Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ffrb97vsuAjafIvpcbDIfjeEF40.roa
File: ffrb97vsuAjafIvpcbDIfjeEF40.roa (raw, json)
Hash identifier: I5A/D9P2RG7JvzLhqqHV7MPc6TMKAYM0gx+LwkoENnU=
Subject key identifier: 7D:FA:DB:F7:BB:EC:B8:08:DA:7C:8B:E9:71:B0:C8:7E:37:84:17:8D
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019391ACA100DA3BA0FDB99949237495A674
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ffrb97vsuAjafIvpcbDIfjeEF40.roa
Signing time: Wed 04 Dec 2024 12:37:09 +0000
ROA not before: Wed 04 Dec 2024 12:37:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29262
IP address blocks: 5.133.100.0/24 maxlen: 24
5.133.101.0/24 maxlen: 24
5.133.102.0/24 maxlen: 24
5.133.103.0/24 maxlen: 24
31.40.204.0/24 maxlen: 24
31.40.205.0/24 maxlen: 24
31.40.206.0/24 maxlen: 24
31.40.207.0/24 maxlen: 24
37.221.76.0/24 maxlen: 24
37.221.77.0/24 maxlen: 24
37.221.78.0/24 maxlen: 24
37.221.79.0/24 maxlen: 24
62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
77.241.72.0/24 maxlen: 24
77.241.73.0/24 maxlen: 24
77.241.74.0/24 maxlen: 24
77.241.75.0/24 maxlen: 24
139.28.240.0/24 maxlen: 24
139.28.241.0/24 maxlen: 24
139.28.242.0/24 maxlen: 24
139.28.243.0/24 maxlen: 24
176.53.156.0/24 maxlen: 24
176.53.157.0/24 maxlen: 24
176.53.158.0/24 maxlen: 24
176.53.159.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
176.96.129.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
176.96.131.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
193.38.44.0/24 maxlen: 24
193.38.45.0/24 maxlen: 24
193.38.46.0/24 maxlen: 24
193.38.47.0/24 maxlen: 24
194.56.186.0/23 maxlen: 23
194.93.48.0/24 maxlen: 24
194.93.49.0/24 maxlen: 24
194.93.50.0/24 maxlen: 24
194.93.51.0/24 maxlen: 24
194.93.60.0/24 maxlen: 24
194.93.61.0/24 maxlen: 24
194.93.62.0/24 maxlen: 24
194.93.63.0/24 maxlen: 24
194.169.92.0/23 maxlen: 23
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/23 maxlen: 23
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:ac:a1:00:da:3b:a0:fd:b9:99:49:23:74:95:a6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 4 12:37:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dfadbf7bbecb808da7c8be971b0c87e3784178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:f4:07:d4:f6:8c:0a:97:aa:af:1b:6d:72:
c8:e7:31:06:2b:bb:c4:35:3a:ac:30:72:62:56:37:
d9:32:8e:56:c4:e7:9c:62:ca:90:dd:78:bf:b8:02:
29:f6:a7:b1:be:13:7c:1f:5b:e8:bc:4a:af:40:54:
05:42:94:c2:32:e1:27:1f:c1:71:a7:eb:30:12:12:
2c:b4:5b:15:fe:07:65:3a:f1:5d:98:01:4f:5c:9f:
85:bf:c9:ad:dd:68:78:eb:70:6e:be:00:aa:f9:9b:
58:7d:88:da:1e:c4:2e:a8:98:b1:c6:76:b6:9c:6f:
c8:44:9e:a8:c5:fd:ed:e7:98:67:f9:0c:04:ae:81:
a0:e2:e2:22:a0:e6:2d:98:b9:d0:ee:44:aa:45:44:
ff:39:a5:05:6d:a7:d4:8a:f1:f8:23:41:5c:64:81:
cd:ac:4c:cc:35:9f:a3:c2:8f:a5:5e:74:44:f1:d5:
44:a0:4b:34:d1:84:f9:8f:01:ba:73:a2:ac:63:e1:
57:08:0a:1f:98:63:b4:ea:b2:1b:1f:ce:d0:61:8a:
a1:d2:c6:f0:b4:bf:36:e7:35:e2:2e:4b:66:29:92:
4d:96:96:50:cd:a4:e8:77:d5:67:77:e7:2d:f6:df:
03:c7:ed:47:ed:b7:e9:56:5e:10:c1:0a:8e:0b:5b:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FA:DB:F7:BB:EC:B8:08:DA:7C:8B:E9:71:B0:C8:7E:37:84:17:8D
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ffrb97vsuAjafIvpcbDIfjeEF40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
31.40.204.0/22
37.221.76.0/22
62.182.32.0/22
77.241.72.0/22
139.28.240.0/22
176.53.156.0/22
176.96.128.0/22
185.254.55.0/24
193.38.44.0/22
194.56.186.0/23
194.93.48.0/22
194.93.60.0/22
194.169.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:0f:3d:bc:0f:44:36:43:f2:4b:2c:0c:7c:39:f8:54:40:4f:
2f:ca:6a:5a:ef:d2:2a:22:7d:7c:a6:1f:96:0d:7f:e2:13:3c:
b5:67:be:a8:a3:84:4c:ae:24:77:4c:6d:8e:bc:7e:51:86:56:
a6:65:46:02:a7:36:37:95:1b:fc:c3:ab:96:f0:c7:46:59:67:
42:19:13:a3:c8:b8:87:38:e4:95:b5:bc:f5:e9:22:13:ca:60:
b4:2c:13:dc:2d:d0:1d:e6:89:ef:4b:f8:0a:85:b7:b0:3b:5b:
b0:1c:c3:c7:28:70:e1:bb:53:ab:0c:a2:70:ef:ae:f9:30:1c:
ad:6b:a3:f3:18:01:38:ad:a6:36:56:40:53:6d:f2:d6:8d:00:
65:bc:ea:4f:81:5d:1f:14:7e:df:63:f5:18:50:95:6e:43:f0:
d6:e0:f1:aa:93:1a:e3:4d:97:28:9e:d1:41:12:28:ed:b3:32:
f0:6e:86:2f:9a:a7:16:80:bf:10:72:a1:a0:f7:d4:ef:d5:4f:
b4:d2:69:39:75:6f:2b:06:3b:a9:e1:d3:3d:d6:ff:df:2f:e0:
95:e0:6f:59:97:da:89:a5:0e:27:00:25:16:10:4f:78:36:26:
89:5e:3f:34:e3:8a:80:9d:26:57:33:93:df:21:82:75:7d:07:
93:36:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:50 2025 by rpki-client