Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/xDILZcu_VgmYWGkVXuv-FIxMNps.roa
File: xDILZcu_VgmYWGkVXuv-FIxMNps.roa (raw, json)
Hash identifier: RN7SivI4vwMSiaBN+pvCBonLC8tAX3uhwf20xSJKKFI=
Subject key identifier: C4:32:0B:65:CB:BF:56:09:98:58:69:15:5E:EB:FE:14:8C:4C:36:9B
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019409355A422ECB7E40259BC910B3A182EC
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/xDILZcu_VgmYWGkVXuv-FIxMNps.roa
Signing time: Fri 27 Dec 2024 17:41:18 +0000
ROA not before: Fri 27 Dec 2024 17:41:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.133.101.0/24 maxlen: 24
5.133.102.0/24 maxlen: 24
5.133.103.0/24 maxlen: 24
37.221.76.0/24 maxlen: 24
37.221.78.0/24 maxlen: 24
37.221.79.0/24 maxlen: 24
85.235.72.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
176.96.129.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
185.254.52.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
193.111.77.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:09:35:5a:42:2e:cb:7e:40:25:9b:c9:10:b3:a1:82:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 27 17:41:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4320b65cbbf5609985869155eebfe148c4c369b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:5b:fc:87:4a:5b:d2:3c:b7:f4:68:8e:ab:
87:1f:26:d6:5b:92:88:05:df:c1:2d:b5:50:c8:c2:
b1:41:02:67:a2:00:7c:31:88:2b:af:cf:cc:11:ea:
ab:8c:d5:7f:96:aa:ee:b8:73:23:2e:71:90:0b:4c:
3d:6b:4e:93:b6:51:2e:c1:22:c6:10:5b:7b:fa:34:
a7:f9:d2:2b:d4:61:6f:3a:be:c8:90:28:ea:fb:56:
cf:0d:9c:0b:45:c1:5f:be:68:ce:73:3f:f9:8a:4b:
ee:c3:e2:8d:e7:f9:c3:bd:f8:e9:d8:cf:02:af:a5:
73:36:3c:12:9d:21:ee:8f:49:c7:de:76:5d:81:9d:
ad:9a:ec:56:5f:d7:18:a3:8f:2a:8a:25:e3:6e:95:
70:08:3b:77:47:72:6e:3b:40:b5:60:fc:70:18:b6:
b4:83:a6:cc:2b:ae:bd:cc:76:c8:a7:c0:71:fd:54:
47:cd:14:b6:ac:65:48:b3:a8:9e:e2:93:ab:90:f9:
d2:ef:ca:49:7e:43:f3:c5:16:20:62:ec:fe:aa:fb:
c4:58:e9:41:ff:29:28:3e:b0:93:a2:a8:62:63:77:
dc:ef:f8:99:cc:13:53:eb:4c:b6:67:f4:9e:5b:4b:
2f:41:df:b1:f5:4b:c1:1c:08:ff:28:8e:02:75:5f:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:0B:65:CB:BF:56:09:98:58:69:15:5E:EB:FE:14:8C:4C:36:9B
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/xDILZcu_VgmYWGkVXuv-FIxMNps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.101.0-5.133.103.255
37.221.76.0/24
37.221.78.0/23
85.235.72.0-85.235.74.255
93.190.8.0/24
93.190.10.0/23
176.96.128.0-176.96.130.255
185.254.52.0/24
193.17.4.0/22
193.111.76.0/22
217.18.208.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ca:78:c4:78:73:64:74:d8:ee:b7:41:e8:50:7b:d6:cd:16:
51:9f:34:21:8d:bf:93:71:ba:ba:94:e9:91:22:e6:cb:48:a0:
49:df:0b:90:d2:69:47:02:12:cf:e8:cf:0e:1c:1b:9f:76:e1:
63:d6:3c:fb:3e:82:1b:86:c9:08:1d:26:c5:82:33:59:25:8c:
9b:24:aa:33:4a:ce:7b:07:cf:99:8d:7e:de:04:29:f8:d0:51:
c4:ff:a1:d7:4f:50:e1:4b:e9:40:46:25:0c:b6:61:fd:ff:45:
ad:ae:ed:5f:59:b5:ce:c5:c1:2a:fe:e6:68:dd:75:04:d0:b5:
14:d9:e1:93:f9:d3:40:1d:8e:11:5d:5d:df:c4:8c:fa:00:37:
16:41:d1:e6:09:17:4f:6e:ec:1c:bf:32:bd:d8:8a:5d:6b:3c:
10:52:d4:d7:92:c4:cd:3c:a1:59:01:ef:25:8f:54:da:e9:d4:
8f:c5:ee:00:3d:63:c0:d7:8b:d7:e2:c4:bb:8b:ea:93:ba:e2:
7c:ce:ea:35:c8:39:e7:a6:fc:79:34:9d:6c:0d:f0:58:80:1b:
f8:23:56:d0:64:11:4e:d1:73:26:fc:6d:73:a0:00:e8:1e:0e:
b1:57:c0:ea:90:b6:8a:c2:a6:ae:67:bf:f6:40:c8:8f:20:0f:
d4:43:d5:67
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZQJNVpCLst+QCWbyRCzoYLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjQxMjI3MTc0MTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDMyMGI2NWNiYmY1NjA5OTg1ODY5MTU1ZWViZmUxNDhjNGMzNjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLNb/IdKW9I8t/RojquHHybWW5KI
Bd/BLbVQyMKxQQJnogB8MYgrr8/MEeqrjNV/lqruuHMjLnGQC0w9a06TtlEuwSLG
EFt7+jSn+dIr1GFvOr7IkCjq+1bPDZwLRcFfvmjOcz/5ikvuw+KN5/nDvfjp2M8C
r6VzNjwSnSHuj0nH3nZdgZ2tmuxWX9cYo48qiiXjbpVwCDt3R3JuO0C1YPxwGLa0
g6bMK669zHbIp8Bx/VRHzRS2rGVIs6ie4pOrkPnS78pJfkPzxRYgYuz+qvvEWOlB
/ykoPrCToqhiY3fc7/iZzBNT60y2Z/SeW0svQd+x9UvBHAj/KI4CdV9taQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFMQyC2XLv1YJmFhpFV7r/hSMTDabMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEveERJTFpjdV9WZ21ZV0drVlh1di1GSXhNTnBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgMAwDBAAFhWUD
BAMFhWADBAAl3UwDBAEl3U4wDAMEA1XrSAMEAFXrSgMEAF2+CAMEAV2+CjAMAwQH
sGCAAwQAsGCCAwQAuf40AwQCwREEAwQCwW9MAwQA2RLQAwQA2RLTMA0GCSqGSIb3
DQEBCwUAA4IBAQCxynjEeHNkdNjut0HoUHvWzRZRnzQhjb+Tcbq6lOmRIubLSKBJ
3wuQ0mlHAhLP6M8OHBufduFj1jz7PoIbhskIHSbFgjNZJYybJKozSs57B8+ZjX7e
BCn40FHE/6HXT1DhS+lARiUMtmH9/0Wtru1fWbXOxcEq/uZo3XUE0LUU2eGT+dNA
HY4RXV3fxIz6ADcWQdHmCRdPbuwcvzK92IpdazwQUtTXksTNPKFZAe8lj1Ta6dSP
xe4APWPA14vX4sS7i+qTuuJ8zuo1yDnnpvx5NJ1sDfBYgBv4I1bQZBFO0XMm/G1z
oADoHg6xV8DqkLaKwqauZ7/2QMiPIA/UQ9Vn
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:16 2025 by rpki-client