Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/X_L_qbC0jANHibKTVqFRAtuSjnU.roa
File: X_L_qbC0jANHibKTVqFRAtuSjnU.roa (raw, json)
Hash identifier: OoMNrZRXbIvw9+M++I9kDGX/hy9Z+dquffJJPjKaowA=
Subject key identifier: 5F:F2:FF:A9:B0:B4:8C:03:47:89:B2:93:56:A1:51:02:DB:92:8E:75
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 018828CAC5FBFD00B481FA6B30E2B92CBA4C
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/X_L_qbC0jANHibKTVqFRAtuSjnU.roa
Signing time: Wed 17 May 2023 08:19:17 +0000
ROA not before: Wed 17 May 2023 08:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57768
IP address blocks: 185.46.177.0/24 maxlen: 24
185.46.176.0/24 maxlen: 24
185.46.179.0/24 maxlen: 24
185.46.178.0/24 maxlen: 24
5.187.8.0/21 maxlen: 21
5.187.10.0/24 maxlen: 24
5.187.9.0/24 maxlen: 24
5.187.11.0/24 maxlen: 24
5.187.13.0/24 maxlen: 24
5.187.15.0/24 maxlen: 24
5.187.14.0/24 maxlen: 24
5.187.12.0/24 maxlen: 24
37.75.131.0/24 maxlen: 24
37.75.132.0/24 maxlen: 24
37.75.128.0/24 maxlen: 24
37.75.128.0/21 maxlen: 21
37.75.130.0/24 maxlen: 24
37.75.129.0/24 maxlen: 24
37.75.135.0/24 maxlen: 24
37.75.134.0/24 maxlen: 24
37.75.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:ca:c5:fb:fd:00:b4:81:fa:6b:30:e2:b9:2c:ba:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: May 17 08:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ff2ffa9b0b48c034789b29356a15102db928e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:fe:29:af:9c:78:4f:b8:5e:aa:69:9e:b9:
6f:89:c9:ef:c0:02:e5:08:f2:84:93:76:5e:d9:57:
a7:2c:bd:6e:9d:51:02:04:7b:17:a1:b7:54:cd:d1:
92:3a:c7:1c:73:da:8b:ab:20:45:4e:5a:93:a9:08:
29:75:37:33:59:40:bd:ce:1d:fc:68:74:61:56:0a:
af:5f:22:1a:b3:96:95:04:6a:bc:b1:59:52:12:e8:
7a:2a:fd:3a:d5:a9:d4:95:e8:eb:4d:03:1d:a2:3b:
f7:dd:8d:84:da:cf:33:d9:91:d1:f5:ef:c1:bb:9c:
38:d5:2a:5e:f7:12:00:38:59:21:f4:65:52:8d:30:
08:71:5b:67:d4:6a:6a:7e:b7:80:99:44:08:ef:20:
69:bf:af:ba:78:00:c1:9a:8a:b7:03:6c:fc:ba:56:
f2:67:95:9d:8a:5d:a7:13:ec:15:69:aa:f1:f9:67:
96:fd:c8:13:69:33:f7:cc:80:c4:fb:cb:cd:b5:0d:
36:8c:71:a4:2f:8f:d8:b3:46:49:90:27:0b:4e:d1:
1f:80:da:bc:da:8f:4d:13:16:87:cb:5f:9b:a9:01:
03:30:56:0b:c2:ce:f1:af:e3:ad:d4:e3:69:d9:5a:
42:c2:ce:da:64:20:a3:86:65:be:e3:d3:19:e0:83:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:FF:A9:B0:B4:8C:03:47:89:B2:93:56:A1:51:02:DB:92:8E:75
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/X_L_qbC0jANHibKTVqFRAtuSjnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.8.0/21
37.75.128.0/21
185.46.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:8d:96:0e:74:da:d7:9d:f2:73:5a:4e:32:6f:e2:72:db:56:
08:ea:f4:1a:7f:f4:de:23:8d:fc:cc:65:a7:19:74:c8:10:ff:
8d:8d:60:ac:0b:ba:7d:7b:18:77:d5:cf:ad:42:84:de:d1:84:
1e:2f:40:b6:71:0c:ef:a2:46:40:0f:ee:2c:87:77:27:c7:47:
6a:2b:f8:06:70:4a:e1:c1:e2:3d:ff:9d:c3:5e:5b:e4:5d:0e:
00:3f:c5:c2:f5:eb:d2:b0:69:02:35:89:88:e9:8a:b0:10:aa:
61:df:73:dd:3b:6d:0f:5e:cf:05:bd:0a:00:ae:d6:4c:67:92:
42:7b:f6:98:9d:32:75:c0:42:a6:0f:cc:67:bd:23:ef:ce:6b:
d3:4c:11:1f:34:c8:7f:8d:08:11:4a:5d:a0:dd:e1:56:92:30:
6b:1a:d7:51:45:ca:d5:46:2f:64:36:bd:5f:18:3e:1e:6b:3f:
b7:ed:7b:07:6e:84:75:5e:3b:5a:dc:b5:96:a9:c7:21:a0:63:
1e:27:7e:f6:28:bb:97:76:2b:88:a2:46:e9:b0:37:03:a6:3b:
b7:af:02:2d:76:6a:9e:9e:ef:5c:b9:ca:7e:01:e5:0f:fd:06:
54:d9:c3:36:7d:62:8f:b6:4f:ce:c0:65:ee:a8:13:af:39:a8:
1f:f4:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:54:32 2025 by rpki-client