Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa
File: rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa (raw, json)
Hash identifier: IPdBuWhuBJNo3ThX3cWTYn6XuZdtQY1uz610IBEtgfk=
Subject key identifier: AD:99:7B:8A:5E:75:42:2E:06:C7:F9:E6:BC:42:60:FB:74:CB:18:A9
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 01942444845F57DED3ABD9070220212A3FDA
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51110
IP address blocks: 5.102.72.0/24 maxlen: 24
5.102.73.0/24 maxlen: 24
5.102.74.0/24 maxlen: 24
5.102.75.0/24 maxlen: 24
5.102.76.0/24 maxlen: 24
5.102.77.0/24 maxlen: 24
5.102.78.0/24 maxlen: 24
5.102.79.0/24 maxlen: 24
94.124.152.0/24 maxlen: 24
94.124.153.0/24 maxlen: 24
94.124.154.0/24 maxlen: 24
94.124.155.0/24 maxlen: 24
94.124.156.0/24 maxlen: 24
94.124.157.0/24 maxlen: 24
94.124.158.0/24 maxlen: 24
94.124.159.0/24 maxlen: 24
185.91.232.0/24 maxlen: 24
185.91.233.0/24 maxlen: 24
185.91.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:84:5f:57:de:d3:ab:d9:07:02:20:21:2a:3f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad997b8a5e75422e06c7f9e6bc4260fb74cb18a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:b9:59:bc:7d:d3:8b:f2:2d:6f:06:22:6d:
56:24:17:f1:27:18:81:0f:0c:b0:04:00:45:b5:7d:
f5:31:76:f8:d2:f6:bd:17:36:b5:9a:11:fb:4d:f0:
4a:9f:b9:31:a3:3e:e5:0f:82:98:79:e9:65:45:8a:
d5:8d:b9:23:10:97:9f:04:59:a6:11:07:0c:04:41:
aa:33:5a:4b:93:50:a3:e0:a8:1a:c6:32:ff:1f:c5:
bc:66:a5:c8:71:d4:ff:cf:8f:77:af:ad:6c:b7:02:
b5:cb:8a:93:8a:1a:9f:7f:7a:bb:db:60:91:59:2c:
d1:36:2f:aa:c8:97:78:83:ad:d3:7c:81:64:27:56:
98:a8:79:c3:7e:35:90:2a:4c:0e:69:e8:0c:8f:53:
49:8f:08:e3:b2:43:9d:b3:83:45:c7:06:08:94:06:
3e:b3:61:1c:a8:ba:05:96:2d:19:f2:65:eb:80:90:
5d:fc:0e:b7:ce:03:91:35:9f:72:f8:a1:e2:ac:65:
08:b7:c0:d4:f7:30:4d:14:07:1e:1d:f9:94:ce:fc:
f7:27:e7:24:d5:74:76:24:4c:69:96:17:d9:a6:85:
83:cb:fa:eb:87:fc:4b:37:c4:d4:63:ff:76:49:04:
49:36:0c:78:ff:01:c6:64:b2:5a:ee:c9:98:34:b4:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:99:7B:8A:5E:75:42:2E:06:C7:F9:E6:BC:42:60:FB:74:CB:18:A9
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.72.0/21
94.124.152.0/21
185.91.232.0-185.91.234.255
Signature Algorithm: sha256WithRSAEncryption
92:1d:26:6e:d6:d4:47:d1:c1:12:16:80:61:ba:69:8d:e0:6c:
e3:4a:9c:38:95:cd:09:1f:a0:59:e7:01:c5:a8:3e:13:67:35:
f9:42:b6:6e:74:c1:d2:35:8f:91:86:4c:c8:02:d4:4e:80:e5:
7c:05:7e:1c:68:84:3c:5f:28:1a:00:51:34:96:c3:c9:86:c7:
dd:d1:a6:17:b6:9d:72:20:fd:8a:29:c3:f2:31:1a:4a:62:8a:
75:5f:d1:4f:4c:c4:92:7a:90:f5:a3:a7:08:ce:98:a6:d7:83:
01:0b:6a:01:54:ce:2f:db:61:90:43:01:23:a8:dc:eb:9a:cb:
eb:0a:97:cc:af:77:ec:48:32:89:1d:1b:90:6e:e9:d0:c4:71:
2d:35:0b:44:9f:2d:50:ad:15:ed:ca:5a:7a:9e:3f:c8:4a:e9:
17:f3:cb:8f:04:0c:ee:48:1f:b7:a8:01:c8:43:8a:a7:6a:e0:
c6:fd:fd:7f:e2:d1:ae:2a:e2:fa:08:9f:2c:3e:5c:1b:8c:51:
54:7d:77:ca:ba:da:21:24:d6:5f:24:8c:e0:ae:a8:e6:74:00:
70:fc:d1:f3:f7:cc:86:97:62:3f:42:e8:40:30:72:00:24:a9:
5e:2e:e3:d9:77:90:16:c8:65:78:d3:63:fa:30:05:1a:7f:fb:
0a:1a:e3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:18 2025 by rpki-client