Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/AHyOG1MnctFTYdTzOeujyYGDJDQ.roa
File: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (raw, json)
Hash identifier: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=
Subject key identifier: 00:7C:8E:1B:53:27:72:D1:53:61:D4:F3:39:EB:A3:C9:81:83:24:34
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 019420D667576425594545DDF75BF123ADCB
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/AHyOG1MnctFTYdTzOeujyYGDJDQ.roa
Signing time: Wed 01 Jan 2025 07:48:29 +0000
ROA not before: Wed 01 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24956
IP address blocks: 185.220.200.0/22 maxlen: 22
194.45.135.0/24 maxlen: 24
217.13.64.0/20 maxlen: 20
2a00:1030::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:67:57:64:25:59:45:45:dd:f7:5b:f1:23:ad:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=007c8e1b532772d15361d4f339eba3c981832434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:d4:2a:7d:33:60:8f:37:b8:5c:36:69:cc:
86:8b:ad:22:8e:cf:64:4f:cd:b6:f0:80:6e:62:49:
80:26:df:17:57:a7:6f:32:68:67:d6:a2:92:ca:bf:
e6:20:b6:35:90:f6:a9:40:ef:5b:dc:1f:7d:41:12:
29:2b:f2:65:ca:0c:bc:2a:1c:8a:85:13:65:42:a2:
f5:a3:97:5c:86:06:10:3a:d4:50:3e:bb:9d:e5:5c:
06:da:34:96:91:3d:e4:1d:aa:80:a0:92:34:da:f7:
60:b7:97:b7:5c:0a:2e:c3:7d:0d:7d:cc:b2:bf:4c:
73:d4:b5:2f:6e:9b:f4:ef:b7:ef:ff:01:7f:47:1a:
55:ae:a1:f0:17:aa:b0:12:40:96:10:22:66:00:d1:
4d:97:39:ec:d8:18:3a:e0:a9:63:7b:98:ab:37:ab:
93:d0:ff:88:21:ed:da:90:ea:64:45:c4:7b:c1:46:
0c:99:bb:51:f3:65:2b:7b:df:2a:6d:63:75:45:d9:
2f:da:46:1f:24:99:12:1b:39:50:66:7f:97:3d:23:
1e:6d:31:63:45:ff:35:32:9e:7d:12:da:21:1a:89:
5d:87:86:d2:50:10:c9:58:27:a0:22:23:e9:19:bb:
30:b8:d2:cf:bb:db:76:cf:f4:91:9e:b7:e3:0d:79:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7C:8E:1B:53:27:72:D1:53:61:D4:F3:39:EB:A3:C9:81:83:24:34
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/AHyOG1MnctFTYdTzOeujyYGDJDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.200.0/22
194.45.135.0/24
217.13.64.0/20
IPv6:
2a00:1030::/32
Signature Algorithm: sha256WithRSAEncryption
2b:1b:d2:ef:68:4e:ef:ea:16:42:ea:1f:31:d0:fb:40:61:31:
0b:4e:1e:d8:4c:13:3f:06:f5:f6:09:de:62:6a:c2:ef:46:b6:
fb:89:7b:42:c5:3d:40:8a:bb:6e:a8:e0:d5:54:06:ec:94:9c:
1a:6f:12:9a:0d:18:69:c2:00:37:a3:93:11:1e:66:36:a3:0f:
5a:a4:e9:25:ce:70:a4:b3:a2:2c:77:1d:cd:83:c8:f6:38:83:
b0:20:59:ad:02:48:68:18:87:05:71:38:4b:34:bd:5b:dd:00:
0d:67:00:e3:73:a7:03:ad:c8:7e:9c:d3:d7:75:fa:75:8f:38:
a9:2d:14:d6:b2:e0:e7:e9:43:bb:5a:33:12:64:10:9b:38:35:
5f:a7:5b:fd:42:dd:e7:68:86:7d:86:a1:af:1e:13:22:89:a7:
9d:3d:b6:fd:08:fa:29:fc:ad:ae:17:92:8a:a1:95:e7:06:e4:
1d:87:0b:b2:7a:a5:56:d2:39:a3:d7:cc:bd:e8:58:87:cc:76:
88:b8:5a:88:18:2d:04:0c:ea:28:3a:bc:3a:f2:31:ec:f8:cd:
87:f6:13:46:4d:bb:4a:b2:12:20:7f:d8:6a:b2:00:62:d7:0f:
bb:43:c0:df:c3:ab:bf:e6:3b:c4:e3:eb:8b:43:57:5c:99:bc:
eb:d1:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:39:04 2025 by rpki-client