Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/Ua2Qx5Nmug3HsHtRLU7o_Aw7yow.roa
File: Ua2Qx5Nmug3HsHtRLU7o_Aw7yow.roa (raw, json)
Hash identifier: CqrXYc8+eMFMVn+/0tLaO8fQ8LgVs0MoioEt7R5aIrs=
Subject key identifier: 51:AD:90:C7:93:66:BA:0D:C7:B0:7B:51:2D:4E:E8:FC:0C:3B:CA:8C
Certificate issuer: /CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Certificate serial: 1815835F
Authority key identifier: 70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/Ua2Qx5Nmug3HsHtRLU7o_Aw7yow.roa
Signing time: Tue 31 May 2022 10:36:25 +0000
ROA not before: Tue 31 May 2022 10:36:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34655
IP address blocks: 109.71.163.0/24 maxlen: 24
109.71.162.0/24 maxlen: 24
109.71.166.0/24 maxlen: 24
109.71.165.0/24 maxlen: 24
109.71.164.0/24 maxlen: 24
109.71.160.0/24 maxlen: 24
109.71.167.0/24 maxlen: 24
5.159.216.0/24 maxlen: 24
5.159.219.0/24 maxlen: 24
5.159.218.0/24 maxlen: 24
5.159.217.0/24 maxlen: 24
185.13.88.0/24 maxlen: 24
185.13.91.0/24 maxlen: 24
185.13.90.0/24 maxlen: 24
95.128.120.0/24 maxlen: 24
95.128.123.0/24 maxlen: 24
95.128.122.0/24 maxlen: 24
95.128.121.0/24 maxlen: 24
95.128.125.0/24 maxlen: 24
95.128.124.0/24 maxlen: 24
95.128.126.0/24 maxlen: 24
93.93.53.0/24 maxlen: 24
93.93.54.0/24 maxlen: 24
2a03:9c40:800::/48 maxlen: 48
2a03:9c40:600::/48 maxlen: 48
2a03:9c40:400::/48 maxlen: 48
2a03:9c40:200::/48 maxlen: 48
2a03:9c40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404063071 (0x1815835f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Validity
Not Before: May 31 10:36:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51ad90c79366ba0dc7b07b512d4ee8fc0c3bca8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:ec:e2:32:be:68:b7:5b:dc:e4:fb:ac:49:
5f:3a:e3:83:e1:52:53:44:b5:cc:aa:bd:00:ad:9e:
86:bc:e4:1d:61:4a:bd:95:f1:77:f9:ea:d1:bb:15:
43:e4:2c:cd:d8:c5:3c:dc:44:60:b5:38:c8:6b:31:
0e:b0:87:89:fe:26:f5:5b:5c:81:28:bc:09:78:7a:
1c:bb:f0:b1:95:2e:be:65:34:fb:6c:18:7b:05:44:
c1:97:b2:c5:65:d2:d6:44:89:85:9a:24:50:f4:cc:
79:fa:aa:2b:e0:d3:67:9e:21:40:1c:69:ce:97:96:
e3:91:9b:ca:ba:49:c5:09:9c:58:0e:89:c7:62:3a:
86:57:44:7e:62:b9:3e:4f:90:88:8b:cc:41:89:e1:
11:82:bf:63:48:ef:da:9e:60:ef:9e:36:b6:64:ee:
88:a1:d5:b0:6c:58:f6:5c:d7:b2:36:cb:51:30:71:
79:3f:79:5d:32:1d:e9:77:84:5b:8f:1c:2c:ac:77:
d7:ef:1f:df:3e:92:fe:a4:16:db:ab:2e:9c:fc:78:
56:09:f1:6c:74:8b:ca:aa:79:32:e2:df:2d:39:8a:
17:9b:db:f1:32:a5:a4:6f:e5:27:a0:f5:37:15:08:
c9:35:b7:6d:7e:a7:68:f2:bd:43:a8:0b:ec:75:2a:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AD:90:C7:93:66:BA:0D:C7:B0:7B:51:2D:4E:E8:FC:0C:3B:CA:8C
X509v3 Authority Key Identifier:
keyid:70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/Ua2Qx5Nmug3HsHtRLU7o_Aw7yow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/cE6wMksWcpndYGTbvzQNL5nEAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.216.0/22
93.93.53.0-93.93.54.255
95.128.120.0-95.128.126.255
109.71.160.0/24
109.71.162.0-109.71.167.255
185.13.88.0/24
185.13.90.0/23
IPv6:
2a03:9c40::/48
2a03:9c40:200::/48
2a03:9c40:400::/48
2a03:9c40:600::/48
2a03:9c40:800::/48
Signature Algorithm: sha256WithRSAEncryption
9f:9e:bc:21:4b:41:57:9f:15:89:9b:7c:27:24:20:24:fc:66:
85:aa:a0:85:28:4d:b2:e8:fa:eb:f3:48:f9:e1:58:76:f1:16:
1f:89:fe:e2:5a:5f:d4:33:a7:9b:ef:9e:af:bb:c6:c7:99:87:
19:94:70:94:af:3b:56:30:43:37:53:99:4b:e0:b8:31:6f:5a:
44:05:37:cc:38:1b:10:b5:79:38:1d:36:ad:d6:1e:f2:94:28:
03:8e:c3:43:55:fe:10:2a:b7:d4:b1:70:96:9b:ff:88:cf:01:
d6:56:29:23:c4:72:21:10:b9:5e:dd:e4:65:c2:6f:8f:3e:27:
f7:06:38:4c:62:c9:ce:06:27:3f:84:bf:42:11:b6:8a:df:f4:
b3:20:0e:83:02:88:69:a5:5d:e2:ee:63:d5:10:8c:79:5f:05:
e2:42:02:a2:13:2b:07:89:c9:cc:84:75:e2:cd:47:eb:47:0f:
b4:56:ba:08:2a:0d:1c:87:c8:e2:93:ed:38:e5:6a:9c:3b:f8:
16:c1:ce:c9:10:91:3f:12:b2:68:b6:dc:93:14:b5:86:41:92:
a5:57:bb:87:88:af:57:48:88:3f:90:d4:f0:d0:b3:5f:50:00:
c0:0e:8c:2d:5a:59:d7:e8:ac:2b:74:d0:ca:89:3a:bd:81:b7:
29:93:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:43 2025 by rpki-client