Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/26Ql46wwxTj7VjacCW6urnh7gz4.roa
File: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (raw, json)
Hash identifier: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=
Subject key identifier: DB:A4:25:E3:AC:30:C5:38:FB:56:36:9C:09:6E:AE:AE:78:7B:83:3E
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 019425218387AD880DE6CA916B9EF3D6EEA1
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/26Ql46wwxTj7VjacCW6urnh7gz4.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13193
IP address blocks: 5.23.40.0/21 maxlen: 24
62.212.96.0/19 maxlen: 24
78.40.48.0/21 maxlen: 24
79.170.216.0/21 maxlen: 24
80.65.224.0/20 maxlen: 24
80.248.208.0/20 maxlen: 24
93.184.32.0/20 maxlen: 24
171.25.208.0/22 maxlen: 24
178.132.16.0/20 maxlen: 24
185.33.40.0/22 maxlen: 24
185.43.68.0/22 maxlen: 24
194.79.128.0/18 maxlen: 24
194.146.224.0/22 maxlen: 24
194.242.112.0/22 maxlen: 24
195.5.192.0/18 maxlen: 18
213.41.128.0/17 maxlen: 24
213.215.0.0/18 maxlen: 24
2001:7a8::/32 maxlen: 32
2a01:68::/32 maxlen: 32
2a01:6460::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:83:87:ad:88:0d:e6:ca:91:6b:9e:f3:d6:ee:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dba425e3ac30c538fb56369c096eaeae787b833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:50:1f:6e:df:66:01:79:79:52:ab:47:cc:
ed:77:88:d4:66:78:cf:ae:7a:f2:4c:82:ae:f6:a7:
ed:76:75:f8:9f:9e:6b:4c:de:db:b5:15:c9:e8:ce:
fb:d0:c6:13:48:4c:18:ab:d3:19:e7:fc:ec:b9:4f:
07:ae:72:33:55:88:fe:ed:6f:83:05:19:db:e6:01:
15:8f:60:07:c8:56:23:07:ad:30:af:4c:86:36:67:
4c:36:34:a3:f2:35:86:4e:d1:c3:6e:d6:96:3e:2b:
0a:9f:c0:82:f3:00:c6:39:fe:db:48:c5:10:6c:86:
78:70:0b:a2:0c:8d:e5:96:a2:b3:80:1e:8c:59:2b:
5b:80:20:f1:58:10:45:ea:6a:48:ed:11:3a:37:11:
a1:b8:1e:11:99:8d:13:4e:f9:cf:8a:89:21:1d:b2:
44:24:4e:cb:46:c2:5e:c5:ee:93:50:c1:22:2e:de:
7a:82:68:60:18:f0:b8:1f:2a:b6:dd:6d:18:72:b5:
6b:9a:d3:6c:e9:05:58:66:6d:26:c7:03:d6:83:02:
7c:ba:97:47:0b:7b:0d:b9:15:97:9f:9c:75:8d:d0:
a2:fa:b7:6b:e7:c9:13:49:8d:6b:50:ab:b9:2e:c4:
ee:81:e4:5e:b4:5e:29:de:03:e0:1d:b4:0a:92:74:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A4:25:E3:AC:30:C5:38:FB:56:36:9C:09:6E:AE:AE:78:7B:83:3E
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/26Ql46wwxTj7VjacCW6urnh7gz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.40.0/21
62.212.96.0/19
78.40.48.0/21
79.170.216.0/21
80.65.224.0/20
80.248.208.0/20
93.184.32.0/20
171.25.208.0/22
178.132.16.0/20
185.33.40.0/22
185.43.68.0/22
194.79.128.0/18
194.146.224.0/22
194.242.112.0/22
195.5.192.0/18
213.41.128.0/17
213.215.0.0/18
IPv6:
2001:7a8::/32
2a01:68::/32
2a01:6460::/32
Signature Algorithm: sha256WithRSAEncryption
70:4a:1c:29:97:a7:56:67:93:34:7d:da:3a:ef:30:97:95:9a:
9b:24:2b:b0:97:d5:6e:36:8b:d2:16:2b:14:b5:11:1f:4c:65:
cf:6b:56:ad:23:69:8b:5c:ff:50:b1:61:96:09:03:71:04:1e:
09:27:c3:b4:7d:c6:d0:db:09:c6:f9:53:ed:25:ab:35:ac:ef:
29:d8:47:ee:96:53:48:6f:fd:c0:b5:61:06:2b:08:a5:ef:65:
71:e1:fb:2b:7f:76:bc:e7:99:35:b3:85:5a:d0:6d:c3:b3:08:
de:b3:15:16:0b:d2:19:9e:42:cb:53:44:c3:bb:93:e8:7a:bb:
6a:a1:f5:a8:9e:c3:1b:f3:91:4b:ab:93:c2:ca:bc:97:70:46:
65:7f:d2:40:f1:65:34:ce:c4:0a:e6:14:8a:ef:3e:bc:f2:81:
b3:b0:fd:48:35:27:84:a4:59:37:ec:39:33:bb:49:b8:08:1c:
aa:5b:6a:5e:11:7c:bc:95:71:0b:06:35:b0:89:0b:88:d6:ff:
26:f2:88:47:b9:49:66:86:87:9d:a9:1b:44:7e:a6:f9:59:c0:
74:63:b3:2a:ba:5d:4d:72:ae:8c:59:bc:cd:28:e4:18:ec:1e:
c1:a1:00:be:2b:78:55:97:b6:b1:1f:2f:65:1f:6e:56:d1:86:
c4:7b:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:05 2025 by rpki-client