Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/2p-grqjQsRjsFFWZcoHsFZy8ab4.roa
File: 2p-grqjQsRjsFFWZcoHsFZy8ab4.roa (raw, json)
Hash identifier: F7p3nMD/FyuqApxnvcUxm2hE1/BijZal4YXUZ81SIAs=
Subject key identifier: DA:9F:A0:AE:A8:D0:B1:18:EC:14:55:99:72:81:EC:15:9C:BC:69:BE
Certificate issuer: /CN=79069738c48f16f0144519b7f881ad0b6d3c930e
Certificate serial: 018571BA1135F8A1AD88AE11E44327BFDAC3
Authority key identifier: 79:06:97:38:C4:8F:16:F0:14:45:19:B7:F8:81:AD:0B:6D:3C:93:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQaXOMSPFvAURRm3-IGtC208kw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/2p-grqjQsRjsFFWZcoHsFZy8ab4.roa
Signing time: Mon 02 Jan 2023 09:04:57 +0000
ROA not before: Mon 02 Jan 2023 09:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50530
IP address blocks: 185.4.220.0/22 maxlen: 24
109.110.160.0/19 maxlen: 24
193.246.160.0/23 maxlen: 24
193.246.164.0/23 maxlen: 24
185.205.220.0/22 maxlen: 24
185.222.184.0/22 maxlen: 24
2a00:1ce0::/32 maxlen: 32
2a0b:ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:11:35:f8:a1:ad:88:ae:11:e4:43:27:bf:da:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79069738c48f16f0144519b7f881ad0b6d3c930e
Validity
Not Before: Jan 2 09:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da9fa0aea8d0b118ec1455997281ec159cbc69be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:52:6a:94:34:3c:29:a3:aa:2a:bf:a0:57:
d4:83:09:bb:71:a0:c9:7e:a9:50:fe:9e:5c:69:55:
f4:b4:5c:e5:61:4a:f3:b8:48:17:55:c4:04:97:b3:
01:b8:ad:fd:af:42:9c:05:33:fb:a7:ee:12:40:7e:
fb:ed:1e:fc:58:6e:d8:df:42:b6:66:ff:a9:71:97:
d9:be:3e:86:75:9b:59:7c:bf:1f:b9:50:05:71:49:
24:c7:1e:9f:f0:0f:f5:6d:fb:80:ff:12:28:6a:a3:
75:61:21:71:ca:69:2a:e4:69:46:e2:f6:60:47:74:
2b:db:39:7f:2e:c8:a7:b4:ee:82:cf:13:19:ca:01:
d9:44:1a:41:04:4a:4f:8f:b4:ba:26:81:7c:fe:9b:
f4:f5:53:ab:42:71:b8:9a:50:af:85:03:7a:c4:2d:
5a:3d:17:63:b9:fb:30:e5:72:75:41:9d:35:45:db:
d9:ab:fd:94:1d:38:fd:fd:7b:e2:8d:c3:01:23:d5:
fb:4f:2b:bf:96:b8:30:b9:ff:bd:13:cb:b9:21:8d:
8f:fd:7f:68:2b:4f:ea:06:22:82:15:13:1d:57:9c:
91:f3:db:a6:6a:21:86:74:65:12:c5:34:29:ae:6f:
83:a0:5a:bd:32:e4:2b:74:18:92:89:da:b4:c1:11:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9F:A0:AE:A8:D0:B1:18:EC:14:55:99:72:81:EC:15:9C:BC:69:BE
X509v3 Authority Key Identifier:
keyid:79:06:97:38:C4:8F:16:F0:14:45:19:B7:F8:81:AD:0B:6D:3C:93:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQaXOMSPFvAURRm3-IGtC208kw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/2p-grqjQsRjsFFWZcoHsFZy8ab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/eQaXOMSPFvAURRm3-IGtC208kw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/19
185.4.220.0/22
185.205.220.0/22
185.222.184.0/22
193.246.160.0/23
193.246.164.0/23
IPv6:
2a00:1ce0::/32
2a0b:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:b5:a6:51:47:ea:30:03:95:58:b0:2a:61:36:58:8e:f4:50:
78:1f:ba:54:fd:5a:2e:f4:9f:d6:77:f6:04:30:c7:65:fd:4f:
84:f5:db:2a:26:d2:01:16:6e:e9:63:6a:79:e2:a3:5a:32:a5:
cb:1a:cf:40:8b:80:23:16:d7:5c:bb:3e:1d:d2:32:6f:6c:68:
a7:68:5e:70:5f:e0:cf:a7:6c:96:ac:72:8a:29:57:10:fb:a3:
e6:78:15:4d:f0:fe:12:34:1b:e3:44:60:eb:f6:cb:1b:c2:2d:
8f:f0:34:dd:9e:ae:7e:0e:4e:ee:56:bc:b1:cf:2f:ff:97:09:
7a:72:89:7c:8d:a4:24:10:02:3c:65:59:37:ba:8c:be:0c:81:
11:2e:68:d4:37:f7:fa:4c:04:9e:34:0a:d8:55:e3:25:88:f6:
6f:92:7b:46:ad:5f:15:97:ab:d5:83:00:28:91:e5:bf:98:22:
a5:35:cf:ff:5c:e3:c3:2c:d6:9f:32:9c:5c:b8:49:90:e0:18:
8d:f9:3c:5f:3d:22:0a:02:ad:b3:94:35:81:9a:cb:e6:dd:46:
27:2d:b4:ae:b6:74:85:e8:a0:a0:a7:dd:f0:5c:c5:eb:e8:40:
f2:79:49:5b:d5:86:50:45:f7:34:50:a2:c3:58:d7:69:73:dc:
61:4a:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:41:50 2025 by rpki-client