Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/32CQUiCUfdquX7Jbo_dmPVa4RAU.roa
File: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (raw, json)
Hash identifier: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=
Subject key identifier: DF:60:90:52:20:94:7D:DA:AE:5F:B2:5B:A3:F7:66:3D:56:B8:44:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 0194214456F60449B46F2E2CE5CC3E42C618
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/32CQUiCUfdquX7Jbo_dmPVa4RAU.roa
Signing time: Wed 01 Jan 2025 09:48:34 +0000
ROA not before: Wed 01 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48434
IP address blocks: 94.232.168.0/21 maxlen: 27
185.37.52.0/22 maxlen: 27
185.78.20.0/22 maxlen: 27
185.232.152.0/22 maxlen: 27
185.232.153.0/24 maxlen: 27
185.232.154.0/23 maxlen: 27
185.232.154.0/24 maxlen: 27
185.232.155.0/24 maxlen: 27
2a04:6e00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:56:f6:04:49:b4:6f:2e:2c:e5:cc:3e:42:c6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df60905220947ddaae5fb25ba3f7663d56b84405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:6f:13:82:35:f9:91:a3:02:15:72:fd:50:
10:61:f6:94:f5:be:4a:ab:bd:df:ce:ff:03:b1:26:
f7:0f:8a:ae:43:14:7a:ff:67:f7:81:98:f9:38:c4:
2b:6d:da:a6:29:73:84:8f:db:95:ba:28:81:34:19:
01:b6:76:d6:b9:f1:97:eb:a6:46:dd:70:09:c6:79:
ea:ef:93:1a:7c:99:1f:1d:c8:95:dd:0e:30:ad:91:
57:66:dd:d4:2e:92:c2:de:11:b7:78:68:2f:3e:64:
a3:3e:2e:c1:53:59:fc:4d:ca:f6:7d:b6:07:d6:ec:
6a:45:73:d1:fa:d5:ca:83:94:d0:52:c9:fa:ea:01:
b3:90:31:81:5c:42:52:a6:b3:2b:bf:52:e4:85:65:
c1:3e:1b:19:b2:0e:43:98:f8:2a:c2:0f:95:41:1f:
f2:97:19:ab:dd:6a:03:35:01:ed:ff:d2:aa:48:75:
df:26:7a:4c:17:9b:18:86:e9:c8:ab:92:78:42:f9:
b4:ce:7b:21:72:01:43:c3:ad:03:20:82:19:ee:62:
8f:47:2d:81:05:cb:ee:4e:75:41:e2:2d:c3:37:38:
5c:a2:45:56:98:c0:61:9a:92:52:6c:03:6a:26:1c:
d5:4c:63:ba:c0:5e:b5:ee:38:5d:87:fb:56:57:8f:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:90:52:20:94:7D:DA:AE:5F:B2:5B:A3:F7:66:3D:56:B8:44:05
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/32CQUiCUfdquX7Jbo_dmPVa4RAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.168.0/21
185.37.52.0/22
185.78.20.0/22
185.232.152.0/22
IPv6:
2a04:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
6a:9e:58:f0:2b:93:df:7f:7a:2b:3a:9b:f8:0c:26:b7:d1:c9:
6d:7b:61:a4:5c:7b:17:9d:44:a4:7b:9b:ca:29:e8:d3:69:dc:
c6:a2:c4:17:aa:4c:12:52:5f:89:27:42:51:92:11:55:bf:2c:
c6:bf:80:7a:2a:48:8e:7b:d4:33:99:72:58:a9:42:fa:9c:d3:
2c:e9:48:cc:f9:89:1f:59:63:41:e4:89:b1:9d:c4:9e:e4:c4:
03:33:c9:d1:ce:60:97:4c:07:18:1d:78:9d:ea:a8:18:2a:21:
83:51:fe:12:de:5f:26:fe:5c:63:90:d1:50:4a:24:fa:ed:67:
65:ba:27:95:fc:2c:d9:57:5b:8d:21:3d:47:42:89:40:c4:05:
f0:fe:74:41:2f:71:f2:9b:75:8d:ec:b3:1c:37:e7:2f:05:1f:
fc:9d:78:ed:ce:89:7c:72:5e:a9:d6:f9:17:39:03:fb:e6:28:
ad:03:b3:be:e4:e5:36:af:0c:78:2b:b1:24:21:9e:68:57:56:
c6:db:0c:4c:d0:4d:20:58:1e:39:9b:b4:a0:a6:ca:a7:6e:43:
55:4e:a4:3b:35:40:45:24:9d:b6:c8:22:5a:ac:55:85:8f:c9:
61:ae:fe:c4:a5:1c:c5:6f:f9:04:fb:0f:58:79:6a:42:d7:7b:
14:3e:bd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:25 2025 by rpki-client