Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/speo3XmUyjsNbioO6gKJIahw4ug.roa
File: speo3XmUyjsNbioO6gKJIahw4ug.roa (raw, json)
Hash identifier: t/+D25Q2fBgXl/1th2CCzyk9Gx0o0GAlZIRtuZNjTv0=
Subject key identifier: B2:97:A8:DD:79:94:CA:3B:0D:6E:2A:0E:EA:02:89:21:A8:70:E2:E8
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0194274885B21E66C3FCB33340B91A2D1BA5
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/speo3XmUyjsNbioO6gKJIahw4ug.roa
Signing time: Thu 02 Jan 2025 13:50:51 +0000
ROA not before: Thu 02 Jan 2025 13:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.180.252.0/23 maxlen: 23
5.180.254.0/23 maxlen: 23
5.253.244.0/24 maxlen: 24
45.67.136.0/24 maxlen: 24
45.67.138.0/24 maxlen: 24
45.84.199.0/24 maxlen: 24
45.91.251.0/24 maxlen: 24
45.131.109.0/24 maxlen: 24
45.134.108.0/23 maxlen: 23
45.134.108.0/24 maxlen: 24
45.134.109.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
45.145.224.0/23 maxlen: 23
46.243.76.0/22 maxlen: 24
185.132.55.0/24 maxlen: 24
204.11.1.0/24 maxlen: 24
212.87.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:85:b2:1e:66:c3:fc:b3:33:40:b9:1a:2d:1b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b297a8dd7994ca3b0d6e2a0eea028921a870e2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:41:5a:43:aa:58:51:e6:ec:62:44:56:70:
01:71:49:19:d0:38:bf:a0:c1:2a:a8:1d:11:b3:4c:
7e:11:a6:77:07:df:23:27:ae:91:e4:e9:aa:23:ed:
b4:7b:a6:de:2c:75:4b:2d:e2:c7:24:a8:6a:ca:a6:
e8:fb:b3:d6:6c:c3:47:dd:8e:f7:24:af:b0:4d:e2:
93:18:57:c2:a1:14:ad:81:51:8c:ef:f6:7b:5f:88:
2e:29:33:2f:85:77:b6:09:49:ff:51:40:9c:71:62:
9f:ae:35:35:77:b3:74:69:68:c1:55:77:34:0f:50:
3f:3a:b4:d3:e5:0c:3e:6b:d6:5b:4c:bc:52:1a:c2:
a2:db:2c:f1:ba:af:ef:1e:76:73:40:af:7e:76:ea:
c4:14:8b:42:30:10:50:4c:34:37:5e:3d:ce:d0:b1:
ee:61:f8:ca:10:8e:0c:f9:e9:a8:ba:08:22:25:88:
26:43:1d:74:8b:2f:b2:ff:53:a0:d7:4e:d4:fc:c8:
0d:7a:a7:25:4c:d0:47:31:0c:74:e7:7a:08:b2:65:
96:5f:73:c7:d9:47:fa:48:06:d5:bf:94:40:6d:a7:
5a:7c:12:58:44:cb:14:37:77:40:0b:d7:d0:03:92:
9f:ea:5d:fe:77:7b:80:5e:45:6c:ee:fa:8b:c7:61:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:A8:DD:79:94:CA:3B:0D:6E:2A:0E:EA:02:89:21:A8:70:E2:E8
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/speo3XmUyjsNbioO6gKJIahw4ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.252.0/22
5.253.244.0/24
45.67.136.0/24
45.67.138.0/24
45.84.199.0/24
45.91.251.0/24
45.131.109.0/24
45.134.108.0/23
45.137.71.0/24
45.145.224.0/23
46.243.76.0/22
185.132.55.0/24
204.11.1.0/24
212.87.214.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:9e:06:7c:23:00:61:04:f7:13:15:45:bd:27:bb:81:eb:13:
56:f1:e4:39:72:e6:de:14:95:e7:67:9b:8a:8b:ca:99:d5:52:
c8:83:7e:7a:74:f1:6f:6a:82:7a:24:55:39:fa:61:f9:98:90:
b5:09:a5:8e:55:40:9a:3e:d8:f8:16:09:46:f5:ae:a0:eb:49:
34:5a:8f:cd:ea:08:f3:d0:b8:eb:7d:1d:18:1e:84:c0:66:ba:
d0:41:ad:05:e8:e9:f2:be:d0:ff:28:53:cf:86:94:79:32:01:
dd:50:2a:ab:81:29:33:7c:14:34:f4:2d:22:da:fd:58:f7:b0:
ab:c7:b7:10:f3:3a:d7:0b:66:5b:f4:13:18:ab:59:5e:e3:3c:
23:4e:35:24:f0:6c:60:cd:47:7b:1a:3e:0b:18:15:78:d3:b4:
0c:ff:f3:c1:9b:6d:94:eb:a4:09:ae:87:14:83:0b:41:24:c1:
60:9c:73:b3:00:c4:0c:9e:9b:aa:42:bd:2e:a1:5b:fd:25:22:
30:07:88:f4:e6:6d:4a:8c:35:ae:66:30:7e:01:ca:3f:33:65:
9e:e0:47:96:ec:df:13:32:0c:70:c1:2c:87:91:23:29:a1:b5:
5e:47:7b:1f:f8:dd:72:18:a2:e4:16:d8:99:f7:68:c7:7d:93:
0c:4f:e6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:07:22 2025 by rpki-client