Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/mQ_S9SBKYsiofCy4l7CtIv3oDL4.roa
File: mQ_S9SBKYsiofCy4l7CtIv3oDL4.roa (raw, json)
Hash identifier: KXEpTonEsssW69BBWkMEAOHuLnS4yHulPcrEUU+4eao=
Subject key identifier: 99:0F:D2:F5:20:4A:62:C8:A8:7C:2C:B8:97:B0:AD:22:FD:E8:0C:BE
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01943F7328E6B1D99988FC21B74C210684E2
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/mQ_S9SBKYsiofCy4l7CtIv3oDL4.roa
Signing time: Tue 07 Jan 2025 06:28:19 +0000
ROA not before: Tue 07 Jan 2025 06:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207810
IP address blocks: 5.134.84.0/23 maxlen: 24
45.159.73.0/24 maxlen: 24
45.159.74.0/23 maxlen: 24
45.159.74.0/24 maxlen: 24
45.159.75.0/24 maxlen: 24
217.113.12.0/22 maxlen: 22
217.113.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:73:28:e6:b1:d9:99:88:fc:21:b7:4c:21:06:84:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 7 06:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=990fd2f5204a62c8a87c2cb897b0ad22fde80cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:ea:ed:c9:2f:db:73:80:c6:b7:ae:b0:b3:
62:93:3e:c7:a8:18:3a:1f:f0:7e:03:e0:9a:f9:22:
f3:9f:a5:ac:b2:a3:a3:71:d9:f0:cf:c6:e9:d1:ed:
04:d6:1a:fd:70:cc:cd:55:0c:ed:e8:14:18:4a:16:
a0:8f:7c:15:ac:37:54:22:01:35:71:a5:b0:5f:10:
8e:f0:d0:87:24:21:cf:d8:e7:d7:7d:4f:5d:17:ab:
40:3b:6c:09:ed:9a:2d:7f:d9:d4:0a:cf:72:36:ad:
2b:f8:6b:b5:aa:95:49:bd:61:0c:16:ae:4e:1f:80:
95:8f:e1:09:4f:70:41:75:2e:93:59:c2:95:eb:0f:
46:03:ec:74:32:3b:40:9f:f2:d5:f0:66:0b:fd:b8:
78:1e:79:d3:86:7e:f0:08:5f:08:90:a8:5a:1f:8f:
02:6b:54:e1:21:ca:f4:48:b3:67:b8:56:b1:c0:83:
46:6d:6c:4e:2f:d9:ee:a9:59:a3:47:e8:20:d3:78:
b9:3c:f7:88:14:f7:50:42:c3:61:68:93:d5:a3:7a:
1f:53:09:69:41:d9:06:3e:be:81:45:12:34:57:85:
44:1e:63:47:2f:17:5d:26:5e:8f:79:ca:0d:02:52:
f2:33:d5:59:e2:71:d7:6f:cf:df:ba:ad:f6:11:8b:
4c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:D2:F5:20:4A:62:C8:A8:7C:2C:B8:97:B0:AD:22:FD:E8:0C:BE
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/mQ_S9SBKYsiofCy4l7CtIv3oDL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/23
45.159.73.0-45.159.75.255
217.113.12.0/22
217.113.18.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:45:85:10:b1:6f:dc:91:16:5f:ac:30:3a:74:5c:69:9a:c5:
52:12:d5:58:ed:21:a0:fb:40:38:82:7e:a6:42:d3:32:4f:fc:
ef:41:b4:8a:3a:c8:68:2d:8e:7d:b8:95:f9:d2:d4:6a:cb:49:
ca:67:5e:8e:a4:c6:4b:9d:5f:55:b5:2d:4f:be:4c:46:ae:b4:
de:51:fd:c7:36:20:7e:ec:0b:7c:5e:d2:96:6a:58:e7:fb:18:
cb:af:5f:b6:a9:15:14:64:55:6f:11:46:47:aa:4a:cd:cf:73:
a6:61:59:09:8b:09:f6:56:8a:c1:de:65:2a:44:06:ba:6f:76:
14:e8:8c:71:76:a0:59:c4:b0:f4:05:98:16:c6:d5:5d:35:98:
60:c7:b7:d8:af:39:8b:74:d4:70:e1:2a:4b:13:41:e6:a9:29:
f7:a1:3e:3e:24:d4:5d:39:f0:15:10:f2:9a:9a:40:4b:c8:71:
7a:dc:ad:06:9d:b1:2f:a1:7e:b2:88:a4:cc:44:eb:4e:1a:b5:
90:79:d3:57:8d:95:62:35:51:9d:01:31:4c:04:62:0d:ba:1a:
5c:a8:a7:f9:e4:1b:af:21:b8:8f:e4:7e:ee:86:34:bc:e1:df:
e6:35:69:43:5f:e3:22:0c:6e:01:90:f1:de:13:c5:27:8a:d7:
af:79:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:25 2025 by rpki-client