Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/5gzADTx7rR6MaF057rBAemYfSBU.roa
File: 5gzADTx7rR6MaF057rBAemYfSBU.roa (raw, json)
Hash identifier: fBEXDV5YqbI9v9SvLFw4FklboeIaWOuy4DKBHc034OU=
Subject key identifier: E6:0C:C0:0D:3C:7B:AD:1E:8C:68:5D:39:EE:B0:40:7A:66:1F:48:15
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01942747372A944AB13F158DF32D4EA5E681
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/5gzADTx7rR6MaF057rBAemYfSBU.roa
Signing time: Thu 02 Jan 2025 13:49:26 +0000
ROA not before: Thu 02 Jan 2025 13:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212598
IP address blocks: 185.254.236.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:37:2a:94:4a:b1:3f:15:8d:f3:2d:4e:a5:e6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e60cc00d3c7bad1e8c685d39eeb0407a661f4815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:19:a2:48:e2:15:62:89:5d:bc:2a:45:02:0a:
87:c2:ef:c7:71:5d:56:99:61:f0:cc:f6:ea:db:7c:
e2:96:e2:ee:a5:5c:45:ad:0c:cc:7f:4a:ce:e4:51:
49:c2:7d:74:ac:31:b3:39:08:09:1e:8f:90:bd:02:
e7:61:fa:6f:3d:b9:aa:77:88:c8:67:c2:24:7b:db:
da:e2:7b:a0:e7:a3:46:b1:c2:bb:a9:ca:55:bf:30:
78:4c:fc:74:96:ba:88:9e:0b:68:0e:b8:a4:9c:70:
56:3b:13:25:f8:70:14:ca:f3:cb:41:f7:3f:9d:90:
35:2e:27:1d:db:30:ef:1c:ff:fc:a3:f4:36:03:dd:
9c:73:3f:58:46:57:81:56:9e:38:30:e4:9b:22:82:
2d:0f:e7:73:ed:72:80:8e:b3:05:e3:d3:10:93:a2:
ce:9c:ff:ec:50:7f:2e:44:52:e9:6d:d6:b1:4b:5e:
f8:bd:d7:fe:05:c9:88:a9:21:44:de:06:90:b4:32:
ae:73:4e:0f:2f:03:69:bc:e7:af:6b:c1:e2:71:68:
1e:a8:b6:07:c2:be:74:ed:8d:f8:d5:5b:96:f0:45:
02:41:36:88:29:a7:99:24:98:b5:b1:b4:53:eb:ab:
1f:72:0f:8f:cb:5a:75:24:07:22:7a:bc:f1:62:34:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0C:C0:0D:3C:7B:AD:1E:8C:68:5D:39:EE:B0:40:7A:66:1F:48:15
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/5gzADTx7rR6MaF057rBAemYfSBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.236.0/24
185.254.239.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
63:24:61:e2:e7:ad:6f:fa:e8:14:99:45:41:6d:fb:af:60:bf:
26:69:5a:b7:04:85:a3:59:8b:f6:a1:ca:e6:73:27:0e:91:1b:
c4:0a:f1:b0:98:62:f5:61:e9:87:93:9e:9c:31:7d:15:4b:86:
71:cd:42:6f:70:cb:0d:69:00:c6:02:f2:b1:a9:be:fd:e5:4a:
35:50:5e:2a:b0:98:26:2d:bd:8e:a1:ac:0a:63:f6:82:73:7e:
e9:58:dd:62:8c:54:fb:e7:cb:8e:db:37:dd:36:a7:8e:b3:ba:
1a:5e:55:15:2e:c0:60:33:e8:66:c1:7b:b7:1d:a8:81:14:9b:
f8:82:2c:b4:62:a2:2f:db:10:ea:e1:90:87:4d:c0:59:86:16:
8a:68:7d:c4:54:db:c3:fd:5b:b9:33:34:a3:03:5b:2d:0e:19:
16:1e:40:16:6b:9f:a0:be:50:42:dd:fc:b0:2c:d9:a9:f1:d1:
92:21:f4:62:51:a7:6c:7f:84:0d:a9:7d:54:17:36:f5:30:9b:
5e:91:7a:d8:53:44:17:0d:b8:5e:b8:a2:0c:24:b9:fa:ba:b4:
83:f9:38:94:50:0d:31:e0:5b:97:9d:a1:23:54:52:7c:05:d4:
9a:2f:9d:7d:53:b6:68:03:4d:eb:cf:6c:88:d1:34:5b:60:a6:
6d:5b:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:06:26 2025 by rpki-client