Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Jlr9qtGm_2se895OUUUpHM6HWKw.roa
File: Jlr9qtGm_2se895OUUUpHM6HWKw.roa (raw, json)
Hash identifier: Evu2SpgoHNmdyda/Y+fuhWaRvXB1YBBvHE6n5TxZyek=
Subject key identifier: 26:5A:FD:AA:D1:A6:FF:6B:1E:F3:DE:4E:51:45:29:1C:CE:87:58:AC
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019518675FA1033FED89211905E8C5A788F2
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Jlr9qtGm_2se895OUUUpHM6HWKw.roa
Signing time: Tue 18 Feb 2025 09:33:02 +0000
ROA not before: Tue 18 Feb 2025 09:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214790
IP address blocks: 5.181.201.0/24 maxlen: 24
45.12.28.0/24 maxlen: 24
45.155.120.0/24 maxlen: 24
89.22.192.0/23 maxlen: 24
185.36.140.0/23 maxlen: 24
185.36.142.0/23 maxlen: 24
185.225.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:67:5f:a1:03:3f:ed:89:21:19:05:e8:c5:a7:88:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Feb 18 09:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=265afdaad1a6ff6b1ef3de4e5145291cce8758ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:81:a5:8f:e6:8f:32:42:f8:a7:2c:e5:92:
61:4e:57:cf:28:7a:74:f9:d3:eb:83:d1:14:80:ed:
35:37:79:d7:82:3b:c2:d9:94:33:7a:93:23:5d:57:
0a:14:00:77:a3:01:78:3d:74:b5:fd:d7:b5:b9:32:
ca:cd:d0:03:64:f2:f8:12:75:4c:4b:0b:e6:82:1d:
ee:92:71:36:c3:78:7c:bd:19:9a:64:a3:00:f9:3d:
35:26:9f:35:1a:45:03:c1:c3:91:11:1f:0e:e9:e4:
06:a5:d1:d6:27:a6:c4:3d:d0:84:a3:83:7f:a5:7a:
24:e7:1c:2a:f4:7a:af:71:da:1b:4f:cb:43:6c:9d:
15:b0:59:da:50:e2:3f:c9:b9:7d:9f:96:78:90:d7:
0c:08:f2:d3:cb:1b:3b:b6:d4:81:3e:05:d0:8a:d3:
ae:4d:51:6d:1c:e6:d5:93:47:2b:96:4e:32:dc:79:
96:ab:49:08:fe:a4:13:31:5f:6f:b3:06:78:8c:91:
64:33:7f:c7:e1:c4:43:20:b5:30:f3:ab:f8:dd:33:
94:5e:a4:cc:75:9c:da:34:62:5f:de:aa:25:14:64:
96:b2:b7:8a:84:18:c4:eb:7f:eb:ba:46:c4:27:cb:
9d:1b:b3:7a:d7:f8:fa:15:0c:d3:57:a2:f4:23:3a:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5A:FD:AA:D1:A6:FF:6B:1E:F3:DE:4E:51:45:29:1C:CE:87:58:AC
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Jlr9qtGm_2se895OUUUpHM6HWKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.201.0/24
45.12.28.0/24
45.155.120.0/24
89.22.192.0/23
185.36.140.0/22
185.225.205.0/24
Signature Algorithm: sha256WithRSAEncryption
96:64:4e:cf:70:eb:38:6a:51:92:64:fa:7f:93:b6:e7:f9:25:
1e:73:9f:73:16:de:40:a9:d1:61:be:9e:68:b0:26:3e:00:93:
ea:a7:40:66:6d:e1:e0:1e:60:c2:10:43:54:8d:6f:e3:91:c8:
18:4c:62:f0:2d:cb:24:a9:22:64:01:47:d0:63:89:b1:46:0a:
8c:c8:17:75:62:57:44:bf:d8:52:49:d7:16:5f:62:a8:a6:70:
9b:a0:2c:9f:b6:8a:e3:c1:45:38:d5:b2:dc:fd:8b:fb:16:8b:
bb:8e:f3:3a:57:92:9b:f0:59:3d:ac:35:b1:42:f6:8f:f0:73:
71:6d:bf:8d:cb:f3:2f:2d:e6:5c:52:4f:85:3d:8c:5f:f7:e3:
73:91:87:a3:25:48:c3:96:24:c7:4a:7f:29:3e:a2:77:e5:ab:
38:d3:57:4d:47:a8:78:bd:01:56:20:58:4a:cb:62:fb:21:07:
b5:d3:a1:35:8c:b3:0f:dc:b2:09:a6:f9:12:5f:e4:45:f4:e8:
f1:5c:06:c2:f9:20:c1:16:c2:58:d7:18:65:92:66:d0:d2:d0:
8e:8a:e4:30:6f:52:52:8e:83:7e:b6:34:1d:a7:06:d4:fe:d2:
85:87:8e:e2:58:42:91:75:13:44:32:fb:5c:3d:0f:49:e9:21:
a5:d7:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:43 2025 by rpki-client