Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/8lcvOAYawA8m44njSriAA46ohqM.roa
File: 8lcvOAYawA8m44njSriAA46ohqM.roa (raw, json)
Hash identifier: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=
Subject key identifier: F2:57:2F:38:06:1A:C0:0F:26:E3:89:E3:4A:B8:80:03:8E:A8:86:A3
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 019423D6E1319E69FF09E84E7530FFF5C8E5
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/8lcvOAYawA8m44njSriAA46ohqM.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35518
IP address blocks: 46.245.184.0/21 maxlen: 21
87.245.64.0/18 maxlen: 18
88.151.144.0/21 maxlen: 21
88.213.128.0/18 maxlen: 18
91.102.192.0/21 maxlen: 21
185.43.200.0/22 maxlen: 22
193.134.4.0/22 maxlen: 22
2a00:d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e1:31:9e:69:ff:09:e8:4e:75:30:ff:f5:c8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2572f38061ac00f26e389e34ab880038ea886a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:6f:46:9d:54:5c:05:82:14:04:f8:47:3b:
4d:36:83:98:b1:ef:0c:39:87:c1:40:92:b3:52:e9:
ee:a4:17:69:ad:69:ce:f6:7b:05:58:18:38:dc:ad:
2b:4e:f3:f5:73:d1:3e:d4:d6:7c:f8:26:91:4e:c7:
37:5e:24:59:60:d5:e9:74:8c:91:26:63:e8:a4:0d:
b9:e6:78:c7:e0:7f:78:2c:54:cf:1f:4e:1a:ac:33:
5b:5e:e2:10:62:1d:e7:3f:2e:0f:47:2f:52:32:10:
84:81:fb:c1:b8:b9:62:ef:34:31:4b:ea:ad:a0:f7:
ab:36:57:38:ff:aa:2f:dc:f6:a1:19:15:1e:93:b2:
fd:aa:a6:f9:4d:75:91:93:c8:a3:f6:0f:5f:c9:c5:
5b:cc:78:39:72:c3:5e:8e:87:d9:51:c6:54:de:3e:
83:d1:94:fd:03:cb:b8:a7:2b:63:2e:b3:8f:85:9e:
4a:56:89:e6:a8:43:c1:1d:3c:38:98:a0:e3:b7:c6:
f2:6c:95:3d:aa:d0:47:aa:5f:ce:f3:e0:3e:65:40:
42:6a:1d:db:4c:bf:46:b5:3b:0f:91:7c:42:9e:36:
08:35:fe:50:b1:c9:e3:96:66:af:1d:79:3d:58:27:
36:c5:b0:f7:7d:1e:16:a9:cb:b6:3e:28:cd:9f:86:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:2F:38:06:1A:C0:0F:26:E3:89:E3:4A:B8:80:03:8E:A8:86:A3
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/8lcvOAYawA8m44njSriAA46ohqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.184.0/21
87.245.64.0/18
88.151.144.0/21
88.213.128.0/18
91.102.192.0/21
185.43.200.0/22
193.134.4.0/22
IPv6:
2a00:d80::/29
Signature Algorithm: sha256WithRSAEncryption
88:79:42:0e:21:b8:18:1d:3f:62:96:a6:83:8f:62:58:2b:ad:
f9:b8:d8:df:3e:fc:c0:67:6c:48:0c:92:69:14:73:2f:1b:8a:
b6:65:02:31:20:80:35:a3:fe:bf:3e:26:26:14:8e:f6:5d:a6:
52:31:9f:a3:69:8e:08:39:b8:cf:00:87:45:3b:6f:a7:95:bc:
f2:b4:8b:e9:27:6a:11:86:90:b0:aa:ca:45:ec:0e:08:e8:0c:
20:bc:46:e1:9a:e1:a9:9b:61:b5:b0:56:82:fd:5b:32:21:f9:
73:58:c2:85:b2:7b:32:a3:f3:b2:3d:dd:46:6b:e0:7b:fe:f9:
e2:4b:ad:ed:14:d9:53:e4:94:26:cd:4b:85:b3:52:b7:e6:65:
b8:eb:f1:16:89:cd:2e:e1:7a:12:f8:6d:be:b1:41:5b:f2:89:
64:10:94:a6:d0:c8:65:d2:27:ba:ee:ca:9f:16:0e:79:aa:31:
d2:cf:4b:e7:5f:01:30:ff:31:e4:f8:c9:cc:78:5c:3c:dc:94:
31:2d:7a:01:9c:72:c5:52:82:f3:80:55:1e:f3:f1:dc:80:c7:
3e:e4:ea:a7:06:1b:bb:28:4a:ac:30:1e:ba:ae:1e:44:d5:9a:
c1:12:6c:d2:70:08:36:c4:bd:e5:94:de:73:47:ff:a1:43:00:
bd:fd:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:06 2025 by rpki-client