Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/CllSsfXgtjjisiube1lsdtc0kX4.roa
File: CllSsfXgtjjisiube1lsdtc0kX4.roa (raw, json)
Hash identifier: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=
Subject key identifier: 0A:59:52:B1:F5:E0:B6:38:E2:B2:2B:9B:7B:59:6C:76:D7:34:91:7E
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 019426D9E5787116C517529179CFEF059A2B
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/CllSsfXgtjjisiube1lsdtc0kX4.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31034
IP address blocks: 83.136.104.0/21 maxlen: 24
94.198.96.0/21 maxlen: 24
94.198.101.0/24 maxlen: 24
95.141.32.0/20 maxlen: 24
158.58.168.0/21 maxlen: 24
158.58.172.0/23 maxlen: 24
185.8.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e5:78:71:16:c5:17:52:91:79:cf:ef:05:9a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a5952b1f5e0b638e2b22b9b7b596c76d734917e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:cd:a1:f5:f0:5e:55:30:d0:2e:43:ac:64:
a8:e0:2a:c3:6e:84:4e:31:08:43:9d:f6:47:9b:3a:
fa:59:a2:7b:bf:5c:1d:18:da:89:0a:6a:04:02:91:
b7:80:8d:24:da:9a:07:ee:f1:a7:9c:bb:8c:f2:b5:
ca:e4:78:6a:e3:1c:7f:82:8c:15:c7:ec:a8:21:59:
59:6c:c3:1b:ea:1a:47:7f:8d:40:44:5a:12:d7:14:
03:97:32:3a:b3:93:25:a4:80:ab:06:bb:4f:3e:93:
7f:ab:fb:2d:c9:30:5b:d5:52:1f:a2:29:ac:83:f3:
e7:65:4f:38:dd:1c:90:e4:65:c4:e8:73:01:42:9b:
56:e8:fb:df:1e:2f:31:5d:a9:db:5a:a6:55:58:38:
88:cc:81:75:36:e5:0f:47:15:54:6b:8b:cb:35:3c:
97:7d:0e:70:1b:86:15:94:bf:09:b3:11:00:b9:81:
5b:d1:74:b3:e0:9f:7e:42:56:e8:31:a4:95:80:38:
c4:80:77:64:3d:83:49:8f:de:de:dc:7f:54:f3:e3:
17:77:f6:ba:5d:39:0e:4c:dd:fb:9c:ad:5b:a7:a3:
00:ed:fa:f3:49:af:ce:54:28:bc:80:32:5b:61:33:
aa:30:6a:ff:a2:b0:59:d6:61:04:eb:bc:ee:cc:a0:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:59:52:B1:F5:E0:B6:38:E2:B2:2B:9B:7B:59:6C:76:D7:34:91:7E
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/CllSsfXgtjjisiube1lsdtc0kX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.104.0/21
94.198.96.0/21
95.141.32.0/20
158.58.168.0/21
185.8.196.0/22
Signature Algorithm: sha256WithRSAEncryption
af:d7:18:98:4f:8d:d9:61:ea:c1:77:bf:9b:24:2a:f7:a2:51:
06:7e:97:a0:35:71:68:3f:69:46:ef:cc:c5:99:f0:3a:5d:90:
4a:ce:5d:05:fc:a9:3a:e6:54:8e:77:67:d8:2d:b7:5e:39:09:
a1:c7:4d:23:57:4e:35:98:f2:4a:6c:09:83:b6:eb:87:4b:db:
9a:40:44:c5:ec:c0:11:dd:26:b3:c7:4e:6f:6b:c8:40:c6:99:
07:e9:74:af:b2:78:bc:50:e7:e6:da:ea:c8:e9:9a:8c:e6:10:
d8:69:5c:b3:2f:a0:cc:37:18:dc:cc:2b:89:2a:cc:db:72:e5:
c1:21:1b:9a:ca:a1:26:f7:82:4f:89:29:a1:c2:c9:74:21:af:
88:5d:89:3d:3a:fd:e6:d7:fd:ed:c8:b0:90:36:d3:96:79:66:
e1:94:9b:33:e8:cb:34:44:f9:a4:a6:9f:0c:6b:5b:e1:2c:b4:
67:eb:e0:4c:61:ec:48:ba:21:1c:87:0d:b7:72:ca:28:f6:4c:
17:47:83:e6:7d:f6:f9:e4:ea:d1:5a:aa:08:ff:3d:35:75:7a:
98:27:96:69:b9:45:37:56:af:dd:42:d1:44:7e:7d:b2:0b:f5:
7c:6a:6a:f6:e1:82:f7:d0:4c:d8:4d:18:ad:80:36:71:44:57:
d1:66:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:37:10 2025 by rpki-client