22:e5:c3:bd:d0:b8:48:9a:fe:1d:
ce:31:7b:4c:66:6c:1e:cd:82:ae:12:41:0a:5d:8f:
c0:ef:a3:b9:1a:1b:d2:1a:a8:ad:ac:9a:bb:39:eb:
5b:a4:5f:76:07:4e:7c:40:ca:4e:dc:fc:ac:a7:bd:
34:91:59:ec:aa:c1:b4:96:ad:2a:d9:8c:07:ea:ad:
ca:a1:56:e0:b3:4a:8b:72:6d:14:ea:ce:72:35:88:
cc:19:03:f9:2b:92:7e:73:c9:58:2a:c0:9f:00:ac:
ef:d5:27:86:4f:d5:b6:4f:a6:91:44:e0:e7:74:44:
ab:08:4a:fd:b4:ee:20:d6:44:54:e7:15:15:a2:aa:
bb:ff:db:57:9b:86:19:95:60:d0:cc:41:72:29:77:
99:56:d0:8b:19:35:9a:d0:8b:97:6f:2c:33:c4:46:
83:da:ef:79:ba:83:95:0d:71:df:36:9b:31:43:c8:
67:0c:2f:6c:2c:e4:db:53:5a:03:ce:8b:0b:62:a9:
b5:2e:47:8f:d5:0d:d8:f9:13:f7:7e:ba:99:ec:70:
5a:ae:2f:b0:46:08:05:4b:3a:2f:e8:ad:23:50:2c:
ed:83:23:d6:99:25:0a:4f:54:79:15:c4:c9:cd:39:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:AF:3E:F1:71:B3:95:94:AE:B1:D2:AA:62:A9:C6:C4:2F:07:5F
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/TF6vPvFxs5WUrrHSqmKpxsQvB18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.64.0-62.93.115.255
62.93.120.0/21
82.192.0.0/19
85.13.0.0/18
176.61.160.0/19
185.51.220.0/22
188.117.192.0/18
217.16.112.0/20
217.199.80.0/20
IPv6:
2a03:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
4e:25:5c:12:ed:34:1b:8c:92:b4:cc:1f:02:03:72:eb:ff:a9:
5d:3e:d0:cc:89:57:72:74:3a:8c:c9:4c:c2:9f:c7:cb:2e:61:
32:59:b7:d2:c7:af:d4:d6:00:0a:eb:a0:01:64:3b:82:d0:e8:
0f:76:18:0f:e7:57:b9:93:6c:24:f2:86:c1:a7:1a:bb:cf:18:
5c:6a:93:bc:00:4c:0e:df:3e:2d:73:e0:68:ba:1c:ca:42:65:
25:0c:bb:6c:f2:75:4d:ae:68:d0:76:0a:af:72:0a:ae:96:25:
16:c6:02:52:3e:f8:73:83:9d:0d:a5:49:8e:bc:2e:4d:e2:b2:
92:bf:8d:ec:52:01:4d:8b:fd:ef:e4:7c:24:be:47:00:ab:93:
64:8f:60:96:18:35:49:d2:02:20:26:bd:a5:91:12:cf:6a:e4:
bc:e1:c2:77:2b:44:8c:08:37:f2:66:a2:e9:ca:1f:4d:2c:15:
f6:a6:00:1d:49:03:75:cf:0a:22:38:ad:c8:cd:cd:2e:6a:d3:
ae:79:dc:38:31:fd:39:cb:9e:62:c4:29:25:aa:dc:d6:0a:6e:
70:8e:9c:0a:c2:48:32:ea:f2:46:40:4c:d0:b4:0e:bc:91:1b:
9d:fe:9e:88:05:91:d7:12:29:38:0b:57:5e:bc:cf:1f:52:eb:
ed:b3:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:05 2025 by rpki-client