Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/hJV99DkiznptL0bXMB6sbmtuFdU.roa
File: hJV99DkiznptL0bXMB6sbmtuFdU.roa (raw, json)
Hash identifier: N5mVGIGGPriZl7+35R8QZrXFAl1bXdGG0Ddp/WUT4Fc=
Subject key identifier: 84:95:7D:F4:39:22:CE:7A:6D:2F:46:D7:30:1E:AC:6E:6B:6E:15:D5
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 0190E94817C9227AA3FB0E4FC3439E4C0B98
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/hJV99DkiznptL0bXMB6sbmtuFdU.roa
Signing time: Thu 25 Jul 2024 09:45:34 +0000
ROA not before: Thu 25 Jul 2024 09:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197328
IP address blocks: 5.255.57.0/24 maxlen: 24
5.255.61.0/24 maxlen: 24
5.255.62.0/24 maxlen: 24
5.255.63.0/24 maxlen: 24
23.252.66.0/24 maxlen: 24
91.92.112.0/23 maxlen: 23
107.150.177.0/24 maxlen: 24
162.222.88.0/24 maxlen: 24
167.160.27.0/24 maxlen: 24
185.4.225.0/24 maxlen: 24
185.4.227.0/24 maxlen: 24
185.150.2.0/24 maxlen: 24
185.162.72.0/23 maxlen: 23
2a06:4b40::/29 maxlen: 29
2a07:5140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:48:17:c9:22:7a:a3:fb:0e:4f:c3:43:9e:4c:0b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jul 25 09:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84957df43922ce7a6d2f46d7301eac6e6b6e15d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:91:e6:7b:ee:fc:8d:c2:43:72:96:b8:bb:b7:
e1:60:7e:51:ad:e7:82:78:19:b9:c1:a1:3f:35:25:
54:22:bc:e9:3b:2e:d5:56:4f:a7:3e:0b:63:47:e2:
32:f4:b9:d9:57:d7:1e:4e:b5:12:87:ac:6c:37:3b:
b8:87:0a:e7:38:28:2c:d6:14:9a:2e:a2:8b:af:fe:
b8:6f:e6:5c:f4:b1:64:b5:af:0f:4d:71:bb:6c:05:
1a:2e:42:22:0e:fa:f5:1f:96:b0:b8:16:31:9d:b0:
2a:0a:5e:6c:87:c4:de:f8:bb:ef:a6:c2:b9:81:88:
cd:4a:18:c4:26:eb:d1:81:d1:09:c2:94:4c:c0:72:
ec:7c:35:78:90:db:11:13:d8:7d:28:5f:ba:a6:a4:
62:57:8f:c4:b2:f9:f5:35:a2:eb:dc:18:c8:62:07:
86:81:b8:a7:a4:a1:99:4e:32:f0:62:9b:56:9d:19:
47:45:74:7e:76:97:0a:40:f3:fa:97:8a:96:bb:37:
88:dc:86:67:93:8f:ac:03:7a:cf:30:24:86:a3:e4:
3d:37:e1:8e:eb:5c:7d:d6:81:46:aa:47:3a:cd:94:
25:e0:7c:c8:0b:04:72:0b:b4:a3:63:77:f9:a1:3c:
d1:3d:4b:b5:39:41:9e:b2:14:c2:60:39:4c:ab:62:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:7D:F4:39:22:CE:7A:6D:2F:46:D7:30:1E:AC:6E:6B:6E:15:D5
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/hJV99DkiznptL0bXMB6sbmtuFdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.57.0/24
5.255.61.0-5.255.63.255
23.252.66.0/24
91.92.112.0/23
107.150.177.0/24
162.222.88.0/24
167.160.27.0/24
185.4.225.0/24
185.4.227.0/24
185.150.2.0/24
185.162.72.0/23
IPv6:
2a06:4b40::/29
2a07:5140::/29
Signature Algorithm: sha256WithRSAEncryption
57:57:18:bd:51:2c:3f:b0:bf:00:74:3f:47:2e:a9:57:6d:5e:
0c:e8:ba:24:09:7c:a2:fb:a1:52:1e:4c:49:ea:f8:a6:80:3f:
d0:1e:73:13:6a:6f:d1:cc:24:25:8a:87:82:cc:aa:fc:1c:8a:
41:11:c8:92:28:a3:89:cf:9d:12:3c:91:fd:f6:c1:14:a2:af:
86:e4:20:f0:36:d8:4f:97:5f:64:66:5c:48:45:2b:9c:87:6b:
35:bc:72:a2:68:63:ac:66:12:9d:17:20:76:01:49:16:71:7f:
77:41:97:ba:f1:a0:d2:16:f6:bb:82:bd:e4:02:0e:a3:74:8c:
5f:3c:bf:00:fa:18:25:bc:ff:7e:09:09:33:ad:0c:ff:fb:30:
f4:e0:1b:73:42:3e:8b:d3:c9:3e:6d:20:7d:91:2a:74:7b:fa:
7a:30:9e:36:1e:3e:eb:80:16:3c:87:0e:6b:23:5a:f2:2a:62:
4c:76:35:43:8a:70:02:98:05:f9:86:9c:d5:24:6c:60:ec:a8:
ac:73:10:d3:aa:41:84:a5:58:4a:ee:0a:03:52:37:df:6e:f3:
e4:4a:e5:12:e4:70:af:ab:c6:80:2b:22:1a:0f:26:99:fe:72:
23:88:82:55:7a:1e:ee:06:44:53:5d:b6:79:60:52:e9:06:1d:
89:f0:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:07 2025 by rpki-client