Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tUBhXkETbUKCnO8W2SAeR07OoaQ.roa
File: tUBhXkETbUKCnO8W2SAeR07OoaQ.roa (raw, json)
Hash identifier: WRdbmDoIbosCzCTLHdz7xcXsDPyffM2I22DDaDwYtpk=
Subject key identifier: B5:40:61:5E:41:13:6D:42:82:9C:EF:16:D9:20:1E:47:4E:CE:A1:A4
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427488E981755561DCA361042682EDACB
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tUBhXkETbUKCnO8W2SAeR07OoaQ.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58087
IP address blocks: 5.253.247.0/24 maxlen: 24
37.221.93.0/24 maxlen: 24
45.11.229.0/24 maxlen: 24
45.13.225.0/24 maxlen: 24
45.86.155.0/24 maxlen: 24
45.131.64.0/24 maxlen: 24
45.133.74.0/24 maxlen: 24
109.71.252.0/24 maxlen: 24
194.15.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8e:98:17:55:56:1d:ca:36:10:42:68:2e:da:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b540615e41136d42829cef16d9201e474ecea1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:5c:25:fa:15:0e:4c:88:e9:b0:01:6a:c0:
6f:ea:41:85:a7:cc:70:9f:9b:44:f6:33:5d:ea:2b:
78:7e:1a:a4:9b:78:04:6c:8a:eb:47:d8:06:f2:4d:
d8:7b:58:5f:98:9c:08:77:ed:87:34:1e:fc:61:c1:
85:98:36:aa:62:59:f2:09:c2:1e:5b:f6:22:47:50:
da:5f:5e:ec:9e:ff:c3:cd:5d:7a:a5:30:12:1d:9a:
6f:98:01:fe:67:ac:2c:bc:22:f9:ff:cf:95:61:ef:
3e:66:2f:67:e3:c6:cb:81:87:c5:c2:df:78:f7:64:
90:b6:cd:3d:b9:2e:50:4a:b4:a9:71:68:bc:f5:37:
4c:d5:cb:38:56:be:e9:86:89:60:2a:8d:f2:a5:51:
8a:97:ab:f2:8b:f9:9f:6e:96:48:26:f1:d6:c0:41:
92:0c:e8:b9:dd:ab:eb:bd:83:a3:53:45:25:80:d8:
88:8c:8d:97:62:71:01:31:9c:1b:8e:7d:e6:ca:4c:
f0:1a:48:b0:99:08:10:da:33:06:94:1d:9d:da:55:
6d:41:88:5c:e8:91:0f:b8:98:ef:22:66:e1:f8:ef:
d9:e0:7a:10:82:f7:d6:23:aa:bc:fd:f6:bd:a3:9a:
9e:7f:c2:14:6d:63:99:96:87:86:27:ec:12:67:ec:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:40:61:5E:41:13:6D:42:82:9C:EF:16:D9:20:1E:47:4E:CE:A1:A4
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tUBhXkETbUKCnO8W2SAeR07OoaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.247.0/24
37.221.93.0/24
45.11.229.0/24
45.13.225.0/24
45.86.155.0/24
45.131.64.0/24
45.133.74.0/24
109.71.252.0/24
194.15.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:56:3e:d5:ea:de:90:6f:fe:fd:b2:26:a9:94:fa:7a:9b:c8:
98:06:fa:e5:10:45:03:ff:ed:9e:c5:a9:f7:2f:0a:ff:a2:2d:
0b:2b:c1:26:a1:a6:45:66:fe:3f:19:e8:45:3d:c7:bb:ca:37:
b8:d9:11:a4:36:df:6d:f0:48:cb:eb:b8:00:9d:81:ea:d7:04:
d4:0a:a2:26:81:45:9d:83:a3:01:5d:2e:aa:9a:01:e5:71:85:
7f:74:41:99:9c:92:19:6b:96:41:47:ba:98:a1:7b:b2:69:b4:
22:a4:2b:bd:8a:2c:d5:b4:0a:66:d2:2a:35:78:bc:8c:8f:ab:
6e:60:92:20:3b:bf:b1:4a:88:91:f4:4b:2d:ef:d3:0b:59:66:
fa:e0:51:5a:78:39:54:7f:f3:17:ea:9c:46:0a:39:a7:11:85:
f4:24:1e:00:6a:7e:8c:19:83:09:bc:e1:57:56:68:03:96:b2:
df:11:4f:37:21:00:2b:46:5d:0f:7c:8d:0a:8b:60:a0:29:ef:
7f:dc:68:65:ca:19:5c:f3:00:77:08:fd:01:6b:b6:87:cc:9f:
de:20:36:45:c3:1f:6d:4e:67:e0:f5:49:8f:60:ab:c3:00:5d:
30:f1:c9:25:52:4d:bf:24:92:55:b2:7e:fb:14:9f:32:ce:9f:
6d:11:cd:b8
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQnSI6YF1VWHco2EEJoLtrLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTAyMTM1MDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTQwNjE1ZTQxMTM2ZDQyODI5Y2VmMTZkOTIwMWU0NzRlY2VhMWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIZcJfoVDkyI6bABasBv6kGFp8xw
n5tE9jNd6it4fhqkm3gEbIrrR9gG8k3Ye1hfmJwId+2HNB78YcGFmDaqYlnyCcIe
W/YiR1DaX17snv/DzV16pTASHZpvmAH+Z6wsvCL5/8+VYe8+Zi9n48bLgYfFwt94
92SQts09uS5QSrSpcWi89TdM1cs4Vr7pholgKo3ypVGKl6vyi/mfbpZIJvHWwEGS
DOi53avrvYOjU0UlgNiIjI2XYnEBMZwbjn3mykzwGkiwmQgQ2jMGlB2d2lVtQYhc
6JEPuJjvImbh+O/Z4HoQgvfWI6q8/fa9o5qef8IUbWOZloeGJ+wSZ+zY/QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFLVAYV5BE21CgpzvFtkgHkdOzqGkMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvdFVCaFhrRVRiVUtDbk84VzJTQWVSMDdPb2FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQABf33AwQA
Jd1dAwQALQvlAwQALQ3hAwQALVabAwQALYNAAwQALYVKAwQAbUf8AwQAwg8kMA0G
CSqGSIb3DQEBCwUAA4IBAQCdVj7V6t6Qb/79siaplPp6m8iYBvrlEEUD/+2exan3
Lwr/oi0LK8EmoaZFZv4/GehFPce7yje42RGkNt9t8EjL67gAnYHq1wTUCqImgUWd
g6MBXS6qmgHlcYV/dEGZnJIZa5ZBR7qYoXuyabQipCu9iizVtApm0io1eLyMj6tu
YJIgO7+xSoiR9Est79MLWWb64FFaeDlUf/MX6pxGCjmnEYX0JB4Aan6MGYMJvOFX
VmgDlrLfEU83IQArRl0PfI0Ki2CgKe9/3Ghlyhlc8wB3CP0Ba7aHzJ/eIDZFwx9t
Tmfg9UmPYKvDAF0w8cklUk2/JJJVsn77FJ8yzp9tEc24
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:48:24 2025 by rpki-client