Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/jVxRo4KWMWUiJQcMYf96wc6tqFU.roa
File: jVxRo4KWMWUiJQcMYf96wc6tqFU.roa (raw, json)
Hash identifier: H7oIYyV397w75YgpPFdKofIpFAAGxKtA3oDU6iqDlKE=
Subject key identifier: 8D:5C:51:A3:82:96:31:65:22:25:07:0C:61:FF:7A:C1:CE:AD:A8:55
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 019422FB5ADD85138CF1805E558EA865772A
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/jVxRo4KWMWUiJQcMYf96wc6tqFU.roa
Signing time: Wed 01 Jan 2025 17:48:05 +0000
ROA not before: Wed 01 Jan 2025 17:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49287
IP address blocks: 5.188.174.0/24 maxlen: 24
5.188.175.0/24 maxlen: 24
91.192.82.0/24 maxlen: 24
93.189.59.0/24 maxlen: 24
185.224.251.0/24 maxlen: 24
213.183.34.0/24 maxlen: 24
213.183.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5a:dd:85:13:8c:f1:80:5e:55:8e:a8:65:77:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Jan 1 17:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d5c51a3829631652225070c61ff7ac1ceada855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:86:f2:c1:9b:8c:eb:d3:e0:a9:8f:bc:17:
44:1c:bd:fa:4d:5f:de:43:6f:6d:5f:34:9a:2a:e0:
69:0b:6c:db:20:7a:4d:ba:fe:ef:1b:b7:a6:c5:73:
7d:89:8f:cb:f0:0b:36:41:fe:3d:ac:37:73:2e:f3:
9f:12:43:c1:05:09:f9:85:17:30:16:c0:fa:b2:62:
13:74:dc:5f:68:fd:b5:05:70:99:6a:a3:6a:f1:f7:
ca:79:c2:e3:fc:20:80:82:be:97:68:49:f3:ba:df:
53:39:04:16:d5:0e:be:02:b7:76:f0:b7:08:94:78:
9c:e6:de:bc:79:c2:bf:5a:43:ae:c2:3e:05:e8:e9:
41:9b:72:c3:97:c8:86:cd:30:5b:2d:ed:e2:6e:66:
28:d2:c4:16:d9:6f:39:26:92:25:c3:80:4c:9e:d4:
9c:ce:0a:a5:36:58:72:47:e3:c3:5d:ad:f6:74:02:
c4:e5:15:ee:21:04:cc:62:b6:74:67:87:1a:66:c0:
f1:4e:62:5f:ac:14:a1:32:bf:70:de:a1:d1:84:de:
7a:02:1a:99:90:98:24:6c:c5:7d:f8:b2:0d:72:db:
04:0c:fa:5e:fb:96:02:4d:69:03:88:b0:c6:cb:87:
1a:53:bb:a1:45:d4:c6:44:4d:7d:9d:3f:76:42:b7:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5C:51:A3:82:96:31:65:22:25:07:0C:61:FF:7A:C1:CE:AD:A8:55
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/jVxRo4KWMWUiJQcMYf96wc6tqFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.174.0/23
91.192.82.0/24
93.189.59.0/24
185.224.251.0/24
213.183.34.0/23
Signature Algorithm: sha256WithRSAEncryption
69:08:c9:15:c6:e2:45:48:e1:86:da:69:5a:9a:40:22:7a:b2:
fa:40:66:d1:aa:7d:1c:81:79:f0:3a:d6:bd:d1:12:d8:2a:84:
51:d0:9a:b8:02:d7:10:a5:01:9e:06:40:f5:41:66:8f:9d:ae:
bb:b6:d6:14:67:ef:ce:34:67:ac:f3:81:7b:63:02:e0:29:3a:
98:f2:0d:50:c5:9d:37:80:90:9b:fa:8e:9e:9b:99:bf:9b:a8:
06:58:31:04:dc:22:86:1b:39:d9:55:49:4c:34:c8:56:6b:1f:
70:a4:be:7f:91:ee:c1:72:a5:68:56:ae:13:66:d5:52:5a:15:
19:30:39:95:2f:1c:a8:09:8d:20:ae:34:06:75:7a:5b:c7:68:
14:2a:5b:60:ba:d0:b4:f9:94:d5:52:80:d4:ef:52:69:52:09:
40:36:18:07:cd:c3:b8:ed:60:98:19:e9:bc:38:a8:9f:f9:40:
b1:63:f2:26:f1:94:3f:74:c9:c8:70:e2:0c:72:fd:a8:24:ca:
73:53:e0:86:15:6c:8a:8d:e7:40:4d:cf:61:60:42:7f:bc:16:
96:49:a6:39:e0:e1:7a:c6:a9:14:4e:a5:5a:df:8e:e7:24:ca:
a6:de:f1:2e:73:de:85:9f:ca:ad:33:4a:4d:10:b1:10:da:35:
82:0d:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:55:42 2025 by rpki-client