Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/HlI6ROOOXQicvmU2QQ-P0QFHlgs.roa
File: HlI6ROOOXQicvmU2QQ-P0QFHlgs.roa (raw, json)
Hash identifier: oS+IyBO5RbQc9LOTxKusW74hOnP4/gYOSJsu2cuchPI=
Subject key identifier: 1E:52:3A:44:E3:8E:5D:08:9C:BE:65:36:41:0F:8F:D1:01:47:96:0B
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0192D4CB28C6FDD99C968E2C56DE84A1E383
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/HlI6ROOOXQicvmU2QQ-P0QFHlgs.roa
Signing time: Mon 28 Oct 2024 20:22:16 +0000
ROA not before: Mon 28 Oct 2024 20:22:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 5.133.100.0/22 maxlen: 22
5.133.124.0/22 maxlen: 22
31.40.196.0/22 maxlen: 22
77.241.72.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
84.54.0.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
85.235.72.0/22 maxlen: 22
139.28.48.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
176.53.156.0/22 maxlen: 22
176.96.128.0/22 maxlen: 22
193.32.204.0/22 maxlen: 22
193.38.44.0/22 maxlen: 22
193.187.140.0/22 maxlen: 22
194.93.48.0/22 maxlen: 22
194.93.60.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d4:cb:28:c6:fd:d9:9c:96:8e:2c:56:de:84:a1:e3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 28 20:22:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e523a44e38e5d089cbe6536410f8fd10147960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:07:ce:a4:8f:ca:61:40:a8:c8:93:a6:1b:
b3:19:56:a6:9a:0f:e6:03:51:46:7d:38:e2:96:c9:
ae:e2:da:c7:0c:dc:49:13:0b:04:23:49:a0:79:7f:
d4:65:7f:3e:d1:a1:8f:4b:79:49:49:51:d6:80:c2:
e9:ce:1c:98:5a:e3:df:3f:30:6d:d6:2f:3c:1c:59:
bf:b1:4d:9e:30:10:9c:16:50:4f:a3:0f:8b:18:e2:
31:b0:b9:c4:45:b6:1e:dc:11:78:58:53:66:18:55:
78:65:f1:3d:97:b7:38:9e:99:2a:47:2d:81:25:93:
11:a3:73:74:cb:c1:b4:a5:d6:12:cf:01:c5:34:a8:
e5:53:28:06:11:1b:8d:7d:1b:e1:4c:b3:7f:31:9a:
0b:07:2a:c2:e7:a8:2f:c6:14:8c:ce:13:b8:1d:8f:
47:a7:10:87:93:a7:c4:f2:32:51:b6:3b:ef:2c:cb:
0f:9c:83:8e:68:22:85:98:fd:8b:f4:eb:cc:e8:38:
29:1c:29:35:16:52:d7:bb:ec:03:40:7b:74:6c:3e:
d2:31:d4:42:aa:2f:07:79:f0:ef:ff:67:23:92:5c:
a0:8f:97:b3:57:11:bb:cc:cd:73:c4:f9:9d:e7:01:
0a:f9:d2:16:7a:f6:64:0b:1c:21:29:80:85:f5:e6:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:3A:44:E3:8E:5D:08:9C:BE:65:36:41:0F:8F:D1:01:47:96:0B
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/HlI6ROOOXQicvmU2QQ-P0QFHlgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
5.133.124.0/22
31.40.196.0/22
77.241.72.0/22
83.171.244.0/22
84.54.0.0/22
85.8.144.0/22
85.235.72.0/22
139.28.48.0/22
139.28.212.0/22
176.53.156.0/22
176.96.128.0/22
193.32.204.0/22
193.38.44.0/22
193.187.140.0/22
194.93.48.0/22
194.93.60.0/22
212.87.196.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
da:29:e0:d4:b0:98:8a:62:8b:9c:c3:0f:c5:e7:a1:57:aa:66:
82:f4:00:47:3a:65:53:f9:ab:fa:6a:0a:e0:02:2d:30:a1:05:
d4:1c:7b:24:39:e1:41:07:96:1c:bc:01:0c:a5:45:e5:eb:56:
b0:da:c2:a0:6d:5e:7f:ce:34:86:5d:60:47:12:78:39:2b:b0:
bf:81:4b:b6:f9:3e:17:99:51:ee:e7:8e:34:b1:ec:0a:b5:88:
04:07:c8:c3:62:0c:44:d2:a6:08:6c:76:82:7c:13:fa:a9:78:
99:87:8e:7a:04:88:c3:02:91:8a:ea:72:a9:e3:84:d1:40:57:
5d:ca:fd:cf:8e:fd:2e:b3:48:2c:99:95:cc:dd:c6:25:30:a3:
c8:5e:48:dd:1c:af:bf:10:de:18:9c:4c:d0:62:37:4f:75:7c:
a5:6f:4a:a5:08:f3:48:bd:76:65:3e:7c:df:e3:03:2b:26:34:
6e:fa:06:33:5c:0e:9d:77:d4:c1:f0:39:4b:02:09:ab:85:62:
f0:89:8c:47:6a:32:d1:ec:07:7e:b5:fc:66:83:b5:ef:d7:40:
b1:d1:83:67:1f:fc:ad:1a:05:2b:23:c6:e1:9e:b8:8b:2b:07:
0d:48:47:ba:4f:4b:ff:2b:ab:5b:3e:69:02:3f:17:72:a8:de:
5c:5d:81:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:43:04 2025 by rpki-client