Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/slG7etJhHMxEF_RaKXpH3iT7Jqo.roa
File: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (raw, json)
Hash identifier: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=
Subject key identifier: B2:51:BB:7A:D2:61:1C:CC:44:17:F4:5A:29:7A:47:DE:24:FB:26:AA
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01948974E39880F68F9F0758EAA424F4AF74
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/slG7etJhHMxEF_RaKXpH3iT7Jqo.roa
Signing time: Tue 21 Jan 2025 15:22:06 +0000
ROA not before: Tue 21 Jan 2025 15:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 5.183.94.0/24 maxlen: 24
45.82.223.0/24 maxlen: 24
85.208.32.0/23 maxlen: 24
85.208.34.0/23 maxlen: 24
185.244.8.0/23 maxlen: 24
185.244.11.0/24 maxlen: 24
193.42.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:74:e3:98:80:f6:8f:9f:07:58:ea:a4:24:f4:af:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 21 15:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b251bb7ad2611ccc4417f45a297a47de24fb26aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:fa:ea:71:70:f3:63:57:76:9c:3b:6d:fa:
fa:d9:cd:6e:7a:09:f4:de:81:fc:2b:bb:0d:37:5c:
f9:e6:c5:d8:a4:ea:4d:74:a5:15:94:15:d7:bd:d7:
f6:19:66:9f:95:1d:dc:7e:92:e4:b1:03:03:c3:e1:
36:86:12:d1:bb:e7:c8:4b:b2:4a:08:6f:78:97:fe:
92:bc:59:91:d1:be:e6:82:e0:3a:fb:2a:a0:8c:61:
db:2b:40:dd:ef:6a:bc:fa:2a:ba:46:f7:0a:5a:ca:
4c:d9:88:6e:3b:ca:e7:61:04:f9:ee:d2:5c:46:35:
b8:0e:ec:e1:d5:a5:b3:28:12:3b:c6:a4:39:69:9e:
ef:14:1d:99:0b:21:2c:5d:d2:ae:d5:50:96:08:5a:
e5:e8:16:f8:ea:b1:ed:26:1b:6c:23:9c:08:33:73:
e6:82:d6:82:d4:6e:af:0f:27:14:68:41:7c:55:c5:
67:47:ac:64:0d:31:b8:62:c6:2e:73:25:7b:64:8e:
12:2e:89:7c:99:a7:7e:f6:15:a0:5b:fc:9f:33:eb:
66:77:a8:4b:9e:10:78:86:94:4d:78:06:81:d4:ce:
8b:f2:60:a0:fa:5d:1a:08:89:cd:15:58:7a:1e:58:
37:11:91:c4:66:42:48:19:6b:ad:e9:bf:c0:16:6c:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:BB:7A:D2:61:1C:CC:44:17:F4:5A:29:7A:47:DE:24:FB:26:AA
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/slG7etJhHMxEF_RaKXpH3iT7Jqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.94.0/24
45.82.223.0/24
85.208.32.0/22
185.244.8.0/23
185.244.11.0/24
193.42.226.0/23
Signature Algorithm: sha256WithRSAEncryption
09:ef:43:00:24:0e:e3:a2:7e:53:27:01:80:54:8c:f3:17:42:
ce:55:49:b6:0a:13:2b:a1:b6:ac:5c:a2:42:97:8a:99:e0:61:
6f:82:53:8e:3a:b6:66:ab:fb:74:87:38:de:39:ec:4e:8b:92:
3d:91:a6:c4:87:f7:bd:85:a6:4d:dc:7f:e6:5c:d5:ea:97:f2:
83:ea:2f:97:97:96:d3:c7:64:7a:ce:61:6a:23:29:d6:65:78:
39:fe:6b:3d:c8:17:0f:47:c4:8a:2c:18:bc:17:be:db:dd:2d:
c1:59:c6:5e:06:27:79:5b:11:93:68:c9:59:b0:5b:0b:87:a0:
db:da:33:3f:02:3a:ee:b1:ec:66:3d:04:d6:c3:2b:83:db:99:
57:0d:25:5f:83:b0:98:56:6a:1e:e3:d8:72:e2:04:76:c4:88:
e1:2d:71:73:38:76:ff:bf:a7:bf:42:db:67:06:18:6b:28:66:
c4:3a:a9:61:22:9a:18:36:d4:e2:38:15:c8:e6:cc:39:84:dd:
54:01:e1:91:74:51:72:07:8e:79:b8:e7:31:c7:c6:4a:f2:58:
68:48:13:05:08:93:6b:be:b6:0b:87:16:e7:02:e7:8d:c6:6f:
e4:07:6b:50:ae:5f:c8:fa:c3:ef:c6:0a:f6:a4:46:74:89:49:
d0:14:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:37 2025 by rpki-client