Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-FfxVtAowi9iuiCmbQl1jBQ4CWU.roa
File: 1-FfxVtAowi9iuiCmbQl1jBQ4CWU.roa (raw, json)
Hash identifier: l7PzDT3DAcHK54IAc652u5pFy5Y2LvnFkBN6cQpc+7k=
Subject key identifier: F8:57:F1:56:D0:28:C2:2F:62:BA:20:A6:6D:09:75:8C:14:38:09:65
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01927B4943C03549DAD889C25BFA20E829FD
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-FfxVtAowi9iuiCmbQl1jBQ4CWU.roa
Signing time: Fri 11 Oct 2024 11:14:11 +0000
ROA not before: Fri 11 Oct 2024 11:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.9.0/24 maxlen: 24
5.178.10.0/24 maxlen: 24
5.178.11.0/24 maxlen: 24
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.14.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
62.217.128.0/19 maxlen: 19
62.217.128.0/24 maxlen: 24
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.132.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.135.0/24 maxlen: 24
62.217.136.0/24 maxlen: 24
62.217.137.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.139.0/24 maxlen: 24
62.217.140.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.143.0/24 maxlen: 24
62.217.144.0/24 maxlen: 24
62.217.145.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.150.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.152.0/24 maxlen: 24
62.217.153.0/24 maxlen: 24
62.217.154.0/24 maxlen: 24
62.217.155.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
109.205.208.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:49:43:c0:35:49:da:d8:89:c2:5b:fa:20:e8:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 11 11:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f857f156d028c22f62ba20a66d09758c14380965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:6f:d9:12:9a:e8:f0:be:5c:8b:cb:d4:f4:
bb:56:5e:bd:14:1c:a2:1d:9d:28:bf:cf:f6:c5:f4:
0f:f8:ea:4f:3e:b3:97:16:40:34:26:c1:17:7e:26:
d8:e4:0d:82:32:80:47:34:8f:53:24:3d:53:ba:d4:
ed:31:6d:19:91:52:ee:8e:1b:1f:f7:3d:14:b4:d4:
86:a8:68:d0:e8:45:b1:32:6f:c6:e8:9b:8d:e4:f9:
66:0e:cf:0f:4a:08:cf:70:d3:9f:d0:5b:85:7d:b3:
5b:c4:9c:b9:75:f7:f5:49:b8:a9:d3:76:aa:72:89:
a2:d1:9a:64:4c:78:0c:a0:33:da:a5:a6:3b:e9:97:
ae:c6:46:e9:40:ef:86:9b:b3:da:9c:2e:7e:d3:1e:
fc:47:d9:ef:01:52:80:c9:0d:74:0b:e4:94:30:0b:
0a:1a:9d:2c:40:3f:98:96:b0:29:35:f9:e2:b5:5e:
84:e0:f4:82:82:06:11:1b:df:98:47:1c:26:5a:da:
45:6f:8d:60:2b:ad:f7:eb:c0:5e:31:ac:d9:c8:84:
4b:26:50:aa:7a:1b:60:0c:f5:75:fe:7f:81:93:4a:
9c:36:52:b2:0c:5e:5c:01:79:70:3d:1d:ca:c1:78:
65:24:2e:51:b4:51:a8:5b:e3:5c:40:0c:4a:a5:6b:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:57:F1:56:D0:28:C2:2F:62:BA:20:A6:6D:09:75:8C:14:38:09:65
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-FfxVtAowi9iuiCmbQl1jBQ4CWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.9.0-5.178.15.255
46.23.100.0/22
62.217.128.0/19
109.205.208.0/24
185.81.217.0/24
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:7e:0f:a3:22:5f:d1:3d:6f:24:1b:f4:0d:4a:71:c6:e6:ad:
68:60:5b:95:8d:0f:86:72:7b:9a:56:43:8e:00:f7:f5:ce:9a:
4d:70:50:ce:fa:43:ae:b7:db:e0:2e:73:f1:fd:47:f8:2d:ad:
99:d3:71:cc:ba:fc:56:e8:fe:40:7a:96:72:3e:ec:04:01:1d:
af:1b:70:b8:cb:1b:03:eb:30:45:0f:3f:2d:46:80:28:e3:64:
4f:23:1b:4a:c8:bc:1b:5b:6c:ce:b1:94:49:a8:77:51:bc:88:
f1:68:bc:01:9a:97:ef:72:61:67:a5:21:88:57:59:06:29:70:
28:b8:be:31:31:ed:42:f4:4b:b1:7c:e8:37:2d:28:d4:93:57:
e2:03:83:d5:62:28:ba:ec:1e:01:82:37:13:7c:ca:93:17:c3:
3f:c4:30:77:09:54:d8:62:c6:10:6f:b5:54:34:42:ce:f1:e8:
e6:78:99:ea:61:21:42:50:40:15:53:e1:b4:3b:78:4e:e8:a0:
b9:cb:8e:f3:60:e8:35:41:f6:c4:d5:88:ba:f5:92:0f:9b:56:
7a:8f:61:74:bd:a5:d3:35:72:83:77:b1:bc:94:04:e2:50:3b:
2b:42:05:73:f2:81:46:cc:ab:2e:08:f6:bc:88:e9:e9:94:0c:
8b:90:22:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:11 2025 by rpki-client