Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/J5Nzje0wm67y5K6t3cH8za4h1d0.roa
File: J5Nzje0wm67y5K6t3cH8za4h1d0.roa (raw, json)
Hash identifier: qpAZrfLDKqU9NwWz286x02NAvGgP6kk6hcqmLvVKz8c=
Subject key identifier: 27:93:73:8D:ED:30:9B:AE:F2:E4:AE:AD:DD:C1:FC:CD:AE:21:D5:DD
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 0194236901A0658D778D00399BD4C5AB8E19
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/J5Nzje0wm67y5K6t3cH8za4h1d0.roa
Signing time: Wed 01 Jan 2025 19:47:51 +0000
ROA not before: Wed 01 Jan 2025 19:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14537
IP address blocks: 92.249.5.0/24 maxlen: 24
217.147.120.0/24 maxlen: 24
217.147.121.0/24 maxlen: 24
217.147.124.0/22 maxlen: 22
217.147.124.0/24 maxlen: 24
217.147.125.0/24 maxlen: 24
217.147.126.0/24 maxlen: 24
217.147.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:01:a0:65:8d:77:8d:00:39:9b:d4:c5:ab:8e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jan 1 19:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2793738ded309baef2e4aeadddc1fccdae21d5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:a8:ec:3b:21:2a:63:25:8a:16:6f:93:65:
ec:a9:d8:a6:cf:03:6a:c3:69:69:be:05:0f:0b:32:
0b:66:db:c9:8f:f0:a0:3a:1a:6a:b4:37:09:c7:9c:
2f:fa:7a:17:bb:c6:22:a2:8d:fd:f0:74:db:4c:60:
14:72:b8:2c:7f:97:6b:4d:f2:65:0b:c5:bd:1d:1a:
c4:3d:35:d1:2f:82:82:4c:f9:3a:8a:2d:a9:a6:b1:
74:ff:ab:2a:a8:c2:cb:f6:31:26:c7:2d:dc:b7:25:
e5:42:92:19:60:8f:cb:18:4d:96:93:0a:cd:9c:52:
35:ed:33:21:f3:79:cf:2c:bd:3f:52:ac:44:c3:f1:
c3:4b:69:1e:ec:dd:64:75:b7:f5:51:2a:07:08:f4:
07:3e:ea:51:c1:a5:38:d5:e9:11:c2:fd:dd:b8:1a:
5c:b5:a1:f4:b8:14:80:20:e9:65:af:50:01:42:69:
ae:0c:d9:4d:7b:a7:1e:bc:95:fb:06:b3:b3:a9:a1:
33:4a:bd:9c:73:22:b0:a6:24:18:d0:6e:f5:1a:35:
55:7b:d5:8f:89:ff:5a:51:13:1a:0e:d9:c9:a1:e6:
17:f7:00:d9:71:05:fb:1f:3c:c8:51:1c:5f:dd:0b:
88:47:d4:f8:0d:47:2d:78:d5:97:00:2e:06:34:70:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:73:8D:ED:30:9B:AE:F2:E4:AE:AD:DD:C1:FC:CD:AE:21:D5:DD
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/J5Nzje0wm67y5K6t3cH8za4h1d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.5.0/24
217.147.120.0/23
217.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
03:07:53:45:ee:f2:7b:3f:bf:04:6d:06:71:54:8a:2c:a9:2c:
ed:8f:fe:cc:ef:de:86:bb:53:80:73:41:39:a6:ce:f3:c2:12:
59:98:1f:22:31:fa:3f:92:9a:36:82:47:80:f1:cc:cd:e2:87:
5d:90:b0:51:54:1c:4e:a0:29:ac:c7:a2:b3:bb:1e:4f:a5:a2:
14:61:8d:06:d1:3c:c5:92:ab:da:d8:61:56:86:fa:de:72:1f:
dd:9a:28:67:8c:13:b7:23:40:dc:ff:70:0c:7e:80:aa:58:6c:
31:c9:8e:b5:5a:f9:1a:d7:e8:a3:d9:d0:30:c7:99:95:79:cf:
29:e6:30:69:db:3e:3b:bd:d7:5d:00:b3:e8:81:30:fd:37:25:
c9:fd:9b:4c:02:40:e8:5c:bb:e8:87:53:2c:19:b8:96:8d:d6:
9d:19:8a:d2:a6:2a:40:69:32:dd:f5:c3:35:b3:53:9c:3c:92:
d0:57:e8:c2:f0:0c:53:9c:c3:86:93:d1:da:cf:03:b9:91:07:
c5:1b:66:ea:82:93:52:e4:d8:9a:19:29:ef:6f:a8:85:54:d4:
f3:c0:d6:0e:c7:dd:11:f0:1e:06:f4:ed:d2:3d:31:06:e5:dd:
43:b5:ec:ae:c6:23:f3:d6:20:d6:7e:95:fc:e9:a1:22:f8:9b:
36:f2:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:30 2025 by rpki-client