Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5SjFv0lmjMcmzetQ2FrCPJxxWcg.roa
File: 5SjFv0lmjMcmzetQ2FrCPJxxWcg.roa (raw, json)
Hash identifier: 9kz9FMkfB6hjlRtRa2ZK6knhypvkKRM8WPtGBMeuAds=
Subject key identifier: E5:28:C5:BF:49:66:8C:C7:26:CD:EB:50:D8:5A:C2:3C:9C:71:59:C8
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A43CE32
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5SjFv0lmjMcmzetQ2FrCPJxxWcg.roa
Signing time: Mon 11 Apr 2022 07:46:14 +0000
ROA not before: Mon 11 Apr 2022 07:46:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.117.215.0/24 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.167.0/24 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172215858 (0xa43ce32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 11 07:46:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e528c5bf49668cc726cdeb50d85ac23c9c7159c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:8c:d8:45:0c:89:04:9c:d9:fb:e3:0e:6d:
bd:a3:a1:d4:5a:65:18:93:0a:3b:51:5c:a4:ad:c5:
63:7b:2a:e7:9f:8e:a1:bf:08:3a:a5:78:a7:d3:34:
db:dc:85:70:40:39:28:8f:f6:28:d3:96:8d:7c:f7:
4c:d4:84:18:d1:a9:6c:6a:10:a6:ed:da:61:09:68:
21:1e:1d:f8:5b:93:67:5a:3b:b9:05:3a:17:07:85:
6e:2f:a1:2a:bc:42:bd:3a:31:77:38:dd:fa:69:f8:
71:a0:b2:af:7a:92:98:f4:66:1d:f2:df:44:52:3f:
0d:69:cd:e5:88:73:d6:6f:7e:21:b7:cc:eb:5c:06:
00:a3:88:4a:68:55:33:d2:e0:25:45:65:cf:ca:10:
23:10:c2:4a:87:a8:ec:6e:8b:4a:fe:1a:83:d9:21:
d4:df:ec:c4:49:50:a6:29:9f:c0:b4:7a:b5:12:42:
a3:8a:0a:f1:e7:2c:73:f4:7f:d0:fc:72:90:d9:32:
34:dc:d6:d8:ea:54:66:4f:67:9a:57:9c:80:2c:09:
9a:e2:3a:9b:ec:f0:34:1d:c0:19:ea:82:7f:9d:56:
78:25:22:46:cf:9a:07:fd:81:e0:40:bb:bf:b6:42:
7e:c2:7f:e9:15:b5:15:20:04:b2:2d:dc:f4:03:ff:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:C5:BF:49:66:8C:C7:26:CD:EB:50:D8:5A:C2:3C:9C:71:59:C8
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5SjFv0lmjMcmzetQ2FrCPJxxWcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.182.0/23
86.38.202.0/23
89.116.54.0/24
89.116.70.0/24
89.116.99.0/24
89.116.103.0/24
89.116.112.0/23
89.116.115.0/24
89.116.141.0/24
89.116.156.0/24
89.116.171.0/24
89.116.202.0/23
89.116.208.0/23
89.116.220.0/23
89.116.223.0/24
89.116.233.0/24
89.116.253.0/24
89.116.255.0/24
89.117.130.0/24
89.117.167.0/24
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
49:28:80:e7:0d:cf:96:47:ec:9e:d6:55:c8:eb:14:7a:53:6f:
55:6c:5a:73:4c:17:a0:69:d1:c3:dd:6e:7d:a7:ff:cb:ee:0e:
77:66:a2:3f:22:3e:42:cf:01:a6:a2:af:d3:50:a7:7a:f5:2b:
62:84:f4:0e:54:9b:a3:af:5a:81:e8:d1:fa:9b:cd:78:ca:2d:
27:6b:a0:36:c5:86:65:15:72:76:5e:94:d5:37:07:4e:fc:99:
e8:0e:05:b7:13:cb:2d:92:94:7f:c1:03:ee:61:a7:cc:8a:0e:
0c:52:9e:80:88:72:bc:fc:22:de:97:af:79:93:52:22:a2:4e:
99:37:3c:c3:3c:7a:be:cc:0d:b6:81:94:bf:34:3f:be:4f:b3:
46:04:85:9a:29:62:79:55:f3:fb:f6:62:30:fb:79:b0:b3:60:
80:ee:fd:b4:f2:7e:bc:88:d1:f6:ff:81:be:c4:2c:22:34:ea:
ac:8d:77:27:af:ab:46:f8:89:72:51:75:d9:6f:3b:9f:ba:72:
2e:d2:1c:74:f5:f3:60:96:d3:5b:26:04:8c:5c:08:b1:ab:c6:
f1:df:f3:3c:88:47:af:26:4b:0d:03:a5:20:1a:33:ed:c6:25:
1f:9d:53:db:8e:11:9b:91:19:a4:d2:0e:ff:1d:b9:8e:3b:28:
44:16:70:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:25 2025 by rpki-client