Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/cvihALfmaAmPqfCRAQfCnD556fE.roa
File: cvihALfmaAmPqfCRAQfCnD556fE.roa (raw, json)
Hash identifier: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=
Subject key identifier: 72:F8:A1:00:B7:E6:68:09:8F:A9:F0:91:01:07:C2:9C:3E:79:E9:F1
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 01941FFA932629E4ADD746E036DE393B3D65
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/cvihALfmaAmPqfCRAQfCnD556fE.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206250
IP address blocks: 185.42.84.0/22 maxlen: 22
2a01:62a0::/32 maxlen: 32
2a01:62a0:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:93:26:29:e4:ad:d7:46:e0:36:de:39:3b:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72f8a100b7e668098fa9f0910107c29c3e79e9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:a1:4a:06:99:1f:98:ff:bb:52:bf:93:17:
97:2e:99:8b:51:b6:7d:e2:99:54:e6:ed:74:17:94:
eb:32:49:37:0a:99:54:50:e3:74:2e:12:37:d1:77:
6f:db:46:e4:6d:88:f4:7a:42:a0:a1:d9:01:d8:a1:
ab:0f:8b:0b:93:34:50:27:f1:12:01:cb:a4:8c:11:
25:81:18:b5:3a:68:63:11:78:ac:ae:44:25:06:3a:
07:65:a5:b0:14:53:ca:0b:2c:d3:e8:d7:4f:10:b0:
2f:15:97:25:55:78:d6:4b:ce:fe:c9:ce:f3:14:c3:
e1:d8:fa:65:0e:08:32:bd:b5:df:87:a1:a0:fc:c5:
4b:d1:2b:0d:5b:fb:d3:a6:58:30:c4:5f:d3:cf:9c:
3d:e3:a6:dc:3a:13:bb:e8:ed:82:b4:8a:80:7c:92:
b0:bf:ca:31:6d:6c:2d:e5:96:b0:dd:d9:73:29:2a:
15:37:46:89:b6:45:62:91:b1:d3:7f:df:ca:36:fc:
d1:18:81:f1:e2:33:e8:55:ec:11:fd:20:6b:79:ab:
68:50:8f:88:16:5a:f4:6f:5a:e6:34:99:70:d4:62:
b4:28:8c:a1:9c:fe:af:42:a0:c3:c3:f6:9a:2a:96:
b2:c1:cb:44:28:bc:37:2b:b2:f6:f2:1b:8f:8e:a3:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F8:A1:00:B7:E6:68:09:8F:A9:F0:91:01:07:C2:9C:3E:79:E9:F1
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/cvihALfmaAmPqfCRAQfCnD556fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.84.0/22
IPv6:
2a01:62a0::/32
Signature Algorithm: sha256WithRSAEncryption
31:25:ff:c2:be:2c:2c:20:2e:94:9e:2e:44:d8:5d:45:dc:62:
84:64:c9:14:9f:d6:c3:e2:9f:c4:16:36:00:86:09:54:37:53:
0e:33:4a:18:91:c5:02:ac:d8:14:08:8e:bb:9a:9c:da:9b:4d:
a1:7a:49:ef:37:e2:23:44:a6:90:0e:3d:cf:4f:4c:14:d6:2f:
83:1c:c9:a5:0d:71:58:02:67:0a:51:6f:48:44:41:8d:9d:18:
a3:b5:82:5b:ae:88:8b:75:82:27:cb:de:ec:4f:c0:74:bc:a5:
84:15:4c:e9:11:9e:0a:7b:79:37:1b:e7:e8:e3:00:b2:d3:45:
dd:8b:d4:4a:d8:7e:c2:e8:97:19:bd:8d:2a:64:a8:52:41:3b:
69:e1:42:44:d3:71:34:23:88:99:e6:f0:8c:a8:56:43:a8:39:
96:a1:3b:86:36:0d:ee:bd:25:1f:0c:af:85:8a:79:da:7f:14:
47:6d:e8:b2:79:89:76:88:39:02:43:11:2b:4c:55:7d:80:08:
ef:a9:a8:aa:3e:22:51:39:e4:87:2d:7d:ec:f9:fc:a6:7f:bd:
52:18:78:77:59:bc:51:f0:9e:b8:b4:fd:96:4a:c0:35:7e:e2:
a6:ce:64:8d:8d:14:3a:74:f5:ca:04:1c:35:63:84:e7:10:b5:
f6:26:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:08 2025 by rpki-client