Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5Q-xG9nYecJxcVFUryxJTZ8kqhY.roa
File: 5Q-xG9nYecJxcVFUryxJTZ8kqhY.roa (raw, json)
Hash identifier: f9w68xFz0G7JtyfdCpnttmufE8/jLLlKGSJW82IiHkM=
Subject key identifier: E5:0F:B1:1B:D9:D8:79:C2:71:71:51:54:AF:2C:49:4D:9F:24:AA:16
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 16BC45ED
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5Q-xG9nYecJxcVFUryxJTZ8kqhY.roa
Signing time: Mon 14 Mar 2022 14:50:55 +0000
ROA not before: Mon 14 Mar 2022 14:50:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 185.121.168.0/24 maxlen: 24
185.99.132.0/24 maxlen: 24
185.195.239.0/24 maxlen: 24
185.99.133.0/24 maxlen: 24
2a06:a006::/32 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:a005:9::/48 maxlen: 48
2a06:1280::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381437421 (0x16bc45ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 14 14:50:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e50fb11bd9d879c271715154af2c494d9f24aa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:a7:3b:e6:ee:5c:07:78:67:44:8f:ad:35:
e2:1c:58:ec:35:db:67:76:42:2b:82:8f:60:4a:9d:
90:28:2b:85:ae:95:49:ed:f6:68:d5:b5:08:a9:03:
35:80:08:a4:fb:ba:fe:7c:5a:22:9a:fd:1c:78:fa:
e8:d5:e9:c1:57:02:10:71:df:b8:de:93:ba:ac:67:
77:de:4b:98:23:c4:ca:63:8e:b2:c7:cc:ed:54:67:
a0:7a:91:d9:51:bd:fa:2d:ac:0a:b4:4c:35:87:f9:
6d:5d:21:5d:9b:10:17:1e:79:f4:6f:b5:db:58:47:
2b:f0:db:2e:bf:a2:c7:31:79:95:69:7a:14:07:a0:
e3:17:15:b5:bc:84:0f:cb:1e:ed:6f:57:11:ef:69:
d1:0b:7e:43:fa:d7:c4:7c:85:c8:d9:6f:82:c0:74:
3a:11:d5:01:26:fc:47:df:ff:f0:83:ed:5b:88:ef:
2f:73:9e:31:2b:c8:94:a5:b3:bf:c0:59:ec:23:4f:
ce:79:48:b3:60:c6:75:91:3f:38:b8:e9:3e:cf:d3:
09:b4:72:03:df:6b:dd:11:9e:2f:c8:81:f7:eb:6f:
09:70:aa:e5:6f:97:3a:86:5b:74:55:33:b2:e2:de:
dd:f5:be:4d:8c:8c:bd:b2:22:02:84:bb:f6:aa:1c:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0F:B1:1B:D9:D8:79:C2:71:71:51:54:AF:2C:49:4D:9F:24:AA:16
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5Q-xG9nYecJxcVFUryxJTZ8kqhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.132.0/23
185.121.168.0/24
185.195.239.0/24
IPv6:
2a06:1280::/32
2a06:a004::/32
2a06:a005:9::/48
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
34:6b:ae:80:c8:e0:51:8a:3b:12:75:d9:0d:24:ac:92:63:44:
89:b8:a8:06:01:3c:3c:3d:ac:03:99:d1:c9:5d:70:2c:43:5e:
71:ab:14:e7:b5:a0:d5:a2:01:0c:23:07:ba:f6:bb:60:1d:4c:
2e:7c:d2:1c:91:03:49:38:48:e3:15:3e:46:06:a2:5f:1d:40:
e7:c1:50:d9:62:fd:a0:67:96:56:f1:76:0d:c7:0b:99:34:b5:
70:cf:02:98:99:7e:b2:cb:a0:26:da:fb:fc:e7:e5:93:3a:52:
d7:d4:f8:ab:e0:94:b9:e8:ba:54:a3:67:9f:6f:b4:40:19:1b:
12:13:00:80:e1:6d:f5:26:4b:48:6a:a4:8e:c0:6b:36:29:cd:
62:eb:9d:1e:da:e7:77:ab:6f:fb:5e:eb:38:d1:b9:07:9c:7b:
03:9c:b0:1a:7c:b5:e2:5f:e4:ae:b6:bb:48:84:d0:35:78:f6:
28:c1:15:7b:1a:55:ea:2b:2e:d4:c9:52:bf:3e:93:26:75:76:
bd:d9:a7:15:13:bb:d0:ba:92:b2:99:15:70:33:2e:7e:ea:82:
f4:f7:b0:74:74:44:c5:36:d7:ad:b8:0f:39:89:42:c0:a7:a6:
f9:ab:30:86:13:21:35:42:2a:64:ad:4b:e2:07:cc:a1:dc:b8:
c2:d7:86:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:25:04 2025 by rpki-client