Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/a_UdiKItJqa6ouhLv8zuV3N9KgU.roa
File: a_UdiKItJqa6ouhLv8zuV3N9KgU.roa (raw, json)
Hash identifier: PcLQ1kHn8iCjw22A4P7HqmDre8sIMleRtNKyyW8UkLA=
Subject key identifier: 6B:F5:1D:88:A2:2D:26:A6:BA:A2:E8:4B:BF:CC:EE:57:73:7D:2A:05
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193F404F39437D760F13B7686FE0FDFD154
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/a_UdiKItJqa6ouhLv8zuV3N9KgU.roa
Signing time: Mon 23 Dec 2024 14:56:25 +0000
ROA not before: Mon 23 Dec 2024 14:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41717
IP address blocks: 2.58.244.0/24 maxlen: 24
2.58.245.0/24 maxlen: 24
2.58.246.0/24 maxlen: 24
2.58.247.0/24 maxlen: 24
2.58.248.0/24 maxlen: 24
2.58.249.0/24 maxlen: 24
2.58.250.0/24 maxlen: 24
2.58.251.0/24 maxlen: 24
5.183.116.0/23 maxlen: 23
5.183.116.0/24 maxlen: 24
5.183.117.0/24 maxlen: 24
5.183.118.0/24 maxlen: 24
5.183.119.0/24 maxlen: 24
5.183.120.0/23 maxlen: 23
5.183.120.0/24 maxlen: 24
5.183.121.0/24 maxlen: 24
5.183.122.0/24 maxlen: 24
5.183.123.0/24 maxlen: 24
45.8.32.0/24 maxlen: 24
45.8.34.0/24 maxlen: 24
45.8.35.0/24 maxlen: 24
45.139.194.0/24 maxlen: 24
45.141.44.0/22 maxlen: 24
80.66.199.0/24 maxlen: 24
95.214.166.0/24 maxlen: 24
95.214.167.0/24 maxlen: 24
185.198.71.0/24 maxlen: 24
194.104.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:04:f3:94:37:d7:60:f1:3b:76:86:fe:0f:df:d1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 23 14:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bf51d88a22d26a6baa2e84bbfccee57737d2a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:60:d2:95:4a:7e:c9:a7:b2:ba:00:5f:f7:
3b:4a:52:64:1a:f0:f0:d9:73:18:7a:5e:db:fb:79:
db:d0:c0:79:23:c7:6f:6c:fe:fd:42:21:fc:6e:dc:
ee:68:0b:ef:16:60:19:c5:21:27:2c:78:86:11:a8:
df:f7:c5:bc:de:03:44:15:4d:0d:29:83:1a:ac:e4:
40:6e:d2:c6:f8:29:35:33:1a:74:a2:d6:ab:e6:c4:
67:8d:cc:00:bb:f3:61:fb:39:70:37:4a:40:ee:29:
9e:ad:a8:0c:e1:83:64:a0:d6:72:83:9a:ea:2d:4e:
97:64:0b:3a:79:87:41:fb:79:5d:78:19:fd:c3:39:
dd:b3:e0:24:e8:37:03:53:fb:8b:4c:c7:6a:06:00:
6b:07:0d:be:89:09:9d:e9:ca:29:97:93:45:d6:57:
2b:b3:bc:fa:1b:c3:c1:9b:f3:9b:47:76:ee:ba:7a:
08:5f:d6:fd:ae:68:8f:c2:7f:d0:6b:f8:82:55:ab:
92:fd:8d:3c:14:2f:ee:a6:e4:d9:79:1a:a1:34:17:
c1:e5:e7:95:f1:ff:4d:5d:96:7f:bb:ee:8c:d6:92:
cb:cd:4e:be:9f:3e:a4:28:be:c2:3d:be:64:52:29:
30:23:a0:12:0e:0c:f3:da:d0:8a:de:69:70:42:c6:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:1D:88:A2:2D:26:A6:BA:A2:E8:4B:BF:CC:EE:57:73:7D:2A:05
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/a_UdiKItJqa6ouhLv8zuV3N9KgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.244.0-2.58.251.255
5.183.116.0-5.183.123.255
45.8.32.0/24
45.8.34.0/23
45.139.194.0/24
45.141.44.0/22
80.66.199.0/24
95.214.166.0/23
185.198.71.0/24
194.104.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:df:7e:9f:6a:0f:87:fa:92:26:0f:91:48:83:41:64:b0:fa:
db:8e:7d:f6:a0:e6:72:fb:2c:2c:2b:e9:f6:14:5e:36:c8:fc:
18:9c:96:f6:64:71:0b:14:f9:50:0e:52:2b:b4:d0:dd:7e:62:
e1:d1:65:ac:45:ac:cd:03:44:84:7d:51:08:0f:4c:ac:76:0f:
74:10:ba:b6:d8:97:75:79:33:19:3f:28:35:77:99:9d:8b:5d:
98:93:5c:c9:66:64:54:83:39:0c:92:fd:93:0f:96:59:6c:59:
14:57:69:e0:fe:d3:f4:d0:56:41:d9:6a:6d:ac:95:51:a5:05:
d6:49:53:2d:73:79:72:c1:00:9b:ff:8e:fd:89:68:a0:ad:cf:
6b:9e:83:18:ee:23:37:8d:c8:2e:95:2c:33:13:7f:e1:d8:ea:
b6:d8:56:77:9e:12:55:b5:bc:e5:3a:42:26:78:67:1e:e0:8b:
74:ed:bb:58:64:71:76:a7:b8:bb:64:02:29:88:28:de:d2:00:
72:7b:3a:5d:92:65:06:b7:2b:40:b6:10:27:af:0d:87:45:ec:
1a:4a:c1:29:de:f6:cf:81:2c:3e:6d:61:23:ad:04:db:79:c5:
ec:9e:97:8f:65:ca:77:be:5b:9a:25:79:d2:00:b9:60:0e:ad:
4a:14:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:01:27 2025 by rpki-client