Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/5gWFpDpRdDdzkqPQGcfIGo1mXOA.roa
File: 5gWFpDpRdDdzkqPQGcfIGo1mXOA.roa (raw, json)
Hash identifier: 4+CvQYk+mJPwsKdpJJe7i4CMPy0Oc44EURrADBXA6zE=
Subject key identifier: E6:05:85:A4:3A:51:74:37:73:92:A3:D0:19:C7:C8:1A:8D:66:5C:E0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019112D352A91581B0B694CD2F6BDFB9A30A
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/5gWFpDpRdDdzkqPQGcfIGo1mXOA.roa
Signing time: Fri 02 Aug 2024 11:22:04 +0000
ROA not before: Fri 02 Aug 2024 11:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 46.229.243.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
77.74.123.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
85.204.107.0/24 maxlen: 24
92.42.100.0/24 maxlen: 24
103.112.171.0/24 maxlen: 24
103.121.48.0/24 maxlen: 24
103.121.49.0/24 maxlen: 24
103.126.50.0/24 maxlen: 24
103.126.51.0/24 maxlen: 24
103.244.144.0/24 maxlen: 24
103.244.145.0/24 maxlen: 24
103.246.248.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
203.14.32.0/24 maxlen: 24
203.25.108.0/24 maxlen: 24
2a12:3200::/36 maxlen: 36
2a12:3200:1000::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
2a12:3200:3000::/36 maxlen: 36
2a12:3200:4000::/36 maxlen: 36
2a12:3200:5000::/36 maxlen: 36
2a12:3200:6000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:d3:52:a9:15:81:b0:b6:94:cd:2f:6b:df:b9:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Aug 2 11:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e60585a43a5174377392a3d019c7c81a8d665ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:b4:8a:19:fe:9a:52:1e:1f:a5:1b:82:16:
9f:12:a9:bc:9d:3f:90:be:26:61:3f:0f:e7:c8:19:
5d:e4:31:19:f1:8e:52:5a:19:9f:8a:95:12:8c:97:
a5:2d:39:07:31:bb:d9:c0:ee:0a:0b:34:90:7c:94:
60:40:d6:64:38:3e:5e:b5:25:6b:e0:b0:05:53:5b:
ce:62:46:a0:a1:b4:bd:71:9a:f3:74:8a:98:f3:b5:
4a:c1:39:20:7d:a3:6f:ab:b6:ea:30:cc:cb:dc:e2:
60:5f:80:d1:b7:e8:97:a3:b5:02:06:82:bf:da:d6:
0a:4d:53:f6:55:41:4f:11:a2:b0:d8:dd:cd:1d:8b:
2f:e7:18:96:5a:bc:fb:45:28:ae:31:ef:16:1c:ed:
72:af:ba:05:48:e7:01:3b:a0:73:b6:98:3a:45:37:
b4:2c:4a:18:b2:5d:17:3e:ac:61:b6:b4:b2:ba:8e:
9c:c3:64:82:20:ef:bb:8f:7d:58:15:a9:1a:79:dd:
b8:f8:ef:0a:25:56:35:b0:c7:63:24:03:5e:56:79:
f9:18:91:51:a8:90:27:b2:a0:7b:5c:b0:2e:f8:11:
88:e5:b8:e4:f3:f1:7e:05:eb:85:c7:33:fb:d8:e7:
f6:ef:71:73:6d:80:48:a8:65:5b:c0:83:00:2c:8f:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:05:85:A4:3A:51:74:37:73:92:A3:D0:19:C7:C8:1A:8D:66:5C:E0
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/5gWFpDpRdDdzkqPQGcfIGo1mXOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
46.229.253.0/24
77.74.123.0/24
83.229.61.0/24
85.204.107.0/24
92.42.100.0/24
103.112.171.0/24
103.121.48.0/23
103.126.50.0/23
103.244.144.0/23
103.246.248.0/24
185.104.63.0/24
195.74.93.0/24
203.14.32.0/24
203.25.108.0/24
IPv6:
2a12:3200::-2a12:3200:6fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9b:f3:ea:69:68:87:24:a8:08:c8:70:f4:0a:a8:c9:45:d6:ed:
44:83:b8:b3:37:85:c3:c7:a8:4c:29:58:11:47:72:df:63:5e:
cf:54:b9:73:dc:79:b6:8a:87:96:ca:aa:5f:ee:fa:46:a7:6d:
15:1c:2d:df:cd:62:eb:85:83:72:e5:ef:cc:a1:3c:e5:69:92:
16:22:39:f8:8e:c0:ab:b1:ae:e9:4b:17:a0:fe:ba:32:1b:23:
f3:26:80:cc:8f:5b:26:2b:ff:2c:3c:46:c8:c4:ea:a6:35:ec:
70:32:cf:ec:d1:9d:11:c0:d2:e7:7d:f9:5d:3d:04:22:8a:ea:
94:b9:09:d3:40:22:20:ec:89:39:5f:83:c4:23:64:01:1f:40:
6d:12:cc:3d:00:ad:8e:47:92:30:f4:fe:a9:26:99:a7:20:c2:
df:36:e5:8d:26:93:0c:f6:96:32:0b:ac:9a:64:bc:52:e3:d5:
04:4e:46:c9:f3:ae:79:5e:ba:82:59:08:0f:06:7e:0d:8a:23:
23:9c:df:51:b9:e5:d0:8d:ce:21:88:67:07:12:bd:16:7c:a2:
11:ae:f9:8c:76:3c:18:32:78:50:88:d0:7b:05:28:2c:52:11:
4f:39:96:6b:03:92:8e:c8:d4:ec:f7:72:e1:da:a4:af:2e:3d:
93:88:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:20:56 2025 by rpki-client