Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/rA4QuzTG9EQiDaMN-5ZIKuD-q7I.roa
File: rA4QuzTG9EQiDaMN-5ZIKuD-q7I.roa (raw, json)
Hash identifier: ZnC5rZffktlHegQDbsNISYtzUbABU4+mrTFYqxYu4bM=
Subject key identifier: AC:0E:10:BB:34:C6:F4:44:22:0D:A3:0D:FB:96:48:2A:E0:FE:AB:B2
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01946026A1A99B16F754A3AD190C396B0D27
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/rA4QuzTG9EQiDaMN-5ZIKuD-q7I.roa
Signing time: Mon 13 Jan 2025 14:52:11 +0000
ROA not before: Mon 13 Jan 2025 14:52:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.133.124.0/23 maxlen: 23
5.133.126.0/23 maxlen: 23
62.182.32.0/23 maxlen: 23
62.182.34.0/23 maxlen: 23
84.54.0.0/23 maxlen: 23
84.54.2.0/23 maxlen: 23
139.28.48.0/23 maxlen: 23
139.28.50.0/23 maxlen: 23
139.28.240.0/23 maxlen: 23
139.28.242.0/23 maxlen: 23
176.53.156.0/23 maxlen: 23
176.53.158.0/23 maxlen: 23
193.32.204.0/23 maxlen: 23
193.32.206.0/23 maxlen: 23
193.38.44.0/23 maxlen: 23
193.38.46.0/23 maxlen: 23
193.187.132.0/23 maxlen: 23
193.187.134.0/23 maxlen: 23
193.187.134.0/24 maxlen: 24
193.187.135.0/24 maxlen: 24
194.93.48.0/23 maxlen: 23
194.93.50.0/23 maxlen: 23
194.93.60.0/23 maxlen: 23
194.93.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:26:a1:a9:9b:16:f7:54:a3:ad:19:0c:39:6b:0d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 13 14:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac0e10bb34c6f444220da30dfb96482ae0feabb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:fb:14:cd:5e:e6:70:84:ea:9e:de:1d:3a:
a6:3e:b6:16:68:70:55:a6:c6:1c:17:d3:01:5d:a0:
ed:de:fa:b9:ea:69:a1:66:9e:5a:ee:1b:ad:30:08:
c9:9a:24:d6:b4:b4:7c:f1:79:3a:a8:62:4f:1e:e6:
9e:6e:e1:81:51:e5:50:39:85:08:d0:bb:23:e1:58:
8e:5c:45:4c:81:92:9c:87:3f:98:8e:4f:64:ab:84:
99:f5:43:b4:c4:6d:69:6e:bc:ab:3b:25:5a:91:d8:
75:21:fd:b2:0f:e7:19:d0:e3:23:ae:22:b4:52:19:
5a:b5:1c:4e:21:48:ce:1f:ad:31:7d:12:fc:25:c7:
d1:aa:f4:a2:1c:f8:3a:d6:89:ce:67:43:88:65:bc:
bd:6d:13:05:2b:43:f5:86:b4:8e:cc:a9:4c:ba:a6:
4f:52:a4:b4:56:99:36:d6:8f:b1:fc:57:9b:49:57:
f9:8a:40:27:6e:e6:f3:f9:c8:17:72:85:23:22:a3:
45:76:95:fb:ec:55:2e:67:1b:b1:cc:af:7a:ef:30:
6b:e1:5b:55:b0:4d:67:35:fd:8d:1f:dd:1a:71:92:
64:a6:1b:e1:91:1d:4a:88:95:2f:75:69:6f:e8:a7:
af:bf:68:20:36:f3:fc:bf:c0:a3:ea:6a:10:b4:1e:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0E:10:BB:34:C6:F4:44:22:0D:A3:0D:FB:96:48:2A:E0:FE:AB:B2
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/rA4QuzTG9EQiDaMN-5ZIKuD-q7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/22
62.182.32.0/22
84.54.0.0/22
139.28.48.0/22
139.28.240.0/22
176.53.156.0/22
193.32.204.0/22
193.38.44.0/22
193.187.132.0/22
194.93.48.0/22
194.93.60.0/22
Signature Algorithm: sha256WithRSAEncryption
46:00:9c:fe:26:28:e9:77:12:08:12:00:1e:31:79:07:e2:c7:
91:e3:5c:14:53:84:bb:7d:92:6a:45:9c:f5:e1:48:1b:26:8b:
d3:d6:80:4c:39:2d:33:97:55:af:e9:53:4b:da:c1:8c:05:a6:
b5:da:7c:c4:0c:99:b0:68:9e:5c:fb:b7:69:46:59:4d:10:40:
23:a6:55:4f:eb:5c:53:5a:4c:f2:32:84:61:67:72:1d:43:5f:
93:70:a2:e7:83:06:7b:d8:5e:49:42:17:00:f0:23:f6:1c:4a:
b3:94:8f:27:ac:58:18:d1:12:57:a7:e0:60:51:0b:e6:63:2c:
3c:24:4e:2c:6b:43:f0:04:2e:0a:b2:df:e0:35:6f:4d:09:c5:
7b:83:22:96:59:ef:6f:bb:97:80:09:8a:05:8e:65:9e:c1:bb:
d2:01:de:be:84:97:24:42:43:09:bf:0a:bb:06:c0:37:95:38:
17:9c:e9:c5:70:b3:24:ff:0c:2f:17:18:ce:09:06:f7:96:9f:
7b:12:d1:ed:df:21:d6:f5:dc:ae:98:7a:e8:95:4e:dd:1a:e7:
7b:6b:a5:1a:10:e2:41:88:b0:90:85:05:80:83:e6:e1:71:79:
1a:49:11:ca:3f:bf:ba:2d:e8:48:d2:12:73:42:05:77:67:f5:
9c:ba:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:17 2025 by rpki-client