Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/5t7aJwmQOWWL1hi2AZ9dx8Q3xgY.roa
File: 5t7aJwmQOWWL1hi2AZ9dx8Q3xgY.roa (raw, json)
Hash identifier: 5kuC4n1WOSn1yY7hQJ/okGaQ/x5BP9FFcRzQVUcG6Zw=
Subject key identifier: E6:DE:DA:27:09:90:39:65:8B:D6:18:B6:01:9F:5D:C7:C4:37:C6:06
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 01890D4C66646E17C8046038A81CCF990EE9
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/5t7aJwmQOWWL1hi2AZ9dx8Q3xgY.roa
Signing time: Fri 30 Jun 2023 17:14:17 +0000
ROA not before: Fri 30 Jun 2023 17:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51059
IP address blocks: 185.2.206.0/24 maxlen: 24
185.2.204.0/24 maxlen: 24
185.2.205.0/24 maxlen: 24
185.2.207.0/24 maxlen: 24
37.230.48.0/20 maxlen: 20
5.83.192.0/19 maxlen: 19
109.107.32.0/19 maxlen: 19
2a02:1348::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0d:4c:66:64:6e:17:c8:04:60:38:a8:1c:cf:99:0e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jun 30 17:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6deda27099039658bd618b6019f5dc7c437c606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:ec:cb:88:76:a0:53:d2:f4:c8:ae:51:fb:
d6:fe:6f:30:70:f4:ae:d0:6c:67:3e:e7:9f:ef:f5:
d4:8f:6f:07:b9:47:64:f1:ed:71:8a:55:35:74:65:
bf:97:ed:c1:49:28:c4:02:c8:1c:2c:e6:85:12:88:
dc:bb:c6:82:17:dd:4f:cd:4b:2a:3b:54:e4:6b:38:
c0:83:ee:02:f7:41:79:f5:e4:26:91:8e:5d:fa:9e:
c9:3f:34:e1:cd:28:3c:20:3b:9c:77:d9:60:71:67:
9a:70:cd:1a:9a:14:94:ae:a7:42:ca:12:cb:f6:26:
32:2e:96:70:67:4f:9c:db:24:39:1e:4c:37:dd:35:
f9:2e:6a:ca:72:00:17:ed:b6:23:c1:9d:fe:06:58:
4b:8b:20:20:e2:ed:5a:ac:55:a7:5c:73:0e:07:3d:
0e:04:0c:d7:b4:62:b6:04:f9:cb:84:e1:2e:66:f7:
58:2a:c7:12:14:7a:12:77:a8:61:3d:d9:1b:a7:8c:
47:96:39:ad:15:3a:b4:81:59:6f:da:b2:0d:1d:f8:
4f:d6:89:b5:49:ce:77:0f:4e:23:bf:a4:07:78:30:
7f:c4:3f:b7:1e:e8:57:3e:6a:c8:df:f7:ca:0f:f1:
42:ab:c7:32:e0:91:76:07:3c:74:a7:72:28:98:dc:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DE:DA:27:09:90:39:65:8B:D6:18:B6:01:9F:5D:C7:C4:37:C6:06
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/5t7aJwmQOWWL1hi2AZ9dx8Q3xgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.192.0/19
37.230.48.0/20
109.107.32.0/19
185.2.204.0/22
IPv6:
2a02:1348::/32
Signature Algorithm: sha256WithRSAEncryption
4c:56:bf:74:21:92:49:e7:ad:40:39:c8:9a:48:28:70:6f:6e:
08:2c:65:86:95:b5:18:c5:46:01:2a:b6:bf:61:9c:9a:51:2e:
20:87:05:2b:35:d6:dc:4d:0f:41:6e:fe:75:03:d2:22:77:7d:
d6:b3:5b:3e:1e:b6:b4:09:b6:4d:d6:fe:93:c7:cf:2a:6d:a9:
34:13:79:63:7b:8c:e1:c3:2e:60:f8:c2:6f:48:78:fc:d2:f7:
bd:c8:03:d7:0d:6b:97:92:7e:f6:a1:d6:c2:89:e8:c2:16:8b:
7c:fb:f4:cc:c7:1d:d3:46:e9:14:17:08:9f:30:c1:b4:cf:c4:
55:69:fd:4a:42:57:8f:2e:b1:8a:62:f3:47:1a:b1:40:82:90:
3f:7a:c1:c9:78:48:77:17:76:9f:ce:d1:63:ca:b1:af:38:a2:
be:db:19:64:01:90:30:6f:db:ba:0b:4c:29:15:0f:fb:10:1c:
6e:4f:bf:4f:62:a4:27:42:e2:0d:7c:d8:16:e4:3a:1c:76:d7:
a6:68:40:62:5d:d3:81:cf:8c:72:ea:78:70:c8:e4:c1:37:16:
26:f0:9f:60:61:6f:1a:ef:c2:78:c6:81:4e:3a:36:7e:8d:65:
3e:4b:40:cd:3c:b1:4e:aa:c9:86:df:f7:72:db:55:f3:21:e7:
1e:0e:1d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:30 2025 by rpki-client