Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/dpUSEqq2Td5Ojfpc-JREefZXxPs.roa
File: dpUSEqq2Td5Ojfpc-JREefZXxPs.roa (raw, json)
Hash identifier: msHaxVjZ5CD8wRvnjTeIWRsAk+xkoIdkahWOUGnkktQ=
Subject key identifier: 76:95:12:12:AA:B6:4D:DE:4E:8D:FA:5C:F8:94:44:79:F6:57:C4:FB
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019422200050F66B27F0B95727CD1D30D90C
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/dpUSEqq2Td5Ojfpc-JREefZXxPs.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 5.181.168.0/24 maxlen: 24
5.181.169.0/24 maxlen: 24
5.183.255.0/24 maxlen: 24
83.171.224.0/24 maxlen: 24
83.171.226.0/24 maxlen: 24
83.171.227.0/24 maxlen: 24
141.98.87.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
185.68.246.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
185.89.42.0/24 maxlen: 24
185.89.43.0/24 maxlen: 24
194.104.10.0/24 maxlen: 24
213.232.120.0/24 maxlen: 24
213.232.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:00:50:f6:6b:27:f0:b9:57:27:cd:1d:30:d9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76951212aab64dde4e8dfa5cf8944479f657c4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:6c:41:04:0c:df:ab:c7:b1:bb:38:ec:f7:
86:bd:50:56:a5:dc:3c:bf:ff:03:1c:e0:2e:3d:8b:
fb:d2:84:2c:2e:eb:ce:8c:3c:c3:ae:21:55:1a:1e:
cf:b5:8c:39:22:35:7f:58:b1:ef:19:b8:eb:49:fa:
ed:60:a8:25:a3:7f:53:a2:4b:9e:2c:27:7f:ba:8b:
82:07:b0:5f:b8:f1:54:7a:92:d9:7e:6e:56:db:4b:
0f:15:b9:b0:dd:73:13:69:3d:03:5a:ac:6d:48:82:
32:1d:6c:23:1b:ae:f1:26:ef:51:c1:35:fa:88:e7:
fc:8d:c0:d6:39:37:b0:99:c7:8d:98:4b:a3:ca:38:
f3:ef:ae:0b:2b:42:34:2f:a1:b4:9d:b3:24:a2:3d:
68:5b:6a:11:bf:00:72:bf:7b:aa:f0:4f:13:0d:31:
6c:fe:34:26:9e:c7:b1:31:9f:92:95:f9:3b:4e:c2:
f6:7d:dc:f3:75:bd:f2:49:5a:14:1b:98:c0:54:2c:
f9:2a:9a:b8:98:e8:ea:73:93:f7:16:c5:19:78:62:
35:38:b6:b4:eb:ff:02:22:d1:ed:20:54:51:a5:51:
7e:bb:79:9c:7a:fe:5b:3b:31:38:15:b1:24:f7:75:
32:5d:15:b8:4d:8c:22:96:e9:30:07:43:1d:37:91:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:95:12:12:AA:B6:4D:DE:4E:8D:FA:5C:F8:94:44:79:F6:57:C4:FB
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/dpUSEqq2Td5Ojfpc-JREefZXxPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.168.0/23
5.183.255.0/24
83.171.224.0/24
83.171.226.0/23
141.98.87.0/24
185.68.184.0/24
185.68.246.0/23
185.88.36.0/24
185.89.42.0/23
194.104.10.0/24
213.232.120.0/24
213.232.122.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b4:48:81:be:fb:ee:a9:34:4b:7b:ae:19:ec:57:4b:d8:e3:
5a:d2:43:51:e9:b9:0b:91:5b:7f:34:17:7e:9e:be:63:62:85:
26:e9:48:6c:38:47:29:e8:df:14:53:21:62:62:03:36:b1:45:
18:4f:ae:72:b7:a3:35:54:9e:0c:5f:ec:4b:4b:63:8a:41:7f:
23:45:66:10:ea:12:56:87:e5:fc:6a:bc:24:87:50:dc:ed:a3:
2d:3f:28:09:92:aa:8c:0c:90:d4:67:58:8b:b1:fe:2f:a7:d9:
4a:83:2f:ba:52:de:9e:d9:1d:0b:13:b7:0f:d3:da:99:12:95:
99:44:7c:dd:6a:ca:ec:c1:47:75:f9:0e:b1:28:a3:31:1c:dc:
2c:11:b0:70:bb:46:ca:05:32:5a:2e:ea:95:df:fb:77:a8:78:
c0:95:b3:1e:5a:8c:c5:c6:5f:36:bf:b0:83:0f:4a:38:ba:80:
d5:4f:d5:94:fd:0f:2c:f9:16:30:96:d2:b7:40:6e:58:5f:6b:
18:8e:75:78:2c:3a:9b:f9:f5:46:0f:8b:ab:18:21:1f:c9:a3:
65:96:d3:54:18:f0:fa:b5:4a:ee:ac:52:42:97:66:08:3f:42:
78:87:54:d9:72:e0:6c:7a:2e:3d:fd:f7:e3:18:82:7c:24:44:
2f:fc:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:13 2025 by rpki-client