Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/X0Klqe_8FYDyaBbJmEeVu3rr9js.roa
File: X0Klqe_8FYDyaBbJmEeVu3rr9js.roa (raw, json)
Hash identifier: H5epQuPcOU+HTjlcXrtTXgZi3gyPCGAUWZWVcjb0X+I=
Subject key identifier: 5F:42:A5:A9:EF:FC:15:80:F2:68:16:C9:98:47:95:BB:7A:EB:F6:3B
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018B7B0E4A3B46757D36E45F0811B3AC672B
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/X0Klqe_8FYDyaBbJmEeVu3rr9js.roa
Signing time: Sun 29 Oct 2023 10:50:15 +0000
ROA not before: Sun 29 Oct 2023 10:50:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25773
IP address blocks: 94.188.232.0/24 maxlen: 24
94.188.237.0/24 maxlen: 24
94.188.236.0/24 maxlen: 24
94.188.234.0/24 maxlen: 24
92.61.238.0/24 maxlen: 24
94.188.206.0/24 maxlen: 24
94.188.205.0/24 maxlen: 24
94.188.209.0/24 maxlen: 24
94.188.208.0/24 maxlen: 24
94.188.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7b:0e:4a:3b:46:75:7d:36:e4:5f:08:11:b3:ac:67:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Oct 29 10:50:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f42a5a9effc1580f26816c9984795bb7aebf63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:8b:a8:39:ff:86:cb:bf:8e:4e:df:d9:c8:
1e:e1:0c:cb:cf:1d:59:77:e2:74:90:d5:f2:c6:bd:
aa:b7:8c:9d:31:6b:0b:1f:85:f9:99:83:41:4e:31:
8d:88:f0:d0:1b:c8:fe:d7:36:92:0d:ee:ad:34:31:
c8:b1:59:10:d0:4b:8d:5c:84:bc:2e:62:96:db:ba:
cd:b2:e4:3e:20:e0:f2:1d:4b:24:76:fc:88:f3:e3:
83:b5:e1:a1:65:a1:3b:7c:89:e8:ed:b0:e6:37:4b:
d4:62:8a:82:3c:20:b6:30:cb:25:cf:16:37:c0:a7:
45:d2:88:13:63:a6:9c:b1:1e:83:f7:82:5f:a6:0c:
58:40:6e:90:ec:e6:2a:2a:52:42:5e:5c:98:11:2a:
6b:18:07:eb:20:fb:8b:5e:c3:9e:17:0d:40:3b:22:
cc:91:42:c3:c3:b4:08:7c:b6:f4:2a:6f:ab:59:3a:
59:94:41:e7:8c:71:7d:64:9d:8e:ec:df:f9:6f:cf:
10:a7:75:83:9f:81:7d:0f:17:73:5e:57:f2:05:a2:
f7:24:22:da:06:eb:c1:04:04:67:f1:81:6a:64:fa:
66:a8:a2:44:ab:ee:a2:29:21:fc:ca:7f:66:4f:de:
75:68:61:03:8e:ab:8c:87:cd:43:ca:5c:24:0a:8a:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:42:A5:A9:EF:FC:15:80:F2:68:16:C9:98:47:95:BB:7A:EB:F6:3B
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/X0Klqe_8FYDyaBbJmEeVu3rr9js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.238.0/24
94.188.205.0-94.188.209.255
94.188.232.0/24
94.188.234.0/24
94.188.236.0/23
Signature Algorithm: sha256WithRSAEncryption
06:48:12:00:b6:6f:be:d9:c8:0b:0c:3f:77:9b:6e:51:8c:78:
c2:a2:75:e7:45:db:a6:d9:71:b5:14:8a:09:1b:06:78:76:4c:
eb:25:ce:7c:51:6d:39:a9:70:15:4d:82:4d:ee:15:0c:d0:e7:
72:0b:7f:0c:6e:8a:1b:e4:c3:c0:f2:23:93:63:0b:88:c0:73:
3b:74:7e:07:0c:c7:63:d0:96:c9:52:cd:46:d0:15:4f:f9:b8:
a6:8b:a3:61:30:20:d6:30:4f:d7:3a:6b:83:11:ff:8f:5e:ae:
0b:8e:6d:d7:31:4b:0d:f0:38:67:8e:91:a0:6a:6d:08:f7:e2:
4f:82:3e:32:e5:73:1c:b1:20:5b:39:4d:d9:97:6b:09:ef:62:
ff:eb:4d:26:02:7d:dd:80:a0:f6:07:83:35:42:10:5d:20:6a:
4f:7d:c7:49:fa:47:8a:12:75:eb:e5:ee:3f:bc:10:6d:63:52:
b3:fd:86:3c:f5:3c:65:6e:af:f9:45:fa:03:d5:96:05:57:89:
32:15:29:e9:10:e8:0b:e1:f1:39:15:ac:b5:ed:54:eb:30:45:
a2:10:70:ee:11:4e:bc:02:35:d7:aa:2a:33:ee:62:93:35:58:
94:26:a1:7a:44:c1:45:6f:61:61:17:98:5e:e5:f4:dd:3c:61:
3b:32:06:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:19 2025 by rpki-client