Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa
File: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (raw, json)
Hash identifier: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=
Subject key identifier: FA:3D:7D:2E:6F:FC:2E:43:90:EE:C0:F8:A0:31:CB:29:84:8F:5A:27
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 019424B3C1BF3AB3F4FF885AFDBCAED8B866
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57935
IP address blocks: 5.61.27.0/24 maxlen: 24
92.119.56.0/24 maxlen: 24
92.119.59.0/24 maxlen: 24
185.73.113.0/24 maxlen: 24
185.73.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c1:bf:3a:b3:f4:ff:88:5a:fd:bc:ae:d8:b8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa3d7d2e6ffc2e4390eec0f8a031cb29848f5a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:87:90:59:4a:f1:70:1f:b9:a7:a1:a1:18:42:
2f:ec:30:2d:91:5c:e7:d5:6e:80:1e:17:5f:85:11:
dd:a1:0f:33:0d:bb:1a:77:e8:b1:79:e0:fb:31:9f:
b6:96:dd:97:bc:7f:bc:41:c3:27:c3:8d:ae:d0:da:
a6:d6:98:70:ba:1c:44:b0:cc:0a:fb:15:60:ad:6e:
5b:03:17:d4:75:e5:5d:a0:89:0a:83:a8:06:be:63:
b1:fd:b6:0c:82:35:9f:40:04:7a:32:ca:bb:2c:60:
b8:42:ce:d9:66:ae:b6:bd:64:75:7d:b9:6e:90:db:
ac:6c:64:94:c1:58:71:3f:60:f1:38:8c:40:4b:9e:
4e:f4:fb:f6:33:79:e1:24:de:fa:d8:61:39:cc:88:
f4:05:5c:d5:f4:dc:b1:cf:53:d5:d0:35:20:aa:94:
48:95:6f:77:1d:6c:f8:1e:6d:4a:6b:a4:38:bf:c5:
69:da:23:78:3d:5c:e6:35:5e:09:32:19:96:3b:6a:
97:49:40:15:87:af:42:b1:fa:5b:cb:54:85:59:3b:
df:c6:6d:e6:ea:f4:e7:22:d7:1a:ff:0a:7e:9b:1e:
e3:5c:61:7b:3e:4e:03:56:e3:5d:e2:a6:c6:3a:b3:
35:50:07:56:80:22:ce:04:d5:88:fb:ad:9d:b2:1a:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3D:7D:2E:6F:FC:2E:43:90:EE:C0:F8:A0:31:CB:29:84:8F:5A:27
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.27.0/24
92.119.56.0/24
92.119.59.0/24
185.73.113.0/24
185.73.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c9:76:1a:fc:9d:72:bb:ed:f6:4a:26:54:29:5e:fa:b3:95:
70:50:4b:b3:10:0a:f7:43:5d:d8:b5:04:65:81:2c:d5:84:66:
4a:28:d9:7d:bd:44:9d:c6:5a:60:f8:79:af:e5:90:12:54:c2:
fd:00:f1:cd:6e:e6:00:93:45:b8:70:34:ff:a1:17:bb:9d:ed:
6a:e7:eb:3b:8f:fb:39:91:d5:e8:80:48:7a:10:16:f0:82:2d:
23:d9:dd:9f:3e:1e:04:89:7a:dd:3c:a3:b6:22:7d:49:de:8b:
ca:29:82:da:75:da:ae:17:5f:38:dd:40:93:61:33:2f:87:15:
f7:61:e1:93:e9:5e:ec:7a:08:b6:c8:36:21:03:9f:ae:70:3d:
b3:14:70:19:79:73:54:67:b6:06:30:be:b7:06:15:7e:ba:62:
c5:ca:bb:fe:51:52:5b:f3:3d:52:15:87:78:38:21:49:23:c5:
41:c1:f3:2a:92:a4:2a:d6:dd:d3:70:d8:e9:ad:92:81:77:3a:
f0:f8:8f:04:87:86:0b:b1:99:54:5f:24:5d:b0:15:f2:cf:3d:
c4:a6:10:c3:89:9b:de:6c:46:96:4e:d8:a4:a6:f3:86:33:ea:
a5:86:fc:f0:c9:10:1f:ba:c9:45:16:e4:ff:9c:c0:10:e4:76:
18:17:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:22 2025 by rpki-client