Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/AIQKMG5ydVJNHoa5wWY4NDa51jA.roa
File: AIQKMG5ydVJNHoa5wWY4NDa51jA.roa (raw, json)
Hash identifier: sbDUcSPmv/wYgWf4G/HcDH8p9BxHwK1BvvB3rZ5lAEc=
Subject key identifier: 00:84:0A:30:6E:72:75:52:4D:1E:86:B9:C1:66:38:34:36:B9:D6:30
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9B4BBD0328741F34A94424482114E
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/AIQKMG5ydVJNHoa5wWY4NDa51jA.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41209
IP address blocks: 85.140.60.0/22 maxlen: 22
85.140.60.0/24 maxlen: 24
85.140.61.0/24 maxlen: 24
85.140.62.0/24 maxlen: 24
85.140.63.0/24 maxlen: 24
195.34.18.0/23 maxlen: 23
195.34.18.0/24 maxlen: 24
195.34.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b4:bb:d0:32:87:41:f3:4a:94:42:44:82:11:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00840a306e7275524d1e86b9c166383436b9d630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:39:14:53:c3:b1:82:50:53:61:81:6a:1e:1f:
5c:64:ce:bf:9e:05:c6:6e:62:16:2c:de:ac:e3:22:
fe:74:e3:f0:6d:3a:f3:77:2e:e8:bc:d6:14:b0:aa:
8b:ed:a3:76:39:13:8a:14:27:52:cd:3b:c8:2f:79:
55:1e:b2:ad:7f:6d:77:1e:eb:ad:36:e9:c4:96:6b:
54:fb:f0:59:c5:e3:89:59:85:c1:c9:d6:bd:6a:b6:
bb:00:75:bf:26:01:c8:39:8d:bf:10:1e:f9:72:b8:
95:79:c4:7a:69:76:a4:ab:5d:03:50:8e:fe:37:0c:
6c:76:7a:90:d4:7e:d0:4d:ab:42:5e:0c:63:5a:c3:
38:05:7c:1c:80:05:df:06:60:24:67:58:66:32:4f:
91:a7:6f:3a:8b:fc:79:4d:9c:21:cd:6b:95:bd:7d:
7c:23:fb:8c:9e:83:8b:59:18:d9:04:b6:f2:35:3a:
c9:ce:b5:80:6a:c0:51:90:15:fe:25:08:3d:10:27:
d5:6d:30:dd:26:31:51:49:56:3f:42:00:ba:63:37:
51:ab:7e:3e:59:c3:9f:95:99:bf:7e:22:43:df:ea:
62:4f:b0:71:3b:7d:a9:80:6f:be:51:68:15:ff:f2:
06:66:5f:6b:08:0a:e0:bb:ac:ed:bd:3f:d2:f2:8b:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:84:0A:30:6E:72:75:52:4D:1E:86:B9:C1:66:38:34:36:B9:D6:30
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/AIQKMG5ydVJNHoa5wWY4NDa51jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.140.60.0/22
195.34.18.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:c2:76:ca:1d:02:c1:68:5b:81:d1:12:88:e8:79:77:05:a9:
54:48:08:66:8c:7c:49:0b:f4:de:5c:80:a2:cc:8c:86:d0:0f:
da:5f:73:97:59:ff:89:65:1c:c9:12:9b:23:57:38:2c:2e:c0:
7d:1a:da:5c:e6:eb:e2:68:83:3f:7d:09:8c:1c:e5:10:6f:09:
be:01:a3:08:e7:2f:ce:88:30:f0:22:26:4f:07:d6:2e:86:65:
91:7d:ca:39:a5:fa:98:d6:d0:98:a1:cb:3f:b4:4d:8d:80:55:
dc:49:10:6e:b3:02:9d:95:78:44:54:84:b6:7b:de:23:3a:cb:
02:4d:2e:47:97:ba:18:0c:7c:d0:60:15:07:ee:87:ef:5d:ce:
ee:60:d9:fa:b3:80:78:02:d1:c1:9f:76:9b:1c:f7:1b:23:59:
57:98:3d:49:a2:5e:a5:04:7d:14:6d:90:45:f9:8c:cc:6a:ae:
f4:68:41:51:2f:57:d1:19:86:5d:fe:34:cc:13:15:8e:2d:a9:
44:12:d0:2e:3d:84:5e:8a:30:c0:a4:9e:2a:57:4b:e4:2b:e6:
97:41:59:8f:f2:a8:f2:73:ba:8a:2a:1d:9f:d6:0d:5c:41:c0:
b2:86:bf:ac:10:fd:43:b2:4a:0d:57:f5:26:f8:ae:92:f9:e5:
d5:bd:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:27 2025 by rpki-client