Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/5HXaPKM2_j0dHSNy-xzrYbQNa_k.roa
File: 5HXaPKM2_j0dHSNy-xzrYbQNa_k.roa (raw, json)
Hash identifier: beilhito/xAW/Tm3wD3trnoco8BgnjLE1jANQJKL6m0=
Subject key identifier: E4:75:DA:3C:A3:36:FE:3D:1D:1D:23:72:FB:1C:EB:61:B4:0D:6B:F9
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 01823A93872DC76BD18E16B401A8B1F27097
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/5HXaPKM2_j0dHSNy-xzrYbQNa_k.roa
Signing time: Tue 26 Jul 2022 12:55:23 +0000
ROA not before: Tue 26 Jul 2022 12:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51776
IP address blocks: 87.238.138.0/24 maxlen: 24
87.238.137.0/24 maxlen: 24
87.238.136.0/21 maxlen: 24
87.238.142.0/24 maxlen: 24
87.238.141.0/24 maxlen: 24
185.132.128.0/22 maxlen: 24
185.188.53.0/24 maxlen: 24
185.188.52.0/24 maxlen: 24
185.188.55.0/24 maxlen: 24
185.188.54.0/24 maxlen: 24
91.201.213.0/24 maxlen: 24
91.201.212.0/23 maxlen: 24
91.201.212.0/24 maxlen: 24
2a06:56c0::/29 maxlen: 48
2a06:56c0:12::/48 maxlen: 48
2001:67c:3fc::/48 maxlen: 48
2a06:56c0:11::/48 maxlen: 48
2a06:56c1:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:93:87:2d:c7:6b:d1:8e:16:b4:01:a8:b1:f2:70:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jul 26 12:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e475da3ca336fe3d1d1d2372fb1ceb61b40d6bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:bf:a2:8d:e0:c0:90:58:f5:af:6d:de:0c:
1f:34:b3:8b:44:00:a6:61:12:d1:96:33:f9:ed:4e:
8f:04:2e:3d:c9:d7:73:47:be:87:0a:87:d9:15:5e:
84:71:ef:47:52:de:9f:80:75:02:f7:ed:97:51:ff:
9b:91:ce:3d:cd:4e:cd:69:14:37:24:c6:51:d1:a8:
4e:f9:55:3a:4c:08:29:e2:8b:76:23:a1:12:ea:76:
f4:e0:cb:f1:7a:1d:a7:f6:6e:2a:f2:60:e3:94:5a:
96:6b:30:50:65:53:ca:e0:37:eb:c1:2e:7e:e1:e2:
2f:f5:04:e6:3b:86:68:31:a7:7a:74:36:12:5b:e5:
76:ce:df:30:12:44:59:bc:f6:38:12:4c:eb:35:2a:
f1:85:db:aa:50:43:6c:b7:85:3a:48:c8:a0:28:5d:
a9:05:11:3e:92:b5:08:61:15:d5:35:c2:ec:64:e1:
25:e1:b7:b0:fd:2e:92:74:ef:d6:f8:02:df:e1:86:
bc:85:71:00:01:64:60:57:db:0e:39:41:56:af:88:
e0:2b:8f:38:0a:4e:6c:c0:ca:db:49:6d:29:bc:e4:
28:a8:10:3b:99:22:be:84:7d:c6:58:e0:16:d2:5f:
72:8c:53:83:b7:a3:1b:db:6b:77:ea:18:0a:32:58:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:75:DA:3C:A3:36:FE:3D:1D:1D:23:72:FB:1C:EB:61:B4:0D:6B:F9
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/5HXaPKM2_j0dHSNy-xzrYbQNa_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.136.0/21
91.201.212.0/23
185.132.128.0/22
185.188.52.0/22
IPv6:
2001:67c:3fc::/48
2a06:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
d5:4b:33:16:19:c5:c2:74:0e:8d:df:8a:f3:31:d7:29:36:b3:
ab:51:02:a0:6a:ec:19:be:cc:d2:8f:d6:2e:f4:51:91:74:2e:
a2:c9:24:4c:14:5b:b8:46:8a:c2:68:18:4d:05:76:aa:1e:71:
9d:22:ce:f6:43:b3:9d:b1:7f:83:c7:2a:b4:39:45:b5:2d:c7:
ed:cd:9a:d5:c4:13:9d:a6:89:22:cb:c6:94:7c:18:4e:1f:dd:
86:de:a3:9f:a3:18:4d:86:73:cf:78:5c:8b:18:21:d8:b3:da:
e3:25:f5:53:8e:32:1c:84:9e:12:13:fd:ad:59:35:10:0d:73:
f9:e2:38:72:fa:4b:7c:c5:43:df:8c:ef:b0:54:17:a1:50:a5:
5c:5e:25:2e:a6:44:13:bb:bc:ca:d9:39:e5:2c:14:96:c7:f4:
b6:c5:b0:3f:c7:06:d4:e3:c0:93:4c:1e:a6:3e:4d:64:95:65:
ed:29:14:44:2a:65:f1:ab:c3:0e:48:1c:53:c9:c6:ac:ce:db:
b7:ec:6a:26:c6:be:3b:97:0a:9f:01:37:42:21:0c:6f:7f:1e:
67:4e:c6:2a:c6:ef:e6:84:e6:73:d7:6a:f2:ff:a3:fd:0d:e2:
ae:ce:b8:11:8e:5e:54:48:3b:d9:a0:20:5e:f7:e3:02:51:fb:
b1:6c:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:20 2025 by rpki-client