Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa
File: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (raw, json)
Hash identifier: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=
Subject key identifier: E6:5E:FF:60:43:FE:88:39:69:CD:3D:E3:27:2F:D6:70:36:1B:77:2D
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019421B18B8DE8A134FF0D78A2DABBAE6224
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa
Signing time: Wed 01 Jan 2025 11:47:51 +0000
ROA not before: Wed 01 Jan 2025 11:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12310
IP address blocks: 80.86.96.0/19 maxlen: 19
80.86.96.0/20 maxlen: 20
83.166.192.0/19 maxlen: 19
84.247.64.0/18 maxlen: 18
89.42.16.0/21 maxlen: 21
89.149.0.0/18 maxlen: 18
188.240.8.0/22 maxlen: 22
188.240.216.0/22 maxlen: 22
194.102.203.0/24 maxlen: 24
195.95.228.0/23 maxlen: 23
2a02:2a00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8b:8d:e8:a1:34:ff:0d:78:a2:da:bb:ae:62:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 1 11:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e65eff6043fe883969cd3de3272fd670361b772d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:49:98:95:ec:e4:08:df:81:ee:1b:bf:d0:
bb:1d:88:72:2d:ab:50:40:a7:b5:5d:95:0b:44:d6:
94:ea:db:c3:0d:fc:2a:85:92:2e:50:ca:7f:38:c8:
22:00:0c:d0:14:20:70:9f:d1:d3:0d:2e:9c:f2:33:
e7:42:c7:24:81:41:b9:80:af:ff:bc:8b:5c:69:53:
22:41:c4:7e:6f:c3:be:0a:3e:57:bc:7d:00:75:2d:
ae:84:b0:5a:7b:84:86:bf:6f:54:e4:f8:5b:e1:cd:
62:34:1c:07:ad:cf:dc:6b:35:02:ed:57:6f:5f:15:
e3:5d:0c:b8:f8:b0:26:6a:ef:b1:a8:17:ec:98:15:
e5:8f:93:9e:91:b3:88:0b:ea:6e:c1:02:04:2f:da:
46:16:e4:76:b0:8b:b1:92:c8:ca:49:19:50:2a:72:
eb:b0:6d:72:46:97:54:a4:64:55:6e:91:01:02:c4:
d9:29:c5:be:da:fc:de:88:6f:a9:36:08:4a:36:dc:
34:84:7b:85:b3:3f:6f:5d:74:5f:78:db:a4:de:c9:
b0:8d:fa:0f:17:f0:35:7e:98:75:fe:23:85:e0:ce:
44:4d:b1:60:fa:aa:0f:f6:4b:45:fe:5f:9c:82:0f:
0a:c5:67:77:05:bc:95:e9:ef:7d:59:cb:7d:8f:02:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5E:FF:60:43:FE:88:39:69:CD:3D:E3:27:2F:D6:70:36:1B:77:2D
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.96.0/19
83.166.192.0/19
84.247.64.0/18
89.42.16.0/21
89.149.0.0/18
188.240.8.0/22
188.240.216.0/22
194.102.203.0/24
195.95.228.0/23
IPv6:
2a02:2a00::/32
Signature Algorithm: sha256WithRSAEncryption
7f:0c:d5:cf:5e:58:5e:46:28:95:98:f2:4b:7f:a8:ef:05:7e:
b5:9a:2b:19:09:d6:dc:54:83:40:4e:25:58:82:dc:a6:aa:ca:
03:c5:a1:6a:e0:11:59:fe:d4:10:99:58:ca:10:3a:dc:75:bd:
9b:03:e2:8b:c3:26:48:9f:82:be:fc:ef:43:f4:c5:72:7a:83:
49:53:3a:89:34:56:72:c0:21:4c:9f:c6:a2:cb:e2:8a:7c:8f:
bb:74:60:1b:32:c3:bf:ac:25:8a:23:8a:d0:32:e3:1b:e2:76:
d9:ad:36:6e:02:3a:14:1f:61:e2:4b:5b:94:da:13:57:f5:ee:
9b:ba:e4:12:a8:a4:7a:7d:7b:fa:21:12:14:72:f8:bb:97:8a:
3d:f4:bb:04:35:c5:c7:34:68:6b:b3:c8:42:9f:18:36:f4:19:
da:08:55:10:81:60:c6:f7:a7:b6:b6:b3:6b:11:28:87:e5:62:
be:99:46:a1:6e:bf:c9:14:19:85:79:87:52:ee:54:6d:cf:68:
6a:85:d4:8b:87:e0:e4:51:cf:9e:81:e3:1c:6b:ee:b9:5a:c3:
a3:83:38:5a:87:9b:48:be:8c:be:2e:91:f5:d4:f2:d2:ff:83:
69:85:e3:25:5b:9a:e7:4e:e7:1c:1f:e2:7d:ac:3b:0f:3b:65:
dc:6e:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:04 2025 by rpki-client