Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/5LpbvMKculpNW1_fQbfgrIVdju0.roa
File: 5LpbvMKculpNW1_fQbfgrIVdju0.roa (raw, json)
Hash identifier: mPsecNtGJ/ibeGyaPpZbW32Bg+MXh0QB1d0oYRJKGLQ=
Subject key identifier: E4:BA:5B:BC:C2:9C:BA:5A:4D:5B:5F:DF:41:B7:E0:AC:85:5D:8E:ED
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01906E60D8212E9047FC384FE289C2874EBA
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/5LpbvMKculpNW1_fQbfgrIVdju0.roa
Signing time: Mon 01 Jul 2024 12:59:18 +0000
ROA not before: Mon 01 Jul 2024 12:59:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 31.40.196.0/22 maxlen: 22
31.40.204.0/22 maxlen: 22
37.221.76.0/22 maxlen: 22
62.182.32.0/22 maxlen: 22
77.241.72.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
84.54.0.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
85.235.72.0/22 maxlen: 22
139.28.48.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
176.53.156.0/22 maxlen: 22
176.96.128.0/22 maxlen: 22
193.32.204.0/22 maxlen: 22
193.38.44.0/22 maxlen: 22
194.93.48.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
217.18.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:60:d8:21:2e:90:47:fc:38:4f:e2:89:c2:87:4e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jul 1 12:59:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4ba5bbcc29cba5a4d5b5fdf41b7e0ac855d8eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:fd:6d:23:98:51:25:2d:d1:7c:81:2a:43:
45:27:12:3b:a4:ac:9c:1b:d8:bd:f6:19:7e:33:1d:
a1:30:83:2a:01:0f:e4:dd:c3:5d:da:47:1b:8b:d3:
07:8e:b1:2f:b0:b8:fd:2b:32:5a:ef:15:9b:91:e6:
3e:e8:f4:58:a8:76:2e:22:50:ef:a8:ac:be:61:74:
a6:0b:bf:ef:42:ce:20:d0:d7:f2:cc:82:89:40:02:
56:10:16:9d:ce:68:d4:e1:e8:b7:b9:ad:8e:22:6b:
ef:d4:b0:a1:0c:7f:f9:01:23:43:6e:0a:d0:4d:ca:
b7:46:23:af:4b:e4:79:a2:f6:fd:4e:4a:b1:af:6d:
36:44:2b:96:f0:a3:c5:69:0f:d5:c2:32:e9:f9:12:
42:7b:54:4b:6a:4b:92:d7:bc:62:f6:7b:4a:36:4a:
71:1b:bd:39:25:48:7b:d8:91:ab:b7:43:e9:5b:99:
7a:ea:b1:4f:8c:4a:3b:94:92:62:9f:8b:83:dd:79:
44:d8:22:ff:a5:10:a3:23:96:b4:2c:16:bb:0a:9f:
86:52:30:a8:68:3c:1c:93:b1:7b:4a:9e:88:98:59:
76:4d:aa:81:cb:e0:ce:19:1c:41:cb:93:b5:d9:45:
ce:95:d7:8d:9a:21:ad:04:5e:4a:8c:ac:92:3b:ff:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:5B:BC:C2:9C:BA:5A:4D:5B:5F:DF:41:B7:E0:AC:85:5D:8E:ED
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/5LpbvMKculpNW1_fQbfgrIVdju0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
31.40.204.0/22
37.221.76.0/22
62.182.32.0/22
77.241.72.0/22
83.171.244.0/22
84.54.0.0/22
85.8.144.0/22
85.235.72.0/22
139.28.48.0/22
139.28.212.0/22
176.53.156.0/22
176.96.128.0/22
193.32.204.0/22
193.38.44.0/22
194.93.48.0/22
212.87.196.0/22
212.115.100.0/22
217.18.208.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:3a:a4:96:08:3f:b2:aa:ba:e1:57:eb:e0:9b:94:1c:63:6b:
11:5c:06:66:fd:b6:aa:39:8b:15:26:6e:bd:97:45:35:93:2a:
50:43:03:a9:7f:bf:20:d0:dd:7b:f4:e7:3d:44:12:bb:59:c6:
a4:af:25:4a:08:e3:15:7b:d6:be:83:17:74:12:d1:84:4d:97:
f9:9a:d0:e8:53:c7:b7:c1:cd:8e:13:6f:fd:c6:17:31:21:e4:
97:73:2a:be:0f:d2:dd:0a:21:a0:b8:d6:74:d6:2e:e5:3f:4d:
0b:55:77:c6:11:4f:87:b0:24:b7:d8:0b:38:e8:2c:ff:13:d7:
81:09:b8:80:ef:6c:61:ce:a8:7b:88:8b:b8:b0:3c:17:b2:e8:
02:e3:f8:0a:34:fb:2c:ad:09:04:86:d5:62:e8:be:42:6c:c4:
16:bc:29:15:e2:6a:f2:02:bd:3a:ae:5a:8d:53:17:6c:6f:2a:
80:74:75:e5:f1:a0:1f:af:9b:49:09:47:23:12:24:30:0f:bd:
25:ee:f0:ab:d0:f7:cc:43:d4:0b:47:94:0f:00:9f:ac:9c:19:
29:b0:15:21:9b:a2:c0:51:01:d8:38:fc:d5:f1:4a:ef:05:ee:
35:b5:f4:71:ad:bb:1d:bb:b2:37:7d:56:d4:9e:ca:4b:8f:f4:
ac:51:29:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:15 2025 by rpki-client