Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/d-pLKsO0EfhGUD90iTC-1_GSrsk.roa
File: d-pLKsO0EfhGUD90iTC-1_GSrsk.roa (raw, json)
Hash identifier: 5MEGwx28CLZVZ0ixSYucMiAyMrGMnzptZrIky0Wfv68=
Subject key identifier: 77:EA:4B:2A:C3:B4:11:F8:46:50:3F:74:89:30:BE:D7:F1:92:AE:C9
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 01939373A6102E426BFDFED42993386E551F
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/d-pLKsO0EfhGUD90iTC-1_GSrsk.roa
Signing time: Wed 04 Dec 2024 20:54:10 +0000
ROA not before: Wed 04 Dec 2024 20:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42908
IP address blocks: 46.183.56.0/21 maxlen: 21
78.136.128.0/18 maxlen: 18
80.78.136.0/22 maxlen: 22
80.79.0.0/22 maxlen: 22
93.92.48.0/21 maxlen: 21
93.93.32.0/21 maxlen: 21
94.241.64.0/18 maxlen: 18
188.119.96.0/22 maxlen: 22
2a01:9f40::/29 maxlen: 29
2a03:7a00::/32 maxlen: 32
2a07:cc80::/29 maxlen: 29
2a0c:8b40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:73:a6:10:2e:42:6b:fd:fe:d4:29:93:38:6e:55:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Dec 4 20:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77ea4b2ac3b411f846503f748930bed7f192aec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:ff:b2:c8:ca:31:48:e0:29:cb:f2:4d:5f:
87:77:c1:e9:69:2f:e8:ed:9a:64:5f:b1:2b:f8:84:
45:e2:03:23:9d:b2:8a:9f:8c:fd:86:ee:43:04:5f:
f2:48:c0:b8:0f:3b:f1:bc:b6:88:57:52:c3:e8:ae:
29:d1:5d:43:28:80:64:90:bc:50:d9:2b:d8:5f:6d:
95:11:11:c4:d7:04:36:b9:02:b0:3c:4b:d0:1c:ff:
68:f0:3a:cd:da:33:82:3e:04:ef:77:4c:c6:3e:bf:
f3:bb:32:20:7c:2a:f4:89:53:03:b6:48:de:db:7c:
85:10:ee:af:dd:7c:b2:8f:0c:93:d5:d7:95:67:4a:
01:7c:a4:67:3a:6b:9e:53:a5:54:47:f5:8c:2c:18:
af:8c:0e:90:2b:14:16:c9:5f:7b:27:6a:e7:d1:80:
53:76:85:a4:d7:11:32:b9:11:be:fa:2a:99:36:1b:
68:12:96:34:fa:12:3f:9e:09:ae:3c:d1:08:c5:25:
69:b5:e9:ee:29:2f:36:8e:e5:74:90:bb:68:49:85:
b2:8c:43:21:07:ae:e7:36:74:35:b7:1b:c0:e8:0a:
20:10:bc:31:37:c7:58:d1:1d:1e:00:14:67:1d:2c:
27:f5:f6:96:58:8c:8e:89:db:02:97:d6:8f:d4:e8:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:4B:2A:C3:B4:11:F8:46:50:3F:74:89:30:BE:D7:F1:92:AE:C9
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/d-pLKsO0EfhGUD90iTC-1_GSrsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.56.0/21
78.136.128.0/18
80.78.136.0/22
80.79.0.0/22
93.92.48.0/21
93.93.32.0/21
94.241.64.0/18
188.119.96.0/22
IPv6:
2a01:9f40::/29
2a03:7a00::/32
2a07:cc80::/29
2a0c:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
29:36:f5:0f:10:1e:a0:ef:58:15:70:ef:f4:d3:6c:b6:bd:90:
52:28:ce:ce:e8:3d:16:95:34:88:63:0a:50:d6:c5:63:25:00:
82:5b:22:ae:af:09:27:3c:8e:67:d4:01:c2:77:01:82:16:e8:
80:c8:bd:01:a3:b5:5b:e7:f5:e7:05:dc:54:b0:6e:49:c2:87:
ab:2d:79:d4:54:1f:d4:0e:80:b9:77:e0:2b:ac:6b:51:72:9e:
41:e6:d6:29:98:54:ba:87:c2:9c:64:a0:3a:09:c9:9c:1e:ea:
94:ba:c1:c0:4a:36:0d:cf:72:83:14:f6:4c:84:2d:4b:fc:01:
98:73:26:30:7e:24:b9:6f:47:79:e4:0a:de:42:e0:2f:51:87:
c4:e4:26:15:7b:30:a5:81:70:9d:3e:b9:8f:37:53:64:1c:b1:
7b:92:43:35:7f:fc:a2:a5:df:29:75:8d:c5:89:5d:44:ca:b3:
6a:36:db:5b:ad:73:e6:6f:24:85:8e:af:8f:af:80:45:9e:e6:
8e:f9:b8:52:f2:f2:1f:7e:47:fd:6c:80:9e:6d:f2:47:55:b4:
52:c5:d5:01:4f:77:ed:b7:16:62:65:61:1a:f4:83:31:d6:05:
33:b0:54:97:2a:34:98:ea:e9:94:8a:c0:80:bc:e6:04:40:23:
ee:4c:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:54:52 2025 by rpki-client