Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/vs4jr9myL1kRdjK7ehKNQk_bGs0.roa
File: vs4jr9myL1kRdjK7ehKNQk_bGs0.roa (raw, json)
Hash identifier: R34w5dbIcjw7KqQ6/QVFfsa+RIaoq1GPjmbHZvyyliI=
Subject key identifier: BE:CE:23:AF:D9:B2:2F:59:11:76:32:BB:7A:12:8D:42:4F:DB:1A:CD
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019409F68754C7071A85C250E7FFD0032F07
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/vs4jr9myL1kRdjK7ehKNQk_bGs0.roa
Signing time: Fri 27 Dec 2024 21:12:18 +0000
ROA not before: Fri 27 Dec 2024 21:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.133.101.0/24 maxlen: 24
5.133.102.0/24 maxlen: 24
5.133.103.0/24 maxlen: 24
37.221.76.0/24 maxlen: 24
37.221.78.0/24 maxlen: 24
37.221.79.0/24 maxlen: 24
85.235.72.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
185.254.52.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
193.111.77.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:09:f6:87:54:c7:07:1a:85:c2:50:e7:ff:d0:03:2f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 27 21:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bece23afd9b22f59117632bb7a128d424fdb1acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3b:92:6e:c2:8a:d4:d9:cf:ef:2c:39:82:f9:
60:7b:65:14:bf:94:b1:c7:63:ff:a2:f2:e0:e3:c6:
85:df:61:6c:54:90:75:1c:7c:d6:54:51:6d:f4:97:
e5:fc:38:14:ae:83:3e:e3:68:93:4b:85:28:b2:4d:
cc:7f:9d:1a:28:87:9e:63:ae:ea:e2:c7:fc:15:5f:
81:2b:da:c3:4b:c4:12:f1:17:90:b9:58:4d:ef:a0:
bd:c4:6a:9d:15:43:08:ce:25:99:f8:84:b6:5c:87:
2c:99:4b:0a:78:fa:93:ab:96:17:89:b5:90:4d:20:
78:14:ec:d2:0f:5b:87:ed:4d:7c:a5:d9:f7:99:72:
95:9e:d3:2e:8b:98:7d:88:d2:d9:3f:ae:c1:e1:8f:
dc:49:3d:67:18:b6:70:7d:03:64:42:58:0d:04:c7:
a1:94:97:ea:cb:a7:ca:7e:7a:f2:9f:85:9a:f2:de:
65:7b:c6:36:b6:0a:66:af:d2:93:34:8b:33:b6:30:
28:e8:dc:b3:77:67:3a:7b:ca:43:39:7e:b9:08:8b:
37:db:f2:d7:cb:ed:55:74:90:58:44:44:82:37:99:
65:0c:39:88:92:0d:7d:96:19:1f:9f:65:50:da:a4:
d6:54:75:6b:6d:69:f9:ad:56:6a:84:8a:e7:1d:42:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:23:AF:D9:B2:2F:59:11:76:32:BB:7A:12:8D:42:4F:DB:1A:CD
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/vs4jr9myL1kRdjK7ehKNQk_bGs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.101.0-5.133.103.255
37.221.76.0/24
37.221.78.0/23
85.235.72.0-85.235.74.255
93.190.8.0/24
93.190.10.0/23
176.96.128.0/24
176.96.130.0/24
185.254.52.0/24
193.17.4.0/22
193.111.76.0/22
217.18.208.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0b:b3:c4:7d:6d:49:d2:a9:af:3b:6d:a6:a4:7b:7b:c7:f3:
65:62:85:e0:60:d6:d2:74:bc:75:a4:f4:c3:30:f9:9f:95:ca:
46:f9:be:d0:a6:55:15:3c:10:59:f8:4f:98:59:9d:f1:db:61:
be:73:c0:b0:f0:48:6c:61:66:21:4c:05:f4:c5:53:85:af:c8:
39:f2:3b:1a:1c:81:ac:7b:e1:e2:65:b7:b5:36:c2:da:cd:60:
86:15:5d:bb:e3:35:cf:01:45:f3:8e:a2:fc:a7:84:d8:00:9f:
ce:d0:52:ab:43:0f:ec:fa:fa:95:ec:1d:4b:a9:f8:54:6a:c3:
a2:ae:e8:a5:29:0e:3e:de:7b:f5:0e:99:05:af:0f:07:4e:9d:
b4:0c:ad:95:6d:1d:aa:b7:85:62:b6:22:5b:39:2c:9e:e2:23:
0e:9e:fb:b9:89:46:c2:ec:bc:92:0b:31:12:ba:7d:c8:72:3b:
7d:39:e1:b7:b1:49:dc:ea:b2:bf:e9:c4:e4:a2:4c:65:c4:26:
5a:25:8d:2f:95:8d:5c:fa:2a:87:28:3e:52:54:60:17:df:ba:
1d:05:f3:69:de:da:b8:f8:46:b6:14:1a:f5:06:0f:40:7f:47:
35:88:4d:dd:d2:8e:16:aa:fc:3b:f6:9e:d7:10:dd:57:9c:fa:
ba:8c:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:35 2025 by rpki-client