Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/0IFlmjI7sa9LEZqUiPn-roXKN6s.roa
File: 0IFlmjI7sa9LEZqUiPn-roXKN6s.roa (raw, json)
Hash identifier: sywVJ/zKxVVhon9D1xoPRlfNImoaytUsEvLcmYxpOA4=
Subject key identifier: D0:81:65:9A:32:3B:B1:AF:4B:11:9A:94:88:F9:FE:AE:85:CA:37:AB
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0194266C23015151155713C97594210414E2
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/0IFlmjI7sa9LEZqUiPn-roXKN6s.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 138.124.18.0/24 maxlen: 24
138.124.24.0/24 maxlen: 24
138.124.25.0/24 maxlen: 24
138.124.26.0/24 maxlen: 24
138.124.29.0/24 maxlen: 24
138.124.34.0/24 maxlen: 24
138.124.35.0/24 maxlen: 24
138.124.49.0/24 maxlen: 24
138.124.50.0/24 maxlen: 24
138.124.51.0/24 maxlen: 24
138.124.52.0/24 maxlen: 24
138.124.53.0/24 maxlen: 24
138.124.54.0/24 maxlen: 24
138.124.55.0/24 maxlen: 24
138.124.58.0/24 maxlen: 24
138.124.59.0/24 maxlen: 24
138.124.60.0/24 maxlen: 24
138.124.61.0/24 maxlen: 24
138.124.78.0/24 maxlen: 24
138.124.89.0/24 maxlen: 24
138.124.90.0/24 maxlen: 24
138.124.91.0/24 maxlen: 24
138.124.92.0/24 maxlen: 24
138.124.93.0/24 maxlen: 24
138.124.99.0/24 maxlen: 24
138.124.101.0/24 maxlen: 24
138.124.102.0/24 maxlen: 24
138.124.103.0/24 maxlen: 24
138.124.109.0/24 maxlen: 24
138.124.110.0/24 maxlen: 24
138.124.112.0/24 maxlen: 24
138.124.113.0/24 maxlen: 24
138.124.114.0/24 maxlen: 24
138.124.115.0/24 maxlen: 24
138.124.116.0/24 maxlen: 24
138.124.117.0/24 maxlen: 24
138.124.118.0/24 maxlen: 24
138.124.119.0/24 maxlen: 24
138.124.123.0/24 maxlen: 24
138.124.124.0/24 maxlen: 24
138.124.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:23:01:51:51:15:57:13:c9:75:94:21:04:14:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d081659a323bb1af4b119a9488f9feae85ca37ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:7c:30:22:03:c7:76:4a:07:51:b1:14:7b:
fb:6f:00:d2:07:dc:5e:2f:26:ff:f9:37:d6:c0:77:
5b:35:22:cc:5a:ff:78:1c:fd:cf:c6:3d:ca:fa:0f:
dd:17:cb:c9:d7:79:eb:f0:17:f0:5b:26:66:ab:fa:
ba:dc:43:0b:54:e1:6b:a6:60:82:53:99:c3:22:dc:
6d:f1:b6:7e:19:33:e1:71:b1:6e:aa:77:b6:c2:6b:
26:4b:73:1e:16:f9:f9:fa:b5:8a:e2:59:f1:da:51:
e9:bb:55:f4:11:b2:32:1b:99:a4:17:b3:8e:b2:0d:
a6:56:e9:fc:0d:f0:76:e5:85:7d:2d:bb:93:63:76:
22:de:fe:36:3f:ae:08:f5:f9:87:fb:e3:ee:aa:f4:
72:71:9c:03:29:f0:1d:9d:13:f0:ca:09:2e:01:51:
57:a8:3b:1d:07:42:06:ee:71:39:3d:9f:13:86:25:
d2:5d:2a:11:f5:66:cc:ed:e8:ac:35:38:28:1f:5f:
5a:d5:2a:e1:70:f9:13:b3:a5:68:b4:72:2a:64:5e:
37:3a:f8:76:22:10:9f:ff:ac:84:a8:c1:0d:ea:0e:
bc:ba:e9:c1:4c:ca:d0:6e:4b:77:6f:13:fc:24:e0:
de:7c:4b:ac:c5:04:65:c6:41:27:42:b6:fa:f6:fe:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:81:65:9A:32:3B:B1:AF:4B:11:9A:94:88:F9:FE:AE:85:CA:37:AB
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/0IFlmjI7sa9LEZqUiPn-roXKN6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.18.0/24
138.124.24.0-138.124.26.255
138.124.29.0/24
138.124.34.0/23
138.124.49.0-138.124.55.255
138.124.58.0-138.124.61.255
138.124.78.0/24
138.124.89.0-138.124.93.255
138.124.99.0/24
138.124.101.0-138.124.103.255
138.124.109.0-138.124.110.255
138.124.112.0/21
138.124.123.0-138.124.124.255
138.124.127.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9a:3c:de:05:23:25:9e:99:7b:59:91:61:65:35:a2:76:46:
73:e4:85:c3:2a:21:79:7f:c2:76:75:c7:83:d5:fa:06:a2:f9:
5c:5f:2f:38:58:7a:f7:b3:d0:43:77:a4:69:09:55:97:48:82:
6e:58:cc:64:62:5b:1b:b0:d5:e9:c0:2e:6b:6a:97:2d:31:8e:
cf:cc:22:1f:5a:f6:96:db:7d:3a:fe:42:0c:1d:a2:29:37:32:
85:70:c6:56:a2:5a:8e:f6:49:64:06:85:ed:fd:c4:a0:ad:c5:
7a:e7:7f:ae:6e:b0:18:57:58:7a:58:97:82:09:de:91:55:06:
82:b4:fc:35:36:b6:ba:f4:c5:84:b1:7f:2f:27:58:7f:5b:0b:
f0:45:96:f4:a4:92:bb:7f:f6:33:33:cc:d8:5f:6c:e5:59:0c:
8c:a0:de:88:6e:3a:f9:e7:6c:8b:ed:52:b1:02:ce:c7:0d:12:
32:10:3e:f8:fa:79:22:ef:c0:8a:76:6b:47:56:99:cb:62:e4:
fa:46:98:35:01:f2:96:d1:d5:f0:09:32:ea:49:0f:28:5a:fd:
ea:13:45:b5:6b:eb:1e:1e:ad:ad:c1:fe:9c:92:a7:b2:00:65:
c6:b2:73:7a:ea:a2:de:39:20:d4:1c:a2:35:6e:73:32:f4:5e:
ea:cb:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:02 2025 by rpki-client