Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/4Pe6VQVVObKJPAMtRljGIdiYS84.roa
File: 4Pe6VQVVObKJPAMtRljGIdiYS84.roa (raw, json)
Hash identifier: vtq5yqX9x8tGxpUJWLZ9ZxQxYz/RgLUeWaBR+Rqk5Ew=
Subject key identifier: E0:F7:BA:55:05:55:39:B2:89:3C:03:2D:46:58:C6:21:D8:98:4B:CE
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0194180920F38AA41B135C3DEBB238FF0565
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/4Pe6VQVVObKJPAMtRljGIdiYS84.roa
Signing time: Mon 30 Dec 2024 14:47:18 +0000
ROA not before: Mon 30 Dec 2024 14:47:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 5.133.124.0/22 maxlen: 22
31.40.196.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:09:20:f3:8a:a4:1b:13:5c:3d:eb:b2:38:ff:05:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 30 14:47:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0f7ba55055539b2893c032d4658c621d8984bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:ab:73:10:57:ff:8a:18:3f:7f:df:f3:04:
fe:7a:62:11:62:4a:e8:17:7c:9f:15:a1:00:4e:ea:
8d:5b:89:89:c2:50:bc:a7:f3:60:6d:b3:48:86:be:
72:e9:5a:bd:10:2c:ef:40:5a:47:9c:5b:bc:67:90:
5b:68:c8:7b:ee:62:64:89:7e:c7:b1:87:75:37:8a:
72:5f:74:7d:a7:38:bd:e7:da:b5:30:8a:2f:e1:1f:
9c:46:aa:1e:13:ca:a6:73:f6:c3:ea:2c:c8:2e:f2:
09:87:7f:d3:dc:5e:e3:69:d5:c9:8b:e1:eb:71:4b:
52:f3:69:70:6e:67:15:27:38:18:1f:4d:3a:ac:00:
30:13:cd:76:f6:09:57:ad:a8:23:ec:da:e0:1e:cc:
a1:df:d1:a3:71:30:2e:47:51:20:77:9c:18:6a:f2:
ca:c9:9d:08:20:e6:ff:ea:14:d6:eb:17:d1:45:f1:
fe:9a:4a:2f:d3:f9:3a:e5:93:f4:fd:52:31:f7:7c:
02:86:95:8d:a3:e2:c7:4d:ac:df:be:03:6a:a2:77:
80:89:e2:09:96:13:ed:01:2a:3c:40:aa:ff:e3:40:
ba:2c:86:b8:61:a0:0e:fa:ac:b1:c3:26:01:a8:cc:
ad:4b:c0:06:a9:16:0d:89:c7:26:07:64:90:58:b7:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F7:BA:55:05:55:39:B2:89:3C:03:2D:46:58:C6:21:D8:98:4B:CE
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/4Pe6VQVVObKJPAMtRljGIdiYS84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/22
31.40.196.0/22
83.171.244.0/22
85.8.144.0/22
139.28.212.0/22
212.87.196.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:34:63:7b:78:69:28:41:d1:67:88:0a:88:c2:78:b2:8d:94:
ed:80:bc:39:a6:f0:7a:ea:b1:72:1e:10:ba:8c:82:2f:ed:3a:
0d:2f:4d:8c:0b:8d:9e:42:bd:ab:2e:65:b2:ca:4a:8b:3c:cf:
b8:94:de:8e:06:b0:92:b1:de:9e:03:53:5a:6f:75:0c:b2:74:
5b:38:30:c5:96:be:8f:e1:fb:b6:48:d3:66:80:1e:5a:cd:49:
e6:34:63:25:80:1d:8f:34:3a:72:ab:bd:ef:49:59:15:44:4b:
7a:01:93:ce:75:a1:51:a8:a3:98:ec:b0:8d:8b:b2:ed:7d:2d:
90:64:32:c7:ca:46:bc:04:b8:5e:6c:19:68:12:6d:1b:7a:01:
6a:7d:10:3c:61:48:42:7f:bc:b0:0d:b0:5c:2e:80:7c:b4:06:
84:43:d4:2e:47:d9:ce:53:7a:45:1d:5f:8f:ea:00:42:c5:15:
80:87:15:0e:07:4c:5a:3c:e4:16:f3:4b:fd:2f:24:4d:f3:e4:
49:d9:ae:52:d8:08:28:9e:5c:f2:fe:81:e6:41:1d:5b:27:4e:
3e:c6:a3:57:d1:32:bf:d6:cf:72:ce:da:9a:21:b5:b8:d2:bd:
da:fa:1b:3e:8d:eb:44:60:5e:fa:06:be:eb:30:dd:97:af:d7:
b0:48:ca:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:17 2025 by rpki-client