Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5oFL76T-NYE5TId86yG9lgCDfsg.roa
File: 5oFL76T-NYE5TId86yG9lgCDfsg.roa (raw, json)
Hash identifier: cvDouLRTKJi/emsHv855F8kf34RCZ7N/rQrsU2DjhmU=
Subject key identifier: E6:81:4B:EF:A4:FE:35:81:39:4C:87:7C:EB:21:BD:96:00:83:7E:C8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01953CC9F36369F0E2A83B4007E889F0B83B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5oFL76T-NYE5TId86yG9lgCDfsg.roa
Signing time: Tue 25 Feb 2025 11:07:02 +0000
ROA not before: Tue 25 Feb 2025 11:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.90.19.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.218.22.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:c9:f3:63:69:f0:e2:a8:3b:40:07:e8:89:f0:b8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 25 11:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6814befa4fe3581394c877ceb21bd9600837ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:03:5a:f6:f7:01:ba:64:8f:ab:dd:2f:ef:
b0:e1:7c:16:26:a4:c9:97:1d:15:e9:be:13:76:f3:
9b:60:73:36:bf:2f:70:24:f7:c0:3e:05:2c:23:76:
76:39:37:16:dc:57:a1:53:00:88:3f:44:6c:03:f6:
9e:c2:ee:b4:39:39:75:3c:d9:0e:2e:2b:13:f8:e7:
2e:ff:fa:1f:b5:cb:79:38:9b:37:d4:ce:d2:3d:78:
a4:04:a2:71:ce:11:7d:93:2d:dc:a4:a6:de:a1:0e:
b4:7a:ee:6a:c8:75:50:e2:74:6b:f9:e1:2a:b2:da:
cf:7f:36:2a:d2:ef:35:9b:a9:12:cc:e1:27:31:aa:
82:72:99:f3:12:17:2e:33:eb:1d:35:7a:23:9f:e8:
45:8d:06:bc:83:82:0f:9d:cb:eb:20:77:18:97:66:
5e:cb:6f:96:95:15:fc:c6:8a:2d:23:d9:8d:04:71:
56:7a:ba:01:c6:1f:01:e8:88:12:4a:c8:fc:8c:81:
94:fb:fe:93:9e:25:af:90:7c:00:66:3e:81:21:99:
26:2c:5e:df:9c:51:a6:13:1e:63:bb:33:eb:ee:08:
81:13:64:49:9c:b9:02:41:27:29:18:81:75:95:30:
e9:0a:21:9e:38:21:79:0b:c2:47:16:34:b6:3a:32:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:81:4B:EF:A4:FE:35:81:39:4C:87:7C:EB:21:BD:96:00:83:7E:C8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5oFL76T-NYE5TId86yG9lgCDfsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.36.204.0/24
185.206.248.0/24
185.218.22.0/24
185.226.107.0/24
185.239.140.0/24
185.240.120.0/23
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bc:32:20:64:4d:1d:ce:3f:c1:86:44:d7:ef:4d:96:fd:85:
be:75:b2:bd:a1:6d:14:5a:21:b3:df:e3:00:fe:05:da:21:3d:
c2:fc:ac:61:ef:7f:94:3f:95:53:3a:62:05:a9:b8:c6:c6:1a:
00:58:ee:1a:1a:90:a9:2d:72:d0:34:10:95:06:c6:c6:55:f3:
f5:15:1c:93:06:2c:f0:ff:78:13:70:38:5b:27:ba:dd:be:46:
83:3c:1f:d2:68:5a:75:04:f7:4b:bc:eb:66:9a:d3:9e:a4:f4:
84:3b:2d:e3:15:56:98:cf:43:1f:43:b0:a5:f0:ec:da:1a:96:
73:5b:ad:26:f1:63:3c:cf:ba:25:90:6d:13:6f:77:87:29:a8:
fd:31:64:76:ad:c2:43:b0:a5:80:87:1a:95:90:e1:b2:c4:e2:
76:60:48:42:e1:0c:70:c8:dd:5d:62:04:b1:e4:57:dd:a3:d8:
7d:b8:50:35:60:a8:32:d3:cb:1c:bb:b5:59:e2:7d:0e:75:93:
00:35:f4:4e:98:c3:a0:14:bc:43:88:60:f8:10:65:54:4a:5c:
ee:fe:24:b5:01:d2:ff:1c:d6:7f:57:3e:71:92:16:96:d1:99:
e2:aa:69:fc:40:93:4f:6b:03:1c:f4:e8:d7:d7:27:54:38:63:
d9:c1:a4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:54:25 2025 by rpki-client