Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lkAwvp9Rqki24EGQn5gLSGASeu0.roa
File: lkAwvp9Rqki24EGQn5gLSGASeu0.roa (raw, json)
Hash identifier: dSjLVIUTuF0qH7LwDLNXzjSeemhRW67Yvn2RLP2AfgY=
Subject key identifier: 96:40:30:BE:9F:51:AA:48:B6:E0:41:90:9F:98:0B:48:60:12:7A:ED
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019276F1F07BCAD5DD825F8B4F32F48BAD8F
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lkAwvp9Rqki24EGQn5gLSGASeu0.roa
Signing time: Thu 10 Oct 2024 15:00:19 +0000
ROA not before: Thu 10 Oct 2024 15:00:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.9.0/24 maxlen: 24
5.178.10.0/24 maxlen: 24
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
62.217.128.0/19 maxlen: 19
62.217.128.0/24 maxlen: 24
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.132.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.135.0/24 maxlen: 24
62.217.136.0/24 maxlen: 24
62.217.137.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.139.0/24 maxlen: 24
62.217.140.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.143.0/24 maxlen: 24
62.217.144.0/24 maxlen: 24
62.217.145.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.150.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.152.0/24 maxlen: 24
62.217.153.0/24 maxlen: 24
62.217.154.0/24 maxlen: 24
62.217.155.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
109.205.208.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:f1:f0:7b:ca:d5:dd:82:5f:8b:4f:32:f4:8b:ad:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 10 15:00:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=964030be9f51aa48b6e041909f980b4860127aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:08:5a:da:6e:58:c5:c2:93:81:e8:27:b8:11:
e6:ec:4e:9f:e6:80:a0:6c:93:dc:98:30:ad:2f:b6:
1c:67:38:94:09:1f:4d:af:fb:c6:84:94:9d:44:3f:
b9:3a:0f:67:28:33:1c:56:77:ed:dd:f2:ad:71:56:
4f:8b:5d:1e:41:1f:a5:80:72:11:96:8a:04:45:d1:
aa:53:10:27:0f:cd:54:0b:71:5d:66:3a:54:cb:4d:
ee:22:6b:16:c7:1a:2c:1e:57:26:0b:19:5a:67:94:
c7:8c:70:fe:4d:79:6b:e9:f5:3b:17:a8:e0:dd:f7:
ec:74:69:9d:37:77:f2:f9:1c:a9:5e:73:2a:34:8e:
49:d0:ce:f5:7e:f6:fa:26:e5:f8:5a:18:ab:c7:65:
ad:46:2a:15:08:09:19:b3:93:ad:33:d2:9d:67:e2:
63:2f:5c:f3:e1:08:17:fe:5a:cc:2e:f9:73:41:97:
c0:c3:6a:03:7c:f2:13:2a:68:2f:fd:51:d1:20:5f:
e2:7b:21:ec:ff:d2:3f:fd:fc:6e:b4:32:3c:02:24:
51:b2:19:f1:fa:8d:65:72:b2:18:df:5b:dd:6a:0a:
d6:ea:d7:ee:e7:53:28:28:e2:12:9c:4d:87:1f:98:
7f:70:c4:b0:a7:0d:47:2f:46:61:36:10:d4:7d:69:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:40:30:BE:9F:51:AA:48:B6:E0:41:90:9F:98:0B:48:60:12:7A:ED
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lkAwvp9Rqki24EGQn5gLSGASeu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.9.0-5.178.10.255
5.178.12.0/23
5.178.15.0/24
46.23.100.0/22
62.217.128.0/19
109.205.208.0/24
185.81.217.0/24
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
65:48:52:a8:47:33:c6:4f:1e:25:5c:34:72:40:43:84:37:f6:
fd:a1:5d:26:f2:bb:7c:3b:f5:0d:d1:d8:eb:7c:4c:d7:a1:e2:
42:a9:e7:13:11:54:1d:75:27:e0:75:ba:93:0c:28:db:50:56:
cc:70:dc:37:cd:1b:e4:4d:5e:cc:5c:92:27:74:5c:46:27:47:
24:ee:37:f4:aa:e0:16:2c:3a:bc:a9:8c:0c:f3:0c:d9:19:93:
96:99:d2:b6:09:ba:2b:3a:a1:46:d2:27:b1:d7:43:30:e9:f3:
fa:a7:57:9c:e2:26:d0:79:19:0b:70:a4:ad:20:bc:33:17:83:
e2:9d:79:93:f8:2d:5d:f2:e8:af:79:5f:7d:dc:59:30:f9:31:
a7:2c:85:49:a9:e0:e5:86:2a:98:94:e0:6a:8c:e4:12:48:fe:
19:84:2a:df:db:db:1a:2f:c6:f0:1a:70:64:c0:09:89:f6:7e:
46:a9:82:bd:ae:7a:90:62:90:46:35:19:0a:bc:3f:aa:8d:92:
3c:ef:a8:4d:4a:af:28:3a:55:4d:30:7d:34:16:9a:04:34:6a:
4f:33:5e:3b:7c:d2:bd:7d:25:35:b0:4e:6e:18:b6:17:41:43:
6f:27:27:f7:77:52:09:53:e5:64:38:33:d9:50:88:e0:7b:7b:
b5:b2:49:2b
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZJ28fB7ytXdgl+LTzL0i62PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjQxMDEwMTUwMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjQwMzBiZTlmNTFhYTQ4YjZlMDQxOTA5Zjk4MGI0ODYwMTI3YWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wha2m5YxcKTgegnuBHm7E6f5oCg
bJPcmDCtL7YcZziUCR9Nr/vGhJSdRD+5Og9nKDMcVnft3fKtcVZPi10eQR+lgHIR
looERdGqUxAnD81UC3FdZjpUy03uImsWxxosHlcmCxlaZ5THjHD+TXlr6fU7F6jg
3ffsdGmdN3fy+RypXnMqNI5J0M71fvb6JuX4Whirx2WtRioVCAkZs5OtM9KdZ+Jj
L1zz4QgX/lrMLvlzQZfAw2oDfPITKmgv/VHRIF/ieyHs/9I//fxutDI8AiRRshnx
+o1lcrIY31vdagrW6tfu51MoKOISnE2HH5h/cMSwpw1HL0ZhNhDUfWkHdwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFJZAML6fUapItuBBkJ+YC0hgEnrtMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvbGtBd3ZwOVJxa2kyNEVHUW41Z0xTR0FTZXUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBAAFsgkD
BAAFsgoDBAEFsgwDBAAFsg8DBAIuF2QDBAU+2YADBABtzdADBAC5UdkDBAK8QAgw
DQYJKoZIhvcNAQELBQADggEBAGVIUqhHM8ZPHiVcNHJAQ4Q39v2hXSbyu3w79Q3R
2Ot8TNeh4kKp5xMRVB11J+B1upMMKNtQVsxw3DfNG+RNXsxckid0XEYnRyTuN/Sq
4BYsOrypjAzzDNkZk5aZ0rYJuis6oUbSJ7HXQzDp8/qnV5ziJtB5GQtwpK0gvDMX
g+KdeZP4LV3y6K95X33cWTD5MacshUmp4OWGKpiU4GqM5BJI/hmEKt/b2xovxvAa
cGTACYn2fkapgr2uepBikEY1GQq8P6qNkjzvqE1Kryg6VU0wfTQWmgQ0ak8zXjt8
0r19JTWwTm4YthdBQ28nJ/d3UglT5WQ4M9lQiOB7e7WySSs=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:21 2025 by rpki-client