Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/14Kld9FlTNpIEyy4ZZSIDPLCHyk.roa
File: 14Kld9FlTNpIEyy4ZZSIDPLCHyk.roa (raw, json)
Hash identifier: 34XSzdoN0Twcs64CD2UYU1J4NUP6HurtAkddMACEjC4=
Subject key identifier: D7:82:A5:77:D1:65:4C:DA:48:13:2C:B8:65:94:88:0C:F2:C2:1F:29
Certificate issuer: /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Certificate serial: 019484113131A577B520AE211CAE9942248E
Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/14Kld9FlTNpIEyy4ZZSIDPLCHyk.roa
Signing time: Mon 20 Jan 2025 14:15:06 +0000
ROA not before: Mon 20 Jan 2025 14:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59706
IP address blocks: 62.164.148.0/22 maxlen: 22
62.164.148.0/24 maxlen: 24
62.164.149.0/24 maxlen: 24
62.164.150.0/24 maxlen: 24
62.164.151.0/24 maxlen: 24
62.164.154.0/23 maxlen: 23
62.164.154.0/24 maxlen: 24
62.164.155.0/24 maxlen: 24
77.83.56.0/23 maxlen: 23
77.83.56.0/24 maxlen: 24
77.83.57.0/24 maxlen: 24
185.137.152.0/22 maxlen: 22
185.137.152.0/24 maxlen: 24
185.137.153.0/24 maxlen: 24
185.137.154.0/24 maxlen: 24
185.137.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:11:31:31:a5:77:b5:20:ae:21:1c:ae:99:42:24:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Validity
Not Before: Jan 20 14:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d782a577d1654cda48132cb86594880cf2c21f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:7a:c8:48:fc:91:d1:ad:d7:22:a5:18:4a:
f1:b7:9e:41:92:27:f2:e2:ec:06:0f:67:cf:c0:1c:
f6:b8:28:36:51:37:06:f2:1b:55:a5:d8:fe:1d:26:
a8:fc:9c:c9:11:35:c8:45:3f:14:a0:93:8b:54:f0:
7b:f1:22:37:e2:c4:4e:b2:4b:e6:33:41:d0:3d:1b:
13:00:f7:3e:5a:b2:51:0e:de:57:44:27:4b:03:8b:
b0:33:de:b4:65:3f:0a:a7:f3:a7:09:2b:72:72:7d:
fc:1d:a5:2a:65:d3:3a:4b:ba:f5:85:0e:24:36:63:
56:75:49:38:d7:5f:f4:59:14:ac:a4:87:58:94:a8:
ab:60:54:8c:fc:29:c5:e8:d6:bf:bb:c7:13:b9:ac:
b9:dd:b7:cb:22:23:bc:ff:6a:a0:e3:6b:61:9f:6c:
6b:bb:49:0f:6b:b6:31:7d:2f:f1:c4:e8:b5:10:8b:
8f:51:9c:2f:3a:5a:f4:98:2e:8f:59:5d:30:d1:9b:
e3:83:0e:f4:92:77:85:6f:a8:3c:1a:d8:11:9f:28:
7d:4c:b2:9a:f6:03:c3:35:fe:44:e0:31:d5:de:ab:
ce:1f:cc:5a:9b:6c:5a:9c:05:be:47:fa:9a:f4:b1:
65:47:de:b7:bb:a9:49:e4:9d:4d:e4:d1:65:37:af:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:A5:77:D1:65:4C:DA:48:13:2C:B8:65:94:88:0C:F2:C2:1F:29
X509v3 Authority Key Identifier:
keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/14Kld9FlTNpIEyy4ZZSIDPLCHyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.148.0/22
62.164.154.0/23
77.83.56.0/23
185.137.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:bf:66:3b:57:27:c4:86:ea:a6:5d:80:b8:e0:a6:e7:e2:a0:
af:57:50:19:f0:60:35:98:2f:e2:8e:11:28:02:63:24:44:da:
4f:c0:73:b8:6d:2c:be:e0:c5:f3:77:90:a8:99:e6:59:5c:69:
ed:e2:47:ba:52:fe:f3:a7:29:81:08:d0:b7:04:ae:ef:61:af:
66:ae:69:f8:88:cb:1b:aa:cc:7b:cc:a5:26:03:c0:dd:37:a0:
af:37:40:ef:56:4e:7b:67:e2:13:2c:e7:2e:80:4d:5e:e3:4d:
90:39:d6:79:7f:02:a9:e7:f0:62:95:5e:40:84:76:3e:ad:8d:
28:f7:07:6d:0f:ea:cd:88:5b:27:d1:eb:e3:03:37:36:ce:9e:
b4:3f:b9:9c:74:8a:0e:15:55:8e:8b:5e:1b:c7:2e:be:28:c9:
b8:40:3e:8f:22:fc:1f:35:03:76:5d:99:e2:2e:aa:10:11:39:
ad:4f:07:f3:b1:29:a2:db:61:9e:c5:99:29:ba:b9:73:f2:05:
e8:09:bb:64:88:36:2e:01:82:8a:5f:eb:4b:41:a0:2d:a7:33:
97:31:44:6c:33:56:7b:4e:8b:1a:f2:11:53:de:39:71:aa:87:
c5:c1:aa:89:73:ce:df:40:11:5a:16:81:2d:fc:19:a0:ec:c7:
5f:5d:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:48:49 2025 by rpki-client