Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa
File: a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa (raw, json)
Hash identifier: 9QeK1R+lwAXK6vSpE67n1ijYEIdp5QQxcwabJABYuQ0=
Subject key identifier: 6B:B8:F8:69:3A:11:A7:E4:5F:D0:8A:B2:78:1C:8D:17:D3:9C:B1:FC
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019427481949C7B25F8D331848A0B5C015F6
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35753
IP address blocks: 80.240.64.0/20 maxlen: 20
82.167.0.0/16 maxlen: 16
82.167.0.0/17 maxlen: 17
82.167.64.0/22 maxlen: 22
82.167.68.0/22 maxlen: 22
82.167.72.0/22 maxlen: 22
82.167.76.0/22 maxlen: 22
82.167.80.0/22 maxlen: 22
82.167.84.0/22 maxlen: 22
82.167.88.0/22 maxlen: 22
82.167.92.0/22 maxlen: 22
82.167.96.0/22 maxlen: 22
82.167.100.0/22 maxlen: 22
82.167.104.0/22 maxlen: 22
82.167.108.0/22 maxlen: 22
82.167.112.0/22 maxlen: 22
82.167.116.0/22 maxlen: 22
82.167.120.0/22 maxlen: 22
82.167.124.0/22 maxlen: 22
82.167.128.0/19 maxlen: 19
82.167.144.0/22 maxlen: 22
82.167.148.0/22 maxlen: 22
82.167.152.0/22 maxlen: 22
82.167.156.0/22 maxlen: 22
82.167.160.0/22 maxlen: 22
82.167.164.0/22 maxlen: 22
82.167.168.0/22 maxlen: 22
82.167.172.0/22 maxlen: 22
82.167.180.0/22 maxlen: 22
82.167.180.0/23 maxlen: 23
82.167.192.0/18 maxlen: 18
82.167.192.0/20 maxlen: 20
82.167.208.0/20 maxlen: 20
82.167.224.0/21 maxlen: 21
82.167.232.0/21 maxlen: 21
82.167.240.0/22 maxlen: 22
82.167.244.0/22 maxlen: 22
82.167.248.0/24 maxlen: 24
82.167.249.0/24 maxlen: 24
82.167.250.0/23 maxlen: 23
82.167.252.0/23 maxlen: 23
82.167.254.0/23 maxlen: 23
82.167.254.0/24 maxlen: 24
82.167.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:19:49:c7:b2:5f:8d:33:18:48:a0:b5:c0:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bb8f8693a11a7e45fd08ab2781c8d17d39cb1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:f3:e4:b5:35:05:e5:87:18:43:46:02:17:
46:39:a6:06:2c:a8:0c:e7:5f:a6:c3:16:f5:41:cb:
15:dd:5e:da:11:e6:a4:0b:65:2f:bd:75:39:9f:7e:
ad:9a:6f:3c:7e:b7:1a:14:4d:00:5e:00:f4:c9:5e:
1c:cf:59:1e:27:48:6c:ef:76:a5:39:f6:57:3b:82:
78:c3:b7:de:41:19:3e:ab:63:65:69:e9:af:74:ba:
0b:7c:29:9c:1c:6d:c7:e0:62:5d:2c:21:a9:52:37:
98:a5:4c:ee:98:75:6e:d5:95:12:8f:ff:41:f5:b5:
06:f6:1d:00:d4:87:a5:25:b5:40:3e:39:c3:1f:5c:
91:cc:fb:bd:ec:4f:37:76:4a:fd:c0:cf:98:17:80:
69:e4:4a:7c:49:54:0f:bc:90:25:88:0f:59:99:17:
4b:e9:6a:99:61:e9:42:45:39:3c:f6:71:09:bd:35:
77:e4:27:f8:39:17:14:48:8b:79:40:9f:74:59:07:
15:ef:30:cd:52:b5:48:73:58:ef:82:df:0c:70:69:
8c:7e:f5:5a:45:9b:69:c7:6b:3c:6b:6d:5f:bc:9a:
72:d7:33:8f:4c:66:19:86:b5:0f:79:7a:d6:74:e1:
8b:69:93:0d:55:b5:42:43:b0:6e:d3:f7:bc:93:54:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B8:F8:69:3A:11:A7:E4:5F:D0:8A:B2:78:1C:8D:17:D3:9C:B1:FC
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.64.0/20
82.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:2f:7d:d3:56:a8:fb:60:6f:ce:ef:dc:61:7d:7b:f9:6a:6c:
2c:e8:52:22:8f:09:44:68:e9:f6:ff:d2:24:ec:ca:94:22:8e:
a6:3b:e0:da:e5:12:b2:6b:06:9b:cc:2f:70:79:32:bc:e9:48:
28:19:73:62:12:23:88:eb:18:14:29:c5:47:85:ce:03:56:ee:
41:16:ed:77:17:60:4d:fc:2b:58:28:8a:2f:5a:9d:49:d2:2a:
41:db:a6:b1:46:83:06:b9:d8:04:1f:32:c6:da:ab:88:62:a7:
39:69:4b:db:7d:98:c2:f6:5c:e8:ce:2f:ac:4d:57:76:28:14:
8e:d1:9c:40:e6:62:13:6c:be:3d:15:06:5f:58:8e:c6:1f:f1:
16:52:e5:44:cc:f2:89:a1:27:7e:85:b6:ea:e7:e4:7c:88:60:
1a:4a:2e:86:47:ba:fa:63:ac:2d:01:46:e5:86:33:6b:bd:4a:
43:3e:c5:84:72:dd:7e:91:e8:2f:59:28:72:26:22:ad:43:5f:
d3:53:7c:ea:1e:9e:62:8f:59:31:a6:b1:6d:5c:e8:3a:37:bf:
75:c9:b4:b4:b7:d5:53:7a:29:4b:d1:7f:9c:7b:9d:89:c8:a6:
c7:d8:5a:e8:69:7f:91:d9:17:83:12:ef:71:21:03:62:e1:5e:
ea:94:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:15 2025 by rpki-client