Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/9DFkE_ONLMsSYFORUmyk0ZRSKTA.roa
File: 9DFkE_ONLMsSYFORUmyk0ZRSKTA.roa (raw, json)
Hash identifier: Oql2v+O9dkhZ+7DYGfNZ3rdk/RuxC5q8FGZSbg+O9ds=
Subject key identifier: F4:31:64:13:F3:8D:2C:CB:12:60:53:91:52:6C:A4:D1:94:52:29:30
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01953789F4C34CFB0D2B9194B947463694F4
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/9DFkE_ONLMsSYFORUmyk0ZRSKTA.roa
Signing time: Mon 24 Feb 2025 10:39:02 +0000
ROA not before: Mon 24 Feb 2025 10:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 5.252.184.0/24 maxlen: 24
5.252.185.0/24 maxlen: 24
45.11.155.0/24 maxlen: 24
45.84.108.0/24 maxlen: 24
45.84.109.0/24 maxlen: 24
45.84.110.0/24 maxlen: 24
45.84.111.0/24 maxlen: 24
45.138.28.0/22 maxlen: 22
141.98.56.0/24 maxlen: 24
141.98.57.0/24 maxlen: 24
141.98.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:89:f4:c3:4c:fb:0d:2b:91:94:b9:47:46:36:94:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Feb 24 10:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4316413f38d2ccb12605391526ca4d194522930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:d9:2e:20:9e:d5:e0:76:5d:e7:02:d8:71:
9a:6f:71:7c:08:07:29:c7:c5:e7:d3:4c:7f:8d:66:
ae:60:ee:57:6e:da:05:34:a6:fd:fa:15:a6:1b:80:
9f:2c:86:5d:a4:1b:a4:12:29:f8:ef:b5:96:31:84:
d0:37:a6:54:7b:aa:6a:56:4f:e3:69:b4:65:c3:c6:
92:a0:ba:05:f9:ba:08:3e:06:09:9c:2d:0f:37:1e:
cc:a4:9a:9e:c9:b8:8e:83:7e:1b:ed:ef:e1:c4:29:
a6:fe:e6:34:a7:38:90:b0:ba:92:67:41:b3:73:8b:
e6:aa:86:21:bb:51:85:e7:b1:44:79:ec:09:1e:f7:
c2:6b:2b:a5:c6:28:0c:67:43:33:8e:5d:17:8d:13:
de:fc:4f:0d:30:28:35:6e:71:b1:a0:18:39:88:0d:
16:47:ef:3f:c5:04:88:71:ac:03:86:5e:3d:d5:d4:
d7:40:3d:94:70:85:b4:91:b3:9f:bd:c7:40:51:d9:
58:29:fe:d8:87:6d:c8:5b:f1:8e:c5:d2:6e:63:c7:
ec:4a:8a:20:08:22:ac:04:4a:ae:ba:80:db:94:e3:
20:2d:10:d9:16:13:45:fa:88:e1:9a:59:60:36:8d:
70:91:e0:03:b4:77:24:39:1d:b9:11:77:fd:42:d0:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:31:64:13:F3:8D:2C:CB:12:60:53:91:52:6C:A4:D1:94:52:29:30
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/9DFkE_ONLMsSYFORUmyk0ZRSKTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.184.0/23
45.11.155.0/24
45.84.108.0/22
45.138.28.0/22
141.98.56.0/23
141.98.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:de:c6:c5:a1:bf:98:d1:77:11:0c:f1:d1:43:96:3d:3c:24:
c3:b3:35:d5:5d:c8:d5:59:4d:2a:bb:1e:a7:bb:f2:32:43:eb:
f9:1f:4f:c7:2d:27:72:1a:6e:68:1e:b2:92:5d:6b:fd:34:ef:
ae:9e:22:86:13:93:bf:15:b1:b5:30:67:a1:0a:7c:36:cc:1c:
ab:74:1f:1b:fb:9e:f2:37:e9:26:ef:bb:ce:b8:2f:c9:c4:36:
dc:35:18:5f:af:10:8a:e5:ee:2a:11:f2:32:8c:1e:ec:e1:e4:
ab:b2:36:b8:45:a8:86:9f:8b:a0:2a:e6:2f:6c:6c:bf:d1:d8:
06:88:cf:8d:2f:8f:01:77:77:de:c2:d2:2d:1e:db:29:40:89:
b3:9b:43:66:93:39:58:53:d8:2a:ba:18:3d:e6:d0:9a:97:bc:
20:be:35:45:73:b2:cf:bb:44:c8:e5:50:2c:bc:28:6b:f9:b4:
ac:79:e8:56:ff:c4:4a:08:69:3b:fb:7d:01:0c:b8:db:cc:54:
18:35:74:48:b1:95:70:be:8d:8e:49:7e:11:a2:60:b5:32:81:
a6:5e:67:74:f4:fa:0b:f4:4c:ec:62:21:5a:63:b7:79:eb:2c:
41:59:7a:63:d3:40:06:f6:ff:da:1c:a1:7b:36:e5:dc:7d:32:
1c:40:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:02 2025 by rpki-client