Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/g3e0lUNE0uxCwEy-CR68ZET_Q9Q.roa
File: g3e0lUNE0uxCwEy-CR68ZET_Q9Q.roa (raw, json)
Hash identifier: OIbQBYRNfTIylS/W/idVRSvdSJ278BgBpBvCnudCbqw=
Subject key identifier: 83:77:B4:95:43:44:D2:EC:42:C0:4C:BE:09:1E:BC:64:44:FF:43:D4
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0192713464A9E8C67E13640867CF898A55D5
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/g3e0lUNE0uxCwEy-CR68ZET_Q9Q.roa
Signing time: Wed 09 Oct 2024 12:15:11 +0000
ROA not before: Wed 09 Oct 2024 12:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.10.0/24 maxlen: 24
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.136.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.140.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.152.0/24 maxlen: 24
62.217.153.0/24 maxlen: 24
62.217.154.0/24 maxlen: 24
62.217.155.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:34:64:a9:e8:c6:7e:13:64:08:67:cf:89:8a:55:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 9 12:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8377b4954344d2ec42c04cbe091ebc6444ff43d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:36:82:fb:b6:55:c2:e5:4b:95:a4:8a:17:
d8:c9:fb:79:4b:e9:85:01:b4:97:7e:f9:28:75:bf:
94:55:ee:69:db:32:84:cb:15:e4:e1:a4:11:ce:b5:
34:8e:32:18:27:c2:0a:f9:9e:df:c8:c4:2e:09:fc:
1a:eb:e1:e5:91:58:af:0d:39:ea:5a:9b:27:3d:20:
1f:3d:ae:ff:ea:da:6a:f5:8a:23:ca:13:41:b1:3e:
25:7a:14:77:29:f9:73:cf:2a:ab:6b:f4:e5:8c:20:
74:de:71:4a:7d:9b:f8:48:6d:32:46:fb:9c:f3:d1:
26:32:f8:0d:d1:e1:7d:83:31:97:59:60:d9:ad:80:
15:13:eb:03:f1:62:fc:3e:34:8c:e9:f8:d9:f9:07:
c4:24:9a:55:cd:65:59:d9:b1:c9:15:02:16:21:b7:
ba:01:ad:ff:09:6a:0b:74:4b:98:b9:0e:79:76:a5:
8d:f9:0b:bf:5c:02:18:fe:3f:7c:c8:1b:26:1b:da:
4a:4f:9e:eb:d8:5f:f4:38:93:b1:72:e9:cc:e4:12:
20:a2:0a:af:70:09:fe:26:e1:9e:c6:c8:b7:e2:58:
f4:a1:e4:61:0c:4f:73:90:e4:62:a2:9b:30:c9:d4:
9f:73:14:f9:38:20:c5:17:ae:77:73:a5:cb:47:30:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:77:B4:95:43:44:D2:EC:42:C0:4C:BE:09:1E:BC:64:44:FF:43:D4
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/g3e0lUNE0uxCwEy-CR68ZET_Q9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.10.0/24
5.178.12.0/23
5.178.15.0/24
46.23.100.0/22
62.217.129.0-62.217.131.255
62.217.134.0/24
62.217.136.0/24
62.217.138.0/24
62.217.140.0-62.217.142.255
62.217.146.0-62.217.149.255
62.217.151.0-62.217.159.255
185.81.217.0/24
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:78:d8:85:a9:a8:da:ce:18:61:14:02:17:a0:72:cc:8e:2f:
51:2f:69:a9:d7:a5:0a:b5:54:4a:3b:c9:fc:3a:63:26:68:e7:
a7:8b:39:ea:01:a2:e8:18:95:fc:3d:4d:53:fe:68:59:30:88:
3d:f0:23:90:e5:12:21:36:46:91:83:02:58:29:a9:e2:eb:aa:
50:21:e7:8b:bb:0a:dc:7f:85:af:4b:3f:d7:a3:4a:ec:e0:1f:
6b:c1:6c:fc:0b:e4:f7:ee:a6:46:98:e1:59:f9:d3:b4:75:4b:
6d:0d:a4:b2:73:38:e7:aa:f6:84:38:cb:58:b8:b2:1d:f9:19:
07:ce:8e:49:d3:11:14:bf:a8:56:58:1b:ba:e2:3a:10:94:30:
32:98:fc:df:23:01:c7:ea:d6:ae:7e:75:70:fc:f7:5c:82:e7:
cf:b1:67:90:00:13:09:aa:4c:99:bd:2b:f8:29:57:fa:24:4d:
94:8c:13:88:f1:f0:38:41:68:a8:22:82:a2:0e:90:04:37:d5:
69:ba:79:ef:12:40:3f:bd:22:b7:f8:65:de:f1:8b:c2:71:4e:
37:04:8f:0e:13:9a:01:88:a7:a0:20:20:d4:1e:fc:5c:a2:06:
83:2e:d6:6e:75:03:36:4c:01:70:d1:84:af:f3:03:79:9f:1e:
d3:00:51:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:27 2025 by rpki-client