Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x9IAF112yCo20nl-ypEoev5u6Ro.roa
File: x9IAF112yCo20nl-ypEoev5u6Ro.roa (raw, json)
Hash identifier: tt30AJm+uIQljC2qlgya1+xj04Bb8oL049nIEX/mjjA=
Subject key identifier: C7:D2:00:17:5D:76:C8:2A:36:D2:79:7E:CA:91:28:7A:FE:6E:E9:1A
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C241803C33E5BB4F86B0C31EF65CB
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x9IAF112yCo20nl-ypEoev5u6Ro.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30938
IP address blocks: 5.39.248.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
31.192.240.0/21 maxlen: 21
45.12.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:24:18:03:c3:3e:5b:b4:f8:6b:0c:31:ef:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7d200175d76c82a36d2797eca91287afe6ee91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:46:3e:cf:bb:9b:5c:af:46:2f:3b:17:b2:
4e:31:2f:e6:e9:6e:b9:7e:9c:70:84:2f:ed:b9:e5:
8b:71:1c:09:06:71:f3:be:d0:25:e6:f3:31:31:cf:
e9:9e:c9:62:ef:65:7e:41:a3:42:5c:ce:86:35:84:
2b:3a:14:9a:02:b7:de:28:7f:3e:a6:ed:fa:e4:1b:
f4:35:c5:21:3c:2a:e4:6c:63:91:89:a2:e0:31:ab:
31:03:bc:70:9a:5d:08:ec:4b:bf:10:52:ad:56:13:
03:69:b0:52:a8:ba:2e:d9:d1:58:cc:34:b9:53:da:
da:12:6b:4b:83:e1:0b:66:c2:c5:0b:ee:45:dc:4c:
74:8f:73:91:a5:95:9b:91:77:dd:f7:57:86:3c:5f:
d8:c7:70:8f:ff:28:14:73:70:dd:95:f2:8f:69:a6:
d8:97:c7:51:1f:88:25:d1:00:ba:9d:d3:0c:a5:5b:
bb:7f:5f:eb:97:9c:36:30:b2:e8:18:78:69:e8:d4:
ff:84:b3:71:b2:15:a0:d0:b2:b7:8b:2c:4e:2b:dc:
92:9b:7f:37:b9:e1:82:f8:91:4c:34:36:18:d6:1b:
7e:7b:bc:c6:5c:3e:74:33:41:ba:02:93:df:c6:7b:
96:f9:9d:05:56:44:cf:86:b8:82:1b:67:2b:70:58:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:00:17:5D:76:C8:2A:36:D2:79:7E:CA:91:28:7A:FE:6E:E9:1A
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x9IAF112yCo20nl-ypEoev5u6Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.178.97.0/24
5.178.99.0/24
31.192.240.0/21
45.12.216.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f6:49:71:c8:67:78:7b:fb:53:44:96:e3:fc:06:a6:82:28:
12:57:e0:21:a8:38:26:7b:f3:54:f1:3b:63:40:ec:20:f9:43:
da:cb:fe:a1:c3:a4:1b:58:52:59:a8:1d:6f:e5:cc:df:72:e1:
3c:03:97:ca:5d:55:76:70:91:86:3c:11:f8:9b:25:43:b8:15:
4f:e5:32:f3:58:ca:eb:7b:f7:1c:f2:1e:68:3c:bb:38:3e:97:
2f:29:04:85:97:85:85:91:58:d1:2f:18:d7:8a:b0:95:89:c1:
b5:85:44:cd:78:95:62:68:b4:20:b7:e3:d5:79:a7:af:28:d8:
b4:4d:b8:04:d9:28:42:b2:26:1c:99:4d:a0:24:9c:27:43:b7:
4f:b8:fd:dc:89:f7:88:f4:3f:10:9d:9b:bb:54:fa:05:25:99:
26:cb:81:76:70:ea:a9:34:35:5a:be:ba:23:a0:4b:e6:39:f8:
ae:5a:73:61:ce:df:8a:13:6e:dc:4e:69:08:80:45:69:75:17:
b8:ef:73:49:72:9b:db:6f:52:be:a2:70:05:0b:9b:31:3f:33:
3c:46:8c:be:ab:7e:8a:1d:99:7f:0b:64:25:22:22:a2:e4:20:
89:a7:98:ec:af:7f:4e:61:69:ec:f3:82:75:26:a8:60:6e:2e:
36:d3:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:45:58 2025 by rpki-client