Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/GaWyzUO0HJeBjasyRqC97NsCSD4.roa
File: GaWyzUO0HJeBjasyRqC97NsCSD4.roa (raw, json)
Hash identifier: UvlgjWI3E2c5HU/6Dd5CAeuvj7bfQfjld2BSF5GNKKQ=
Subject key identifier: 19:A5:B2:CD:43:B4:1C:97:81:8D:AB:32:46:A0:BD:EC:DB:02:48:3E
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 019422FB615A6037384833A08957D6FE513F
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/GaWyzUO0HJeBjasyRqC97NsCSD4.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 2.57.248.0/23 maxlen: 23
2.57.250.0/24 maxlen: 24
2.57.251.0/24 maxlen: 24
5.183.240.0/23 maxlen: 23
5.183.242.0/23 maxlen: 23
45.14.80.0/24 maxlen: 24
45.86.24.0/22 maxlen: 22
92.119.24.0/23 maxlen: 23
92.119.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:61:5a:60:37:38:48:33:a0:89:57:d6:fe:51:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19a5b2cd43b41c97818dab3246a0bdecdb02483e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:05:bc:d2:c9:a8:52:8e:aa:93:17:eb:40:
ee:38:9f:6e:49:d3:c5:6a:75:04:b6:5e:60:cc:e7:
71:87:12:ef:c4:ca:fc:18:10:6d:21:0a:b0:08:9c:
21:82:f9:61:a1:c6:6d:df:6d:e5:86:a1:24:c8:91:
04:a0:1f:cc:75:5b:b4:f5:9c:ec:91:c7:08:ce:cc:
ea:bd:e3:a4:31:1f:91:98:81:6a:df:ac:85:d1:c1:
6b:0f:9e:c1:5d:49:6e:6a:e9:c5:9b:ba:6b:80:ea:
35:79:6d:99:9f:0e:b6:aa:bd:e6:64:0e:d1:0f:d6:
42:45:2e:18:ef:da:fc:92:09:a6:01:f0:77:c3:63:
01:7b:4a:13:c1:a1:31:ef:9a:7d:dd:d2:2d:b5:3d:
0b:9b:5f:54:e1:f2:90:a7:b4:8b:3a:a1:02:3f:7d:
4f:65:97:eb:8c:59:fd:5e:e1:9c:a3:ca:6a:11:a7:
6d:82:b3:d0:3f:8d:18:65:2c:aa:46:fd:59:d6:df:
dd:3b:68:06:a2:fa:8a:2f:92:90:4b:d6:ae:94:0b:
7e:8d:df:b2:45:ca:dc:b4:a9:87:6b:86:1b:74:b2:
dc:88:a1:96:2d:81:17:6b:ba:c1:34:a5:90:da:39:
2a:2a:10:08:f5:07:43:9e:2e:78:27:86:a8:34:51:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:B2:CD:43:B4:1C:97:81:8D:AB:32:46:A0:BD:EC:DB:02:48:3E
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/GaWyzUO0HJeBjasyRqC97NsCSD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.248.0/22
5.183.240.0/22
45.14.80.0/24
45.86.24.0/22
92.119.24.0/22
Signature Algorithm: sha256WithRSAEncryption
97:45:79:08:e4:e4:ea:23:db:0b:66:4a:a2:59:90:6d:3e:b0:
ab:59:b3:ed:c2:aa:f1:3c:71:8f:96:77:4c:bc:fa:92:d1:70:
ca:f7:29:10:6e:55:06:c8:a7:e6:bd:c9:ed:be:fd:78:01:6f:
76:c4:9d:f1:78:50:37:34:b4:d8:00:9e:7c:bf:66:bc:67:f0:
97:3a:be:70:63:4e:ee:cb:63:cf:88:6d:8d:ae:f7:34:cb:04:
d0:30:6d:0b:97:54:06:40:a4:99:0e:c1:6a:86:23:f8:fd:d3:
a5:86:e0:98:93:24:b3:11:64:02:57:0e:0d:32:c8:5c:62:d9:
47:a8:dd:ad:c3:6c:9c:19:d4:33:e7:ee:37:e3:d5:f8:75:6e:
3a:87:fb:a1:28:85:52:77:7b:f8:48:43:31:51:aa:dd:5d:b2:
f5:80:6f:fe:44:11:17:d1:6c:cd:aa:88:4d:8e:48:2b:6f:08:
52:9b:f6:26:55:0f:d3:4f:50:ca:59:a9:db:18:87:34:51:69:
02:d2:fd:c7:57:85:40:6e:a5:ef:fd:f2:48:c3:74:a2:c3:0c:
85:d0:e5:2b:36:e4:d7:ef:4c:14:3d:89:ba:54:16:85:a8:76:
8b:81:1e:e6:27:25:d1:ac:67:52:79:f0:ba:ad:5d:cf:72:72:
66:f4:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:18 2025 by rpki-client