Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/5pynZFAsqvPIGH5-PXLgAGK58mA.roa
File: 5pynZFAsqvPIGH5-PXLgAGK58mA.roa (raw, json)
Hash identifier: fBc4s8OOq/rbaknM5GE/ZQ9xYBiAMIuTqJlNTn46D0Y=
Subject key identifier: E6:9C:A7:64:50:2C:AA:F3:C8:18:7E:7E:3D:72:E0:00:62:B9:F2:60
Certificate issuer: /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial: 0194236A3061E789908CCC5C23226B6E7853
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/5pynZFAsqvPIGH5-PXLgAGK58mA.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58310
IP address blocks: 91.109.224.0/23 maxlen: 23
91.109.226.0/23 maxlen: 23
91.109.228.0/23 maxlen: 23
91.109.230.0/23 maxlen: 23
185.173.72.0/22 maxlen: 22
185.173.72.0/23 maxlen: 23
185.173.72.0/24 maxlen: 24
185.173.73.0/24 maxlen: 24
185.173.74.0/23 maxlen: 23
2a0b:3900::/29 maxlen: 29
2a0b:3901::/47 maxlen: 47
2a0b:3901::/48 maxlen: 48
2a0b:3901:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:30:61:e7:89:90:8c:cc:5c:23:22:6b:6e:78:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e69ca764502caaf3c8187e7e3d72e00062b9f260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:33:b7:92:e9:98:b0:1f:ed:a6:05:1f:2f:
3e:27:32:1f:c1:8b:1c:43:cb:4f:ae:48:85:72:cd:
e4:1f:ec:51:24:06:2e:c6:0c:9e:b7:1b:59:d8:7c:
17:be:61:0c:63:a4:4d:1e:3b:7c:c7:d9:04:96:e3:
f8:26:cf:09:92:e0:b3:f8:c8:ae:6b:fc:f2:be:50:
be:e4:23:d2:2e:41:d2:ad:2b:33:df:72:3b:7c:21:
06:0e:36:d8:25:6b:d5:0f:31:d9:1d:81:3b:2e:e7:
39:2f:1e:74:34:eb:4e:ee:40:a7:af:05:c5:5b:0e:
bc:ba:4c:e0:df:c4:29:8b:dd:bb:c8:a1:6e:00:ad:
85:8e:1a:64:d9:34:48:0f:c4:80:76:22:e6:33:69:
79:83:e8:12:36:0c:95:38:24:60:e8:e6:dd:fb:db:
74:18:84:78:64:54:4f:66:ad:4c:ca:fe:36:d4:38:
83:63:83:93:68:55:35:22:dc:23:4a:17:9c:89:82:
96:46:20:c8:87:f8:10:cc:1d:fd:0a:28:1f:2d:8a:
ee:49:16:99:66:24:35:dd:3d:c3:fb:5b:36:fe:80:
8b:b2:22:03:10:32:e0:75:05:df:98:a1:4c:dc:72:
29:11:39:24:7c:af:97:15:f5:0c:03:ae:88:84:f7:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9C:A7:64:50:2C:AA:F3:C8:18:7E:7E:3D:72:E0:00:62:B9:F2:60
X509v3 Authority Key Identifier:
keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/5pynZFAsqvPIGH5-PXLgAGK58mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.224.0/21
185.173.72.0/22
IPv6:
2a0b:3900::/29
Signature Algorithm: sha256WithRSAEncryption
16:c1:2e:07:3b:9f:90:d3:94:48:5a:9e:d7:8e:57:3c:23:b4:
d1:24:05:f9:1c:ee:da:e2:7a:ee:e6:f9:2d:9e:9f:55:3f:86:
36:45:2b:87:ee:89:cb:5b:16:24:c1:20:6a:2f:cc:27:da:f7:
bc:05:00:57:65:00:b3:2f:62:84:85:6e:ef:61:17:1c:43:05:
e5:f8:96:81:b1:8c:6a:8c:c4:90:9a:13:99:27:1d:57:65:06:
b6:d8:a0:00:67:b5:eb:1c:fc:07:0f:19:d7:97:50:0d:2b:23:
71:bd:ed:a9:08:39:fb:58:6a:f5:6d:3f:93:f4:ae:6c:0a:d6:
2d:9a:34:ff:ba:c3:29:ed:29:32:a2:d3:7a:7b:00:e6:44:e8:
8e:98:9d:53:a3:58:bc:e0:e4:b0:7a:b0:3e:e6:63:65:c7:44:
a3:62:22:7a:8b:12:cf:cf:f4:b7:7d:1e:52:2c:59:ed:35:78:
1a:fe:52:4b:47:84:b5:82:27:31:93:4f:77:e4:e7:24:68:88:
d4:e4:b7:b5:74:58:86:97:6b:89:2f:2f:da:2c:bd:ea:9c:e5:
a7:ea:2b:73:0a:49:72:21:35:f0:49:7d:51:b0:57:5a:b9:a8:
36:fd:68:ac:e0:b9:a4:cf:1e:4f:94:c6:05:22:e4:bb:6d:7b:
02:46:9a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:57 2025 by rpki-client