Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa
File: mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa (raw, json)
Hash identifier: bNr/zF64vk+SVTrKPbIdCfqu6Sowa5lS9V4LG/Ns2g0=
Subject key identifier: 98:55:24:29:45:76:8F:C1:5C:B7:50:C6:6D:54:09:4F:37:00:D2:28
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 01942444F5D476BE24A2CA9320D857D9410A
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa
Signing time: Wed 01 Jan 2025 23:48:06 +0000
ROA not before: Wed 01 Jan 2025 23:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44812
IP address blocks: 5.252.192.0/24 maxlen: 24
5.252.193.0/24 maxlen: 24
5.252.194.0/24 maxlen: 24
5.252.195.0/24 maxlen: 24
185.158.112.0/23 maxlen: 23
185.158.114.0/24 maxlen: 24
185.158.115.0/24 maxlen: 24
185.248.100.0/24 maxlen: 24
185.248.101.0/24 maxlen: 24
185.248.102.0/24 maxlen: 24
185.248.103.0/24 maxlen: 24
193.19.118.0/23 maxlen: 23
195.62.52.0/23 maxlen: 23
2a07:ac80::/29 maxlen: 29
2a09:4d40::/32 maxlen: 32
2a09:4d42::/32 maxlen: 32
2a09:4d43::/32 maxlen: 32
2a09:4d47::/32 maxlen: 32
2a0d:e280::/32 maxlen: 32
2a0d:e283::/32 maxlen: 32
2a0d:e286::/32 maxlen: 32
2a0d:e287::/32 maxlen: 32
2a12:2206::/32 maxlen: 32
2a12:2207::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f5:d4:76:be:24:a2:ca:93:20:d8:57:d9:41:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Jan 1 23:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9855242945768fc15cb750c66d54094f3700d228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:bf:a5:da:ce:4f:66:98:67:3c:1e:6c:ec:
8e:f9:20:1b:43:f4:20:b5:9d:51:8e:7e:68:75:52:
4a:6a:43:d7:f7:88:42:7c:96:d9:5e:25:32:b6:32:
3b:42:29:49:57:e8:d0:2d:d0:b9:f9:1c:ce:7e:18:
47:4c:d4:a6:29:dc:af:c3:12:f0:6f:0b:de:2e:8f:
d7:b4:b4:47:fb:85:e2:79:68:4d:92:93:1f:01:21:
f2:db:96:32:cf:5f:5d:05:42:b4:3d:bb:67:de:e5:
d2:10:1b:14:9f:b9:95:57:51:25:69:83:f3:98:fe:
d9:00:ba:45:a3:9e:3c:64:19:8f:df:12:09:4b:33:
6a:65:67:a9:5e:75:b5:d4:c2:61:ea:71:6e:6f:a7:
d9:f2:d5:d6:b6:03:8d:98:24:e7:69:a2:30:2e:d0:
bd:22:77:3c:ef:a9:eb:20:57:1a:20:8b:fe:b6:82:
84:75:ff:97:17:27:44:81:95:91:e1:0b:2c:f4:95:
1e:ba:9d:5c:60:a9:13:72:f3:e7:d5:48:50:dc:10:
11:fa:12:07:d9:c5:48:7c:2c:e7:85:3b:66:8b:67:
57:20:49:c1:20:a8:43:2a:a1:45:5c:c9:49:fe:d3:
c4:56:e8:57:f9:8e:13:53:c6:e9:d4:24:01:c0:3e:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:24:29:45:76:8F:C1:5C:B7:50:C6:6D:54:09:4F:37:00:D2:28
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.192.0/22
185.158.112.0/22
185.248.100.0/22
193.19.118.0/23
195.62.52.0/23
IPv6:
2a07:ac80::/29
2a09:4d40::/32
2a09:4d42::/31
2a09:4d47::/32
2a0d:e280::/32
2a0d:e283::/32
2a0d:e286::/31
2a12:2206::/31
Signature Algorithm: sha256WithRSAEncryption
7b:b0:3c:0b:06:a5:f5:08:b1:2b:0c:03:a8:0e:da:b3:12:b6:
97:61:bd:f4:9e:e5:20:21:48:05:2b:28:37:48:3d:6b:3a:97:
83:07:dd:6a:8b:e3:bd:cc:a5:1a:5b:1f:ae:06:7a:a4:ba:53:
18:0a:ed:1a:b3:36:c5:7f:bc:f6:ab:18:0c:eb:3b:21:39:a3:
70:bf:0e:f5:6a:30:b6:05:e4:79:fc:5e:13:bf:be:d9:58:a2:
63:a8:70:be:fb:50:95:a7:97:60:75:ee:30:34:9c:a4:55:ff:
7e:24:e2:3b:49:f3:05:bf:13:08:5e:3b:9d:f5:a9:47:76:58:
83:7d:04:ff:e9:7a:d5:6e:2e:5f:0a:b5:21:35:86:74:8e:ea:
55:43:89:8a:6e:99:04:61:db:81:90:f2:65:fa:a5:1c:e8:d0:
22:17:ed:4d:bd:4f:6b:3c:5e:64:cf:40:0c:7e:94:6a:d4:f8:
b0:c9:1b:c7:e3:e9:4f:06:e7:6d:22:41:1a:a4:32:24:f3:0d:
4e:6f:7d:02:96:72:68:d0:a0:94:ba:86:0d:41:9e:0f:8f:c2:
44:e5:02:78:1f:20:7d:b4:89:93:31:f2:b0:2a:b2:6e:7e:45:
c9:64:45:11:17:ba:06:45:e4:37:1e:6a:c0:cf:8f:65:82:96:
d2:69:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:43 2025 by rpki-client