Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AlkgFPFF8ixl95v6Xw4li1XfA-4.roa
File: AlkgFPFF8ixl95v6Xw4li1XfA-4.roa (raw, json)
Hash identifier: SzGJ1Lkinxdur8LePW7mP/6JV83vKMRsuYUTT/xp3O4=
Subject key identifier: 02:59:20:14:F1:45:F2:2C:65:F7:9B:FA:5F:0E:25:8B:55:DF:03:EE
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143FC62AFA417AE8AD0E5A3072BEA2F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AlkgFPFF8ixl95v6Xw4li1XfA-4.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43201
IP address blocks: 5.42.216.0/24 maxlen: 24
37.72.131.0/24 maxlen: 24
46.175.132.0/24 maxlen: 24
91.213.155.0/24 maxlen: 24
193.8.74.0/24 maxlen: 24
194.104.139.0/24 maxlen: 24
194.104.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fc:62:af:a4:17:ae:8a:d0:e5:a3:07:2b:ea:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02592014f145f22c65f79bfa5f0e258b55df03ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:e8:9f:96:ed:2f:9e:9a:1f:da:07:f3:5c:
0d:01:94:e4:73:e1:df:95:36:d3:ec:b3:98:ad:18:
42:b8:b0:01:ef:c8:11:c3:50:0e:f2:98:09:3b:7c:
fc:0c:df:85:fe:4a:e5:85:a0:ab:b9:74:e4:b9:91:
a6:3b:7a:b3:46:a7:83:c4:3e:93:67:ba:74:d9:24:
08:92:8a:ff:1b:4a:76:25:c7:5a:27:9b:e2:d0:b4:
08:e3:45:03:19:eb:3e:e6:89:5d:82:63:d1:c7:85:
92:bb:c1:20:a6:f4:ea:33:ee:73:82:21:92:e3:5c:
8c:bc:06:e5:2a:16:b1:9f:8d:bc:eb:66:cb:58:f4:
af:14:2f:ba:01:bf:3f:31:4e:4d:6b:c5:a8:f5:0d:
05:dc:e5:c3:8d:a4:b6:86:58:0a:67:2b:5f:7f:e9:
16:7f:d2:8a:13:9e:21:1f:f5:4a:58:5b:02:2b:67:
58:7d:6a:84:98:dd:77:63:77:af:ae:3b:e5:1f:cc:
3f:e5:c8:32:3f:a0:20:e0:49:51:be:95:7a:77:8a:
71:fd:ee:af:db:53:aa:ee:e1:7f:ba:5b:45:6d:97:
47:2f:47:2a:1e:b9:46:2c:46:0a:ac:f3:b8:ec:84:
41:89:01:a9:d0:68:b9:79:d9:b2:aa:0a:1b:02:71:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:59:20:14:F1:45:F2:2C:65:F7:9B:FA:5F:0E:25:8B:55:DF:03:EE
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AlkgFPFF8ixl95v6Xw4li1XfA-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.216.0/24
37.72.131.0/24
46.175.132.0/24
91.213.155.0/24
193.8.74.0/24
194.104.139.0-194.104.140.255
Signature Algorithm: sha256WithRSAEncryption
92:8e:58:05:a2:a0:8b:82:05:93:e7:55:bf:be:26:73:1e:71:
2f:3a:83:77:cc:45:13:75:f3:74:69:3c:02:63:ed:24:fc:73:
35:ea:ce:17:de:6e:4f:70:cc:e4:c1:a4:b3:9c:f6:fa:41:ea:
2e:ef:c6:12:8a:93:ee:a4:68:f5:2c:45:a6:c8:10:c8:8b:1d:
58:d9:b9:7a:71:85:00:5f:93:ba:92:a8:73:1d:9f:e0:10:55:
ae:32:00:4a:8d:3a:55:4f:d6:7f:d7:3b:57:46:59:de:18:d5:
e2:51:02:cf:2c:1a:86:5f:31:ee:ea:45:bc:60:1b:29:e7:d6:
1a:6e:03:4e:3d:31:4d:b6:b8:dc:62:ac:3f:48:46:65:34:ae:
aa:6b:41:2d:5b:d2:bc:1d:8d:76:58:88:56:ad:01:5c:6c:8a:
77:1c:ae:fc:4c:04:d8:e5:f4:de:ae:c1:09:04:2e:bd:5c:82:
1c:26:9f:f9:c3:21:f4:96:e0:01:57:ad:ca:b3:e3:26:8e:2a:
60:0b:10:4c:34:43:ad:6e:62:d0:d9:16:b5:a7:dc:5c:07:07:
f3:7a:01:60:a2:b6:64:01:bf:14:d3:8a:9b:13:08:0a:00:08:
07:87:c2:a0:b0:e8:e4:9c:28:4b:c8:a5:ce:4e:18:2d:19:2e:
72:93:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:30 2025 by rpki-client