Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/5V4rjQ43xfYjLGp5hzN8tZJdZIE.roa
File: 5V4rjQ43xfYjLGp5hzN8tZJdZIE.roa (raw, json)
Hash identifier: I7kw5QrCygNmj5VarllnAkUa9vt3iAYR8xNWGmPMVvg=
Subject key identifier: E5:5E:2B:8D:0E:37:C5:F6:23:2C:6A:79:87:33:7C:B5:92:5D:64:81
Certificate issuer: /CN=6aebc95381af87a34aee42e6854cc608a90b4acc
Certificate serial: 0189965A2EE2E3B9E63BD007D98C275AF081
Authority key identifier: 6A:EB:C9:53:81:AF:87:A3:4A:EE:42:E6:85:4C:C6:08:A9:0B:4A:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auvJU4Gvh6NK7kLmhUzGCKkLSsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/5V4rjQ43xfYjLGp5hzN8tZJdZIE.roa
Signing time: Thu 27 Jul 2023 07:57:19 +0000
ROA not before: Thu 27 Jul 2023 07:57:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25521
IP address blocks: 185.223.112.0/22 maxlen: 22
46.30.160.0/21 maxlen: 21
93.188.32.0/21 maxlen: 21
176.115.96.0/21 maxlen: 21
193.106.136.0/22 maxlen: 22
193.0.216.0/22 maxlen: 22
91.224.24.0/23 maxlen: 23
82.193.96.0/19 maxlen: 19
195.64.148.0/23 maxlen: 23
2a02:2610::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:5a:2e:e2:e3:b9:e6:3b:d0:07:d9:8c:27:5a:f0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aebc95381af87a34aee42e6854cc608a90b4acc
Validity
Not Before: Jul 27 07:57:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e55e2b8d0e37c5f6232c6a7987337cb5925d6481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:17:71:33:e7:2f:98:d5:8c:42:0b:c6:1e:
05:69:64:0b:65:bd:2f:24:d3:cc:69:95:c5:72:1d:
17:7c:38:13:38:fb:cd:07:01:67:d7:79:9d:77:e4:
f8:7a:d9:6a:7a:27:29:88:ff:c8:b5:9c:7d:2a:58:
9a:b0:94:71:d4:49:7d:51:7a:b0:c7:2b:ac:76:1a:
ef:7f:0f:09:fc:cf:3a:5d:25:3b:10:ec:59:b2:9f:
4a:92:3c:9f:26:a8:4e:f0:e5:0f:a6:1e:9a:61:a1:
6b:0f:41:da:ce:25:fb:16:25:72:9f:2e:f7:56:13:
9b:b9:de:c4:80:bf:3c:a3:de:de:fb:9b:8d:c2:84:
a8:c4:78:48:8b:6e:08:11:03:44:e9:ad:55:52:b3:
1b:e5:40:fb:10:bb:4e:85:f9:ef:6a:9e:7e:11:09:
23:11:31:2c:0e:f7:ff:05:50:2c:8c:8f:4a:29:55:
10:34:93:9d:c3:f6:ce:58:73:9f:40:8b:55:c3:c2:
4d:a9:7e:af:b7:ae:06:49:c0:cd:53:e0:19:5d:0c:
1b:2e:e3:41:68:75:d0:57:f4:66:ae:2b:d4:58:d9:
dd:69:75:c1:3c:e2:6a:2a:e0:96:d1:d3:42:68:b3:
45:f4:6f:b9:72:fc:f0:3d:4c:5a:60:5b:7e:da:bd:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5E:2B:8D:0E:37:C5:F6:23:2C:6A:79:87:33:7C:B5:92:5D:64:81
X509v3 Authority Key Identifier:
keyid:6A:EB:C9:53:81:AF:87:A3:4A:EE:42:E6:85:4C:C6:08:A9:0B:4A:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auvJU4Gvh6NK7kLmhUzGCKkLSsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/5V4rjQ43xfYjLGp5hzN8tZJdZIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/auvJU4Gvh6NK7kLmhUzGCKkLSsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.160.0/21
82.193.96.0/19
91.224.24.0/23
93.188.32.0/21
176.115.96.0/21
185.223.112.0/22
193.0.216.0/22
193.106.136.0/22
195.64.148.0/23
IPv6:
2a02:2610::/32
Signature Algorithm: sha256WithRSAEncryption
83:c4:95:07:c7:c9:2b:80:fd:30:69:9f:13:34:2d:28:df:75:
b0:92:99:23:c4:9d:b2:79:90:11:6f:e5:c3:3a:6e:89:96:1d:
0f:be:d5:22:b0:49:e9:00:f8:c1:f3:fe:fa:da:5a:25:ac:32:
df:fa:02:ac:38:c6:80:39:51:6d:25:66:23:bc:2f:cf:8a:c0:
ee:52:eb:de:d8:15:14:c0:29:35:72:ca:f2:13:3e:88:35:f0:
2d:ce:d9:1c:cb:55:83:72:e2:a4:2b:f0:5c:4e:c7:91:50:ad:
ac:7a:16:ca:05:57:10:23:7d:e9:d8:ae:e6:92:69:46:91:6e:
f0:d4:db:95:86:ed:2f:bc:5f:03:1d:97:44:da:57:9b:78:59:
bc:b1:e0:ec:fa:fd:30:64:69:67:59:bc:a1:c0:1f:11:0f:17:
fe:cb:57:32:84:41:aa:ca:67:4d:2d:b7:25:14:5f:c4:eb:2d:
e2:f9:f1:fb:5f:9f:8d:56:99:47:59:a6:da:35:0e:e7:65:24:
de:1d:63:ac:69:39:46:04:65:00:eb:81:dc:ee:1c:dc:6f:16:
ee:93:4c:f6:8f:81:f1:8a:af:4e:59:01:47:e5:2a:ab:f1:c6:
5d:36:d4:29:84:7f:5d:86:3e:b8:04:df:87:12:eb:cb:f7:64:
93:bb:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:53 2025 by rpki-client