Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/O5QhbWQn7dWKFexdmAB0vuhHoFI.roa
File: O5QhbWQn7dWKFexdmAB0vuhHoFI.roa (raw, json)
Hash identifier: /pwNLph/P93dkfSWFLVF4Own/TwxuOW3vKc23GnS0Fk=
Subject key identifier: 3B:94:21:6D:64:27:ED:D5:8A:15:EC:5D:98:00:74:BE:E8:47:A0:52
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 019423D71C32D8D2D239921208C315E9475A
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/O5QhbWQn7dWKFexdmAB0vuhHoFI.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12601
IP address blocks: 64.126.192.0/23 maxlen: 23
64.126.194.0/23 maxlen: 23
64.126.200.0/22 maxlen: 22
64.126.208.0/24 maxlen: 24
64.126.209.0/24 maxlen: 24
64.126.212.0/22 maxlen: 22
64.126.212.0/24 maxlen: 24
80.94.176.0/22 maxlen: 22
80.94.182.0/23 maxlen: 23
80.94.184.0/24 maxlen: 24
80.94.185.0/24 maxlen: 24
80.94.188.0/23 maxlen: 23
185.113.40.0/22 maxlen: 22
185.194.80.0/22 maxlen: 22
185.211.140.0/22 maxlen: 22
194.5.134.0/24 maxlen: 24
194.126.236.0/24 maxlen: 24
213.159.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1c:32:d8:d2:d2:39:92:12:08:c3:15:e9:47:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b94216d6427edd58a15ec5d980074bee847a052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:f9:01:ee:b6:91:57:89:65:a0:7c:48:4b:
68:6c:ed:43:04:aa:37:41:05:17:74:fb:e8:e5:3c:
01:9c:b6:30:74:80:e7:94:0e:39:1a:52:b4:8a:65:
81:22:15:95:37:cc:e8:27:04:02:9b:8a:d3:d0:8b:
d2:01:c3:59:b6:2f:7a:50:b6:83:80:0f:bb:c5:35:
41:19:0f:12:f6:68:b3:77:a5:22:ad:65:fd:fa:df:
a0:16:c8:78:af:19:95:44:d0:a0:e5:79:84:2a:15:
a7:46:c9:41:80:66:82:c4:b2:c2:4c:96:4d:5b:6a:
cb:a2:ac:6d:33:20:08:e4:6b:17:37:e7:ce:2a:ad:
3b:98:05:52:97:6c:75:5a:8d:55:95:21:01:49:1d:
0d:ac:c4:9f:d6:64:a1:cd:1b:1b:b8:3d:a9:64:f9:
34:a8:ca:9a:57:93:ce:b3:06:4b:60:28:6c:60:ab:
1a:37:8a:a2:71:8b:61:d4:c2:aa:e3:7e:e6:94:85:
ba:11:47:b3:4c:98:d7:bc:15:62:4b:f0:c9:45:ff:
ff:c7:42:bd:23:f4:74:44:fc:4e:cb:d1:ed:1b:75:
af:5c:d8:07:73:c3:2e:f6:25:64:11:6d:95:32:12:
4a:6e:89:d1:0f:b4:b0:a1:8a:80:da:08:57:87:77:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:94:21:6D:64:27:ED:D5:8A:15:EC:5D:98:00:74:BE:E8:47:A0:52
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/O5QhbWQn7dWKFexdmAB0vuhHoFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.126.192.0/22
64.126.200.0/22
64.126.208.0/23
64.126.212.0/22
80.94.176.0/22
80.94.182.0-80.94.185.255
80.94.188.0/23
185.113.40.0/22
185.194.80.0/22
185.211.140.0/22
194.5.134.0/24
194.126.236.0/24
213.159.9.0/24
Signature Algorithm: sha256WithRSAEncryption
21:42:fa:ea:bd:0f:da:57:ef:7e:aa:d8:d0:b7:80:8e:89:71:
f3:75:47:82:b1:19:5a:26:63:26:f0:6f:da:ba:0e:d6:02:aa:
ea:e8:49:b3:9d:f4:6a:24:66:f3:da:da:0c:71:14:aa:d3:96:
95:a9:31:3c:db:f8:2f:57:99:ca:38:f3:71:ac:2f:37:95:c7:
a6:70:25:d2:ec:3a:92:57:a7:db:33:26:79:a6:6b:7d:50:25:
69:c5:b7:12:5b:d9:78:63:8a:a8:e6:bf:63:6e:aa:eb:10:df:
4e:cb:34:6b:35:8a:c4:3d:cb:2c:dd:ab:e2:cf:b3:16:3f:dc:
52:b8:3b:7f:fd:d7:d0:77:1e:d9:7e:ee:b2:7c:f7:b0:50:49:
74:96:39:b4:3e:48:20:31:36:7a:08:ca:0f:93:47:44:fe:9a:
e9:8d:69:f7:99:80:2b:32:61:7a:39:e4:7f:9d:6d:bd:e4:f0:
1f:ca:69:22:e8:f5:ae:c2:63:95:1c:f4:13:56:cd:53:15:ac:
75:cc:85:94:de:c8:72:a3:3c:60:ff:8e:69:c0:bc:f3:90:d7:
ea:a2:ed:05:5f:fd:d0:99:0f:81:d9:7b:74:0c:e6:c4:2e:d0:
95:04:64:42:9d:32:64:aa:1a:49:af:81:3c:aa:17:fc:d0:9d:
9c:30:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:26:49 2025 by rpki-client