Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa
File: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (raw, json)
Hash identifier: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=
Subject key identifier: 03:A2:46:5E:BD:52:CA:F1:F0:3D:2E:8A:CD:04:3C:8E:42:65:75:25
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 01946504A8D1A525D33173C79959B14A8CE7
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa
Signing time: Tue 14 Jan 2025 13:33:11 +0000
ROA not before: Tue 14 Jan 2025 13:33:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49964
IP address blocks: 37.19.8.0/21 maxlen: 24
46.18.33.0/24 maxlen: 24
46.18.34.0/23 maxlen: 24
46.18.34.0/24 maxlen: 24
46.18.35.0/24 maxlen: 24
46.18.36.0/22 maxlen: 24
46.18.36.0/24 maxlen: 24
46.18.37.0/24 maxlen: 24
46.18.38.0/24 maxlen: 24
46.18.39.0/24 maxlen: 24
62.112.29.0/24 maxlen: 24
62.112.31.0/24 maxlen: 24
85.119.216.0/21 maxlen: 24
109.69.216.0/23 maxlen: 24
109.69.217.16/28 maxlen: 28
109.69.219.0/24 maxlen: 24
109.69.220.0/24 maxlen: 24
109.69.221.0/24 maxlen: 24
109.69.221.192/28 maxlen: 28
109.69.222.0/24 maxlen: 24
185.185.228.0/24 maxlen: 24
185.185.229.0/24 maxlen: 24
185.185.231.0/24 maxlen: 24
2a00:1528::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:04:a8:d1:a5:25:d3:31:73:c7:99:59:b1:4a:8c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 14 13:33:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03a2465ebd52caf1f03d2e8acd043c8e42657525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:48:ab:fd:c2:af:fa:0f:0d:3c:c9:76:c9:
e8:a5:6c:9d:02:54:a6:99:63:01:59:60:67:92:4c:
4b:5e:77:ff:a5:d9:5a:8b:82:00:78:d0:b8:b2:f5:
c0:fa:71:cd:04:f6:8f:a2:84:69:66:af:d6:c3:ce:
e8:d1:21:0d:23:5e:16:14:65:c6:d2:c7:45:9e:e3:
14:9b:b9:e7:b0:13:74:4f:a0:59:62:92:16:98:7d:
06:8c:3b:6b:fe:07:e0:d8:ec:a9:a4:bd:17:ea:7f:
68:61:e7:a0:90:30:6c:3d:17:60:f0:ea:1e:69:80:
07:10:dd:ed:ae:9d:23:a5:cc:f9:0f:00:4b:e7:f8:
e7:d0:08:56:4f:e6:45:24:63:9c:b5:e3:9c:a9:ea:
9d:cd:6c:ee:03:bc:32:e0:f8:03:c9:a5:8a:0f:16:
48:b6:5b:24:77:5f:f2:e0:8a:99:c4:f7:7f:ef:26:
6e:c9:20:20:b4:93:95:ec:1a:aa:0a:38:bf:d5:d1:
dc:01:32:4e:8f:18:cc:c0:46:84:55:01:84:bf:05:
33:98:cd:4c:be:42:82:23:cf:c0:b1:29:e5:51:39:
76:90:bc:36:e6:1a:69:d2:c4:aa:cb:7b:2b:88:4f:
38:d9:9e:65:4c:ff:43:7a:ca:0e:9b:34:3c:bf:08:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:46:5E:BD:52:CA:F1:F0:3D:2E:8A:CD:04:3C:8E:42:65:75:25
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.8.0/21
46.18.33.0-46.18.39.255
62.112.29.0/24
62.112.31.0/24
85.119.216.0/21
109.69.216.0/23
109.69.219.0-109.69.222.255
185.185.228.0/23
185.185.231.0/24
IPv6:
2a00:1528::/32
Signature Algorithm: sha256WithRSAEncryption
34:2f:70:d9:bd:26:0b:57:2c:2c:a5:30:b7:ee:6d:b0:16:11:
97:dd:3c:c8:cf:63:7e:30:eb:3a:da:8e:2c:2b:76:7a:d5:6f:
52:ba:b8:f0:8e:83:45:d2:5d:34:dc:80:03:ee:b7:77:a6:16:
ee:9b:7a:ea:8a:cc:22:cb:ea:fa:e4:58:0a:d6:b5:ed:dc:5d:
f0:30:f4:31:ec:b4:26:2a:99:5f:29:26:19:25:5d:67:7f:a0:
5c:e5:bc:10:c8:69:01:42:71:34:1a:35:86:c5:16:11:8a:93:
56:20:4a:20:6c:24:c6:94:4b:04:c5:fc:b0:b1:6e:38:6e:35:
83:1d:cb:23:a8:37:e4:55:d3:1a:b7:b5:7b:27:c6:cc:a3:84:
1c:90:20:f7:fe:34:72:7e:25:3a:8f:15:ea:38:2a:1f:5e:45:
3e:12:69:5f:5e:f8:53:39:32:c9:bf:b5:51:7d:6f:cf:0c:9c:
01:53:48:f7:9f:cb:83:b3:ef:22:13:5d:36:68:d0:84:34:f3:
e1:3e:c5:68:18:cc:73:ec:18:20:24:43:cb:70:23:9a:67:b3:
d3:cc:77:9e:f8:ba:cf:a8:cb:0d:42:97:9f:8e:c1:6e:24:5d:
25:e9:6f:f8:2e:ed:80:cc:97:41:4d:92:5f:bf:1f:27:3f:60:
cc:1f:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:56 2025 by rpki-client