Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/CQkSboKXzu5LYHUmO4F7DkodfxU.roa
File: CQkSboKXzu5LYHUmO4F7DkodfxU.roa (raw, json)
Hash identifier: pllsrFKBGUOMn1gw+Nwc6ZXz7ZM54Lk2qQa0jgR27k4=
Subject key identifier: 09:09:12:6E:82:97:CE:EE:4B:60:75:26:3B:81:7B:0E:4A:1D:7F:15
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBC5CF9228655B26480B6D1E6DE205
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/CQkSboKXzu5LYHUmO4F7DkodfxU.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 5.133.124.0/22 maxlen: 22
31.40.196.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c5:cf:92:28:65:5b:26:48:0b:6d:1e:6d:e2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0909126e8297ceee4b6075263b817b0e4a1d7f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:33:1c:56:78:25:15:99:83:0d:5e:06:6a:
fd:1e:d6:3a:51:62:77:dd:f5:ff:1c:92:c2:fc:87:
cc:73:a3:01:2d:61:f6:6d:a1:3d:b2:4c:88:c4:4f:
f3:84:77:36:48:36:11:30:67:a1:f7:72:c9:a2:b7:
00:27:f0:e5:fd:e9:52:81:42:da:49:03:3e:fb:af:
1c:37:eb:cc:1b:95:3a:ae:9d:30:11:38:8f:ed:7a:
88:b9:a9:c6:bf:6f:cf:94:ec:74:40:9f:73:17:ce:
48:4f:26:27:ae:92:85:eb:ad:eb:54:22:37:e2:c1:
d9:d3:69:22:fb:6f:ce:db:56:ed:da:2d:d2:e2:e3:
d2:32:92:03:c8:12:fe:64:8b:98:78:78:62:3b:bf:
e5:98:4d:84:6c:a5:b0:5b:1d:f8:b8:e7:8b:cc:ca:
42:b9:73:23:3d:e3:d3:c6:56:90:19:7c:e8:13:5d:
e1:d9:26:5d:09:f5:bd:64:c1:3c:f5:9b:2c:0a:22:
8f:9d:9c:80:d7:a4:eb:39:49:8c:1a:29:ea:b2:d6:
3a:ca:4d:0a:b3:c5:37:c5:d9:85:1e:59:2b:d3:44:
29:da:9c:83:de:f0:29:58:b0:d8:d5:44:ab:39:dc:
73:f5:70:b3:1d:c0:22:6d:1f:d1:76:f5:e2:4c:1e:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:09:12:6E:82:97:CE:EE:4B:60:75:26:3B:81:7B:0E:4A:1D:7F:15
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/CQkSboKXzu5LYHUmO4F7DkodfxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/22
31.40.196.0/22
83.171.244.0/22
85.8.144.0/22
139.28.212.0/22
212.87.196.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:7e:6b:c6:17:7a:c6:1c:cd:e2:c6:6c:1b:b0:13:91:e2:e5:
2f:26:90:e8:5d:b0:bb:3e:89:0f:19:a6:fd:c9:e6:1e:43:ea:
6c:36:98:b5:4e:e6:6a:64:14:34:a0:7e:bc:73:86:1a:e6:5a:
f7:e0:e7:57:df:8f:4f:b4:08:2c:5c:db:93:76:09:9f:84:87:
9f:55:47:b9:44:40:29:54:ec:ad:95:93:1b:32:96:1b:d6:6d:
43:77:af:56:e4:9a:de:aa:ff:00:9b:d2:27:9a:b1:80:49:91:
a2:1e:ea:2c:b6:27:8f:19:92:8b:46:d1:99:d3:73:e6:90:a3:
fc:51:f8:5c:9b:68:28:c2:d2:a1:f1:ba:20:8e:0f:40:3b:d3:
8a:f3:6a:a7:69:62:33:b5:58:57:2c:1d:f6:e9:36:8e:82:cb:
e9:31:a2:a0:c6:9e:13:69:43:47:93:a9:5e:28:61:93:e7:8c:
1a:cc:03:cc:25:73:e7:7d:38:f4:d6:54:e6:cd:13:17:f1:c0:
f5:83:3e:cf:35:f9:2d:c9:76:48:de:ef:74:94:fd:f4:84:14:
dc:af:3e:93:66:0b:9b:a5:d1:94:cd:09:a9:99:ed:fb:3c:cf:
a1:76:18:07:55:5b:cb:21:36:38:b8:23:02:c5:f1:d8:ce:ed:
e7:73:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:34:09 2025 by rpki-client