Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/5aNGSaDu3PGRqFBr_CTyX0cDYDY.roa
File: 5aNGSaDu3PGRqFBr_CTyX0cDYDY.roa (raw, json)
Hash identifier: Zc7u7AdvtiH1jXFKC0YUoTPHqvFrFnfs+KbUoLlZbLk=
Subject key identifier: E5:A3:46:49:A0:EE:DC:F1:91:A8:50:6B:FC:24:F2:5F:47:03:60:36
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0192E1D5DA9718F25E0CC3ED9DBB4C5C0543
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/5aNGSaDu3PGRqFBr_CTyX0cDYDY.roa
Signing time: Thu 31 Oct 2024 09:09:01 +0000
ROA not before: Thu 31 Oct 2024 09:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 85.239.144.0/24 maxlen: 24
85.239.146.0/24 maxlen: 24
85.239.147.0/24 maxlen: 24
85.239.148.0/24 maxlen: 24
85.239.150.0/24 maxlen: 24
185.95.156.0/24 maxlen: 24
185.95.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:d5:da:97:18:f2:5e:0c:c3:ed:9d:bb:4c:5c:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 31 09:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5a34649a0eedcf191a8506bfc24f25f47036036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:e6:34:3d:c2:c4:b6:a0:28:12:4b:09:d5:
e0:62:b5:9e:f3:29:a9:8d:19:d7:a1:f1:58:57:39:
d4:4e:a9:cb:fd:b7:6f:d2:f9:aa:71:9c:5a:d7:65:
d0:e5:93:e3:c3:66:b2:27:af:a7:36:9a:cb:be:6d:
3d:56:b4:b4:ce:44:4c:0b:5e:a4:81:12:fa:12:54:
76:0d:9e:3b:ff:b9:04:51:ca:60:70:8c:a8:a7:76:
a0:9c:3e:4d:00:29:a0:34:96:1e:18:22:9d:58:90:
89:23:10:47:f1:c0:c5:4c:e9:1b:d6:b0:2b:1e:80:
c2:b6:bf:27:75:39:aa:4d:b0:3f:fb:2b:90:8e:96:
b5:b0:f3:f1:17:91:c9:c4:78:eb:38:03:3d:28:97:
1d:28:bb:00:d4:87:da:1e:75:a0:f4:61:dc:fa:04:
b9:68:fa:1c:a0:bc:28:fc:80:a4:0d:1d:60:38:4a:
c4:86:dd:06:44:f5:3c:34:eb:97:a6:3e:32:c6:07:
f2:5c:c8:e1:34:77:fe:5d:d8:bf:3f:2b:86:38:52:
96:ba:1b:32:48:31:3c:48:8d:2e:fd:6c:28:cb:9f:
0d:7b:88:19:de:65:e3:64:48:bf:e8:fa:d8:c6:67:
d6:64:ba:33:88:05:05:b7:8a:82:7d:32:01:b5:9a:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A3:46:49:A0:EE:DC:F1:91:A8:50:6B:FC:24:F2:5F:47:03:60:36
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/5aNGSaDu3PGRqFBr_CTyX0cDYDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.144.0/24
85.239.146.0-85.239.148.255
85.239.150.0/24
185.95.156.0/24
185.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3a:24:c1:5d:7f:68:ef:dd:0c:3b:0e:72:7e:3a:02:60:c8:
fc:50:07:84:9b:62:a7:93:43:10:b3:3e:6b:c9:b6:8d:5b:34:
6f:36:90:44:bd:7a:2d:58:64:06:16:d8:12:7b:ef:4e:b7:52:
0a:8f:1b:13:cf:b6:1e:f5:e4:cc:45:5e:b2:ca:5e:9d:3b:18:
55:ee:97:8d:8c:c0:c6:5e:f3:05:62:b7:57:06:a4:5c:e2:88:
44:1b:07:c7:08:02:15:46:4b:cb:b2:85:04:4a:55:91:02:b8:
25:fe:ad:fc:0b:f5:5c:54:a4:31:e7:7b:53:33:f4:f1:20:8e:
d2:71:f3:24:92:ac:cb:25:44:06:b8:1f:f2:9f:02:6d:75:8e:
99:4d:26:d5:4e:d9:51:59:3c:ab:c1:a4:89:e8:12:53:8d:91:
0c:70:10:63:dd:4d:55:19:c5:53:59:66:76:85:ee:39:71:8d:
87:ad:18:90:d8:f8:1b:7b:88:7e:ce:1d:a7:4e:4d:49:d5:1d:
7f:6e:22:35:35:1c:7c:be:df:7b:da:ab:fb:bb:35:c7:de:df:
db:ea:59:50:a2:d6:4a:99:a5:6a:ce:f7:c3:d5:37:d8:01:d3:
a3:e3:b0:c0:7f:6a:04:8d:d4:1d:56:31:75:55:29:e4:e5:fb:
6a:26:03:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:58 2025 by rpki-client