Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/e6_LhXTjf-f7BeHN6H1yNQzFGts.roa
File: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (raw, json)
Hash identifier: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=
Subject key identifier: 7B:AF:CB:85:74:E3:7F:E7:FB:05:E1:CD:E8:7D:72:35:0C:C5:1A:DB
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 019422FBA22E105E87BCAFE5EC5FB109B325
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/e6_LhXTjf-f7BeHN6H1yNQzFGts.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6696
IP address blocks: 5.149.136.0/23 maxlen: 23
5.149.138.0/24 maxlen: 24
5.149.140.0/23 maxlen: 23
5.149.142.0/24 maxlen: 24
37.19.8.0/21 maxlen: 24
46.18.33.0/24 maxlen: 24
46.18.34.0/23 maxlen: 24
46.18.36.0/22 maxlen: 24
62.112.29.0/24 maxlen: 24
62.112.31.0/24 maxlen: 24
85.88.34.0/24 maxlen: 24
85.119.216.0/21 maxlen: 24
86.107.120.0/22 maxlen: 22
86.107.124.0/23 maxlen: 23
86.107.126.0/24 maxlen: 24
87.238.225.0/24 maxlen: 24
87.238.228.0/22 maxlen: 24
94.139.39.0/24 maxlen: 24
109.69.216.0/23 maxlen: 24
109.69.217.16/28 maxlen: 28
109.69.219.0/24 maxlen: 24
109.69.220.0/23 maxlen: 23
109.69.220.0/24 maxlen: 24
109.69.221.0/24 maxlen: 24
109.69.221.192/28 maxlen: 28
109.69.222.0/24 maxlen: 24
185.64.64.0/22 maxlen: 24
185.185.228.0/24 maxlen: 24
185.185.229.0/24 maxlen: 24
2a00:1528::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a2:2e:10:5e:87:bc:af:e5:ec:5f:b1:09:b3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bafcb8574e37fe7fb05e1cde87d72350cc51adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:ef:0c:d3:35:c7:44:07:df:8f:ad:b4:6e:
b2:ac:4e:f5:64:d9:d3:21:18:02:01:64:4e:1a:6a:
b2:52:31:63:df:bc:67:9d:b4:46:49:03:45:af:25:
92:8d:51:2e:57:87:4f:ac:33:98:a8:76:73:88:0f:
7a:c2:47:7d:c1:1a:ed:4c:be:d7:02:25:77:25:a7:
ff:63:a1:b2:8c:ed:ed:0e:6e:4b:53:1f:40:b6:f4:
58:5b:28:c8:62:fd:63:cb:1d:5e:8a:77:65:c6:ca:
02:4f:93:b5:bf:f2:36:23:04:2a:ca:ca:04:3d:a9:
04:b8:66:b5:61:d1:28:1c:6f:88:dc:c9:8b:72:16:
aa:30:22:d8:b2:ce:e5:56:76:cb:4b:50:4f:c3:15:
ab:5d:58:83:e9:e1:d0:16:87:1c:ed:09:75:22:a3:
97:ed:cc:b5:36:3a:e5:f4:8e:d5:2f:da:03:b6:20:
e5:d6:c2:7f:34:7b:dd:50:81:8c:9a:7d:0e:7f:92:
47:8c:79:f4:9c:07:69:9e:c5:32:19:f7:a7:05:71:
1a:cc:51:a5:33:c6:c2:42:4a:9e:4d:ef:7a:cc:45:
62:97:e8:ea:f0:80:40:c1:94:cd:89:8d:aa:36:34:
52:67:bc:ec:c2:3c:78:eb:0c:c2:03:f3:c5:37:49:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AF:CB:85:74:E3:7F:E7:FB:05:E1:CD:E8:7D:72:35:0C:C5:1A:DB
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/e6_LhXTjf-f7BeHN6H1yNQzFGts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.136.0-5.149.138.255
5.149.140.0-5.149.142.255
37.19.8.0/21
46.18.33.0-46.18.39.255
62.112.29.0/24
62.112.31.0/24
85.88.34.0/24
85.119.216.0/21
86.107.120.0-86.107.126.255
87.238.225.0/24
87.238.228.0/22
94.139.39.0/24
109.69.216.0/23
109.69.219.0-109.69.222.255
185.64.64.0/22
185.185.228.0/23
IPv6:
2a00:1528::/32
Signature Algorithm: sha256WithRSAEncryption
80:13:db:15:0c:42:af:03:80:b4:7c:9d:f0:4e:eb:0e:01:af:
c7:82:02:b4:d5:4f:b3:f0:f1:d7:4c:93:2a:17:3a:36:e4:ae:
fc:2c:c7:f2:2d:48:56:b6:31:60:be:9c:18:fb:34:d5:40:6c:
18:09:f4:0b:d2:c6:0e:d6:02:d8:c7:37:1c:7c:64:1f:af:64:
73:0f:97:b0:e7:e9:a5:7c:65:a4:fd:a8:81:1c:f5:53:97:b3:
eb:d2:c6:d5:d2:c4:18:01:6e:69:25:de:e9:c4:59:5d:a2:bf:
72:5e:71:7c:83:6d:61:38:cc:83:e6:a4:e9:ed:2f:d0:b6:f3:
00:82:2d:ed:f8:28:f3:4c:cf:11:ec:34:19:76:a4:14:7d:b8:
92:3c:a3:d0:a4:d3:66:00:3f:a5:d3:e3:be:56:ab:a2:99:46:
cc:a2:c0:fc:52:44:2d:8e:7c:a6:98:4b:0f:0d:0a:5a:96:7f:
a0:8f:88:35:c2:ba:0c:d6:0f:75:98:c4:7e:3c:36:3d:de:89:
13:4b:21:ce:57:bc:4a:e3:36:dc:05:88:ae:5e:ed:88:a8:b4:
07:dc:44:55:fe:ac:af:28:0b:1e:c1:95:15:31:eb:5b:cb:cc:
90:22:77:56:09:6e:26:08:00:9f:91:98:43:55:49:b8:32:97:
35:b7:cd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:11 2025 by rpki-client