Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/t1G0UYIq2aBFGNwYDKaOB5_yW2A.roa
File: t1G0UYIq2aBFGNwYDKaOB5_yW2A.roa (raw, json)
Hash identifier: Gf2AUBYdYle6tm0FEqZQz4B4BBpslsnICrqOCgLYUIM=
Subject key identifier: B7:51:B4:51:82:2A:D9:A0:45:18:DC:18:0C:A6:8E:07:9F:F2:5B:60
Certificate issuer: /CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Certificate serial: 018E65A8CCCD4EEB1641A563B06950528F33
Authority key identifier: 93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/t1G0UYIq2aBFGNwYDKaOB5_yW2A.roa
Signing time: Fri 22 Mar 2024 10:15:44 +0000
ROA not before: Fri 22 Mar 2024 10:15:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29650
IP address blocks: 45.139.240.0/22 maxlen: 24
79.140.128.0/20 maxlen: 24
82.195.128.0/19 maxlen: 24
84.51.224.0/19 maxlen: 24
84.51.224.0/21 maxlen: 21
84.51.236.0/22 maxlen: 22
84.51.240.0/20 maxlen: 20
212.78.224.0/19 maxlen: 24
212.84.40.0/21 maxlen: 24
2001:1bd8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:a8:cc:cd:4e:eb:16:41:a5:63:b0:69:50:52:8f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Validity
Not Before: Mar 22 10:15:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b751b451822ad9a04518dc180ca68e079ff25b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:65:ab:9b:20:d9:4d:19:f4:4f:ad:22:bd:
ac:60:73:7b:dd:6c:44:da:5a:ab:e4:d0:69:e3:4a:
17:f9:ba:56:4a:00:fc:24:78:27:a9:37:f9:34:6a:
3e:32:62:35:32:a9:c3:d2:76:58:d6:38:db:d7:50:
dc:42:cf:6a:76:6c:f4:fc:12:46:2c:42:5d:dc:d1:
cd:07:99:8b:25:3c:a8:ae:dd:ff:93:98:ad:fb:8f:
e9:88:ec:55:8a:37:8b:f0:13:29:2f:97:ee:49:b9:
84:be:b5:35:f1:78:dd:ef:de:ed:b3:72:66:ee:c9:
5b:d3:a4:ee:52:cd:93:f8:bf:96:59:5f:d2:16:1e:
42:48:a3:06:e4:7a:9e:d3:9a:74:7f:2d:0f:c4:ff:
3e:6f:25:a9:f2:1b:84:55:f2:38:a6:2b:74:05:cf:
0a:40:cc:1f:bb:e0:2d:8c:17:a5:96:66:ab:76:b2:
6b:af:3e:3a:e2:01:65:3e:62:09:7a:56:29:4e:54:
73:99:69:f7:c9:78:b4:d4:b9:30:9f:35:ea:c2:f5:
e2:4d:93:62:e9:e3:2f:84:73:07:3d:0e:44:2e:c7:
b2:b8:f3:b4:94:f3:ed:bb:50:7d:35:41:0c:0b:9a:
12:22:4a:c5:9c:6f:b4:4c:0b:3f:86:a3:76:96:46:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:51:B4:51:82:2A:D9:A0:45:18:DC:18:0C:A6:8E:07:9F:F2:5B:60
X509v3 Authority Key Identifier:
keyid:93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/t1G0UYIq2aBFGNwYDKaOB5_yW2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.240.0/22
79.140.128.0/20
82.195.128.0/19
84.51.224.0/19
212.78.224.0/19
212.84.40.0/21
IPv6:
2001:1bd8::/32
Signature Algorithm: sha256WithRSAEncryption
89:8a:b7:5b:40:3d:f7:1c:6b:e5:03:87:02:83:71:0b:46:d4:
08:99:65:25:b8:f5:f5:58:92:8a:6a:3b:f2:72:dd:06:e3:01:
e6:b2:77:1f:b0:91:b2:f6:b9:aa:9a:9a:95:25:8e:aa:79:1a:
d7:13:69:f2:63:ec:d2:15:d6:01:7a:16:d3:d7:40:e9:b3:b7:
c0:a7:f2:5d:9f:55:73:9d:7f:45:f1:6a:ec:cb:b4:32:bf:fe:
14:7d:4c:fe:06:2d:fe:37:a1:26:43:ee:f0:f1:38:64:52:a5:
d6:d7:70:02:a8:e3:be:53:2c:f7:72:fb:48:c6:e8:e0:d7:8a:
3a:bd:e0:94:95:6d:42:ce:54:cb:e6:31:f8:34:25:c1:3c:87:
55:3e:9e:65:1b:c0:3a:0a:4a:a7:bf:c0:6e:25:af:e5:d8:b4:
5c:fe:6c:5a:d4:bc:40:fb:f7:30:84:b5:ae:b7:56:73:b9:48:
b3:fe:04:74:d0:a2:07:64:cc:ba:36:d4:cb:e4:7a:78:97:5d:
7f:fc:44:02:a5:3a:8c:ad:de:63:48:f5:47:b4:83:58:20:56:
2d:66:9a:51:f1:23:90:f6:ab:23:a5:ce:b2:6d:85:95:26:f5:
39:04:f5:23:c6:7e:77:88:ea:59:46:fe:ae:7a:d2:76:6a:07:
0d:d0:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:55:15 2025 by rpki-client