Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/T3l0Xm2tvx_7udWVZofVzk16tLw.roa
File: T3l0Xm2tvx_7udWVZofVzk16tLw.roa (raw, json)
Hash identifier: eurl9HmjkpuZPoG9Fph2IgojqAK8MnWszb3EdIdZoig=
Subject key identifier: 4F:79:74:5E:6D:AD:BF:1F:FB:B9:D5:95:66:87:D5:CE:4D:7A:B4:BC
Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial: 019425220A559329F09ECE3A333DD4FB8983
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/T3l0Xm2tvx_7udWVZofVzk16tLw.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15895
IP address blocks: 5.248.0.0/16 maxlen: 16
37.115.0.0/16 maxlen: 16
37.229.0.0/16 maxlen: 16
46.118.0.0/15 maxlen: 15
46.185.0.0/17 maxlen: 17
46.211.0.0/16 maxlen: 16
62.64.64.0/18 maxlen: 18
77.247.216.0/21 maxlen: 21
81.23.16.0/20 maxlen: 20
81.23.16.0/24 maxlen: 24
83.170.192.0/18 maxlen: 18
85.223.128.0/17 maxlen: 17
89.162.128.0/17 maxlen: 17
94.27.0.0/17 maxlen: 17
94.153.0.0/16 maxlen: 16
94.153.164.0/22 maxlen: 22
109.162.0.0/17 maxlen: 17
134.249.0.0/16 maxlen: 16
176.8.0.0/16 maxlen: 16
178.137.0.0/16 maxlen: 16
188.163.0.0/16 maxlen: 16
188.163.0.0/17 maxlen: 17
193.41.60.0/22 maxlen: 22
193.41.60.0/23 maxlen: 23
193.41.62.0/23 maxlen: 23
193.239.128.0/23 maxlen: 23
212.82.192.0/19 maxlen: 19
212.109.32.0/19 maxlen: 19
2a02:8a8::/32 maxlen: 32
2a02:2378::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0a:55:93:29:f0:9e:ce:3a:33:3d:d4:fb:89:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f79745e6dadbf1ffbb9d5956687d5ce4d7ab4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:2f:a0:48:79:ad:8a:45:e9:a4:64:49:61:
b5:3b:74:a6:ae:63:5c:ea:c3:f3:64:c4:5e:9c:8e:
ee:59:4b:23:94:d9:d4:ce:3a:4a:e9:82:e3:d7:b4:
ba:1f:bd:87:a4:0b:d2:a3:0f:99:49:40:51:57:63:
e5:65:71:75:ad:75:5c:db:72:7e:61:4b:c1:0f:fc:
a6:1f:f2:ab:11:de:39:27:5f:a6:b6:15:dd:d3:5b:
e8:41:f2:67:bb:11:93:ba:f6:fb:ed:be:4a:6d:a6:
c1:6b:30:b8:9b:6f:9b:8c:f5:f9:b2:2e:52:d4:72:
a2:43:23:01:cb:89:b3:07:0c:12:8e:eb:cc:5c:33:
ce:ad:51:85:08:76:83:b3:0a:ca:bd:2b:5a:52:ea:
bf:c7:f9:28:0e:93:53:00:34:70:78:26:33:fd:e5:
b7:65:7c:82:12:fd:16:cd:ae:51:94:d7:8b:dc:8e:
2b:92:d8:d1:2a:87:7d:68:34:b9:cf:09:47:3b:ca:
65:21:db:c1:a8:68:44:f9:7a:6c:39:7d:d7:d4:17:
78:14:95:2d:ba:ee:32:dc:4e:a2:70:06:52:65:a1:
e7:94:cf:b5:64:45:a1:0d:6b:33:e5:a6:28:b3:13:
93:aa:fa:f7:eb:b2:d1:6b:3d:fb:a7:d4:d4:c0:2d:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:79:74:5E:6D:AD:BF:1F:FB:B9:D5:95:66:87:D5:CE:4D:7A:B4:BC
X509v3 Authority Key Identifier:
keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/T3l0Xm2tvx_7udWVZofVzk16tLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.248.0.0/16
37.115.0.0/16
37.229.0.0/16
46.118.0.0/15
46.185.0.0/17
46.211.0.0/16
62.64.64.0/18
77.247.216.0/21
81.23.16.0/20
83.170.192.0/18
85.223.128.0/17
89.162.128.0/17
94.27.0.0/17
94.153.0.0/16
109.162.0.0/17
134.249.0.0/16
176.8.0.0/16
178.137.0.0/16
188.163.0.0/16
193.41.60.0/22
193.239.128.0/23
212.82.192.0/19
212.109.32.0/19
IPv6:
2a02:8a8::/32
2a02:2378::/32
Signature Algorithm: sha256WithRSAEncryption
29:15:91:c6:10:9c:08:46:28:b8:bb:4f:55:87:1d:47:6b:7a:
cc:aa:93:dd:8e:ff:5c:38:5e:35:ef:59:b7:b6:ca:70:b6:13:
fa:a7:21:92:a5:5d:46:72:b5:4f:45:ba:2b:36:d7:3a:8a:30:
95:17:6a:6c:85:52:c1:7f:0f:d3:2a:44:c1:62:cc:e4:c3:3a:
14:f5:85:27:7f:1b:71:4c:c8:2e:bc:86:32:aa:ea:b4:0a:45:
84:dc:bf:5c:15:54:20:39:f5:80:f8:09:bc:8a:cb:b1:fc:26:
53:6b:4a:58:01:2f:3d:ff:b6:81:b3:00:cc:a8:21:a8:ff:59:
5f:54:c0:e3:93:4a:fb:ab:15:ac:c9:26:bf:95:e0:fb:95:85:
75:53:6b:7d:79:21:aa:5c:82:e9:ee:44:6f:38:ea:5c:45:91:
af:d4:8b:72:4f:43:72:83:2d:86:0d:be:6e:3e:e2:5c:4d:aa:
7b:cd:57:44:73:19:3d:d7:f3:7a:f5:7d:d2:3d:b2:ce:0b:1d:
a2:4d:1f:88:e1:4f:80:03:5d:84:24:0e:d1:08:9e:10:25:77:
58:7e:1f:bf:81:06:12:b3:18:16:ba:89:64:7f:58:a3:0a:ed:
ba:40:b3:8a:62:56:95:de:4f:bc:74:b5:a3:0e:35:f4:95:1c:
c6:31:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:54 2025 by rpki-client