Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/dM8ue4QsbABqpycB_HrMjLWl-Ek.roa
File: dM8ue4QsbABqpycB_HrMjLWl-Ek.roa (raw, json)
Hash identifier: 6OKHBYa4aX8P3AT8g1+RNo8KpQbjldC66CV5IU1+Dk8=
Subject key identifier: 74:CF:2E:7B:84:2C:6C:00:6A:A7:27:01:FC:7A:CC:8C:B5:A5:F8:49
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 019420D5C53D7206E79F6F376890BEF32863
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/dM8ue4QsbABqpycB_HrMjLWl-Ek.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 5.249.160.0/24 maxlen: 24
5.249.161.0/24 maxlen: 24
5.249.162.0/24 maxlen: 24
5.249.163.0/24 maxlen: 24
5.249.164.0/24 maxlen: 24
45.146.252.0/24 maxlen: 24
45.146.253.0/24 maxlen: 24
45.146.254.0/24 maxlen: 24
45.146.255.0/24 maxlen: 24
88.214.56.0/24 maxlen: 24
88.214.57.0/24 maxlen: 24
88.214.58.0/24 maxlen: 24
92.42.44.0/22 maxlen: 22
92.42.44.0/24 maxlen: 24
92.42.45.0/24 maxlen: 24
92.42.46.0/24 maxlen: 24
92.42.47.0/24 maxlen: 24
147.189.168.0/24 maxlen: 24
147.189.169.0/24 maxlen: 24
147.189.170.0/24 maxlen: 24
147.189.171.0/24 maxlen: 24
147.189.172.0/24 maxlen: 24
147.189.173.0/24 maxlen: 24
147.189.174.0/24 maxlen: 24
147.189.175.0/24 maxlen: 24
185.223.28.0/24 maxlen: 24
185.223.29.0/24 maxlen: 24
185.223.30.0/24 maxlen: 24
185.223.31.0/24 maxlen: 24
185.239.236.0/24 maxlen: 24
185.239.237.0/24 maxlen: 24
185.239.238.0/24 maxlen: 24
185.239.239.0/24 maxlen: 24
185.249.197.0/24 maxlen: 24
185.249.198.0/24 maxlen: 24
185.249.199.0/24 maxlen: 24
193.23.126.0/24 maxlen: 24
193.23.127.0/24 maxlen: 24
193.23.160.0/24 maxlen: 24
193.23.161.0/24 maxlen: 24
193.203.238.0/24 maxlen: 24
194.156.88.0/24 maxlen: 24
194.156.90.0/24 maxlen: 24
194.156.91.0/24 maxlen: 24
2a0c:3580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c5:3d:72:06:e7:9f:6f:37:68:90:be:f3:28:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74cf2e7b842c6c006aa72701fc7acc8cb5a5f849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:ea:7b:4a:6c:1e:a5:f6:7b:e4:2a:7c:98:
ee:33:49:cd:82:0b:83:27:01:ad:06:d2:c0:d8:47:
77:25:13:aa:16:a3:eb:3a:fe:82:95:bd:88:0a:2e:
24:cf:e0:8f:e5:6d:6e:83:cc:8d:73:f5:10:a9:11:
4e:30:c6:b0:f2:e2:6a:c3:78:00:94:74:88:f7:52:
81:9b:94:a0:ac:85:55:ba:bb:a0:d9:33:07:66:fb:
4f:7a:c8:f3:a7:fc:d0:97:3b:31:e0:6f:4c:77:5c:
b3:d1:eb:7a:6a:51:65:6a:23:2d:dc:70:bf:f6:b9:
1d:06:38:90:bf:cb:de:e8:40:90:b3:09:5f:36:c5:
c8:b9:e3:de:65:89:75:ad:bf:e4:2e:87:3d:ef:04:
5f:4d:5f:64:b3:35:1b:25:48:ed:96:42:55:14:d4:
82:57:b3:95:9b:8e:64:f5:a0:7c:96:79:23:b6:a7:
9d:9d:5d:9d:95:3f:b5:0c:da:29:97:e9:1a:63:6f:
da:a9:9c:85:45:da:77:1c:99:2e:cb:95:d2:75:5d:
90:aa:e3:a7:1a:aa:92:ce:6b:c2:68:f0:18:25:e3:
93:5e:50:c6:e0:80:0c:5e:a2:c0:34:ab:4c:56:8b:
13:f7:ea:18:76:80:65:86:5f:b6:25:8b:ba:07:40:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CF:2E:7B:84:2C:6C:00:6A:A7:27:01:FC:7A:CC:8C:B5:A5:F8:49
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/dM8ue4QsbABqpycB_HrMjLWl-Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.160.0-5.249.164.255
45.146.252.0/22
88.214.56.0-88.214.58.255
92.42.44.0/22
147.189.168.0/21
185.223.28.0/22
185.239.236.0/22
185.249.197.0-185.249.199.255
193.23.126.0/23
193.23.160.0/23
193.203.238.0/24
194.156.88.0/24
194.156.90.0/23
IPv6:
2a0c:3580::/29
Signature Algorithm: sha256WithRSAEncryption
1e:d1:a7:02:06:16:a8:d6:9a:af:15:37:38:83:d4:79:c1:f0:
4c:6d:82:58:6c:e2:10:50:3a:6a:57:0d:af:12:7e:78:d8:e0:
83:62:76:3c:83:5a:fd:68:e9:6f:ff:fe:93:cd:0c:f4:e9:16:
31:59:0f:1f:a1:a3:9f:0a:ea:76:00:de:43:71:d3:c3:74:20:
d7:69:b1:e9:3c:d8:1a:cf:3b:84:85:d7:9c:1d:57:8b:e5:95:
06:33:f9:fd:fc:be:24:29:95:63:43:d6:99:d0:de:f7:e6:f6:
29:a6:d9:ae:7a:9a:0c:90:ad:2d:35:54:e6:25:68:c9:4d:45:
f4:72:44:c3:18:13:c5:f4:cc:f9:e0:03:46:c6:e4:b8:f3:1c:
b1:de:d4:65:e8:11:5d:c4:f4:17:66:81:34:49:19:17:49:a4:
12:ee:8e:b9:f8:44:d4:7a:ef:17:71:e3:3b:4a:38:d1:7b:a0:
1d:27:c2:2b:75:30:52:29:94:89:5c:07:55:a7:98:62:ff:c3:
38:f5:74:19:25:73:a1:d9:d0:5d:1a:e5:0c:fb:b8:39:e4:43:
7c:53:93:86:b3:a7:c5:c7:f7:bb:8f:34:7a:45:09:43:40:c9:
82:9d:90:6b:a3:b8:24:79:c5:54:1b:7a:60:74:8e:40:92:c7:
69:95:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:56 2025 by rpki-client