Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/g5LSk0BzmWd8JHoq5myBV797ECI.roa
File: g5LSk0BzmWd8JHoq5myBV797ECI.roa (raw, json)
Hash identifier: 4XPo5De0+cZvYe/vjpKqqRU7Aa7tY4u64FMaOJnPdmg=
Subject key identifier: 83:92:D2:93:40:73:99:67:7C:24:7A:2A:E6:6C:81:57:BF:7B:10:22
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 012AD2B1
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/g5LSk0BzmWd8JHoq5myBV797ECI.roa
Signing time: Wed 18 May 2022 07:11:17 +0000
ROA not before: Wed 18 May 2022 07:11:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2.59.183.0/24 maxlen: 24
2.59.182.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
45.156.145.0/24 maxlen: 24
2.59.180.0/24 maxlen: 24
45.156.146.0/24 maxlen: 24
45.156.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19583665 (0x12ad2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: May 18 07:11:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8392d293407399677c247a2ae66c8157bf7b1022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:39:a5:62:b9:5b:df:cc:55:2d:34:92:3e:
ba:c4:a9:b1:98:ca:7a:19:bb:b2:df:b3:3c:98:27:
a2:1d:95:d6:61:40:35:ac:f3:ab:a2:63:e4:77:d3:
d6:b6:3c:d4:51:0b:40:61:a2:9f:71:45:17:67:b5:
c3:ad:23:8b:d2:89:81:e1:c2:58:19:61:4e:ac:6f:
23:bd:8d:c0:68:da:b2:a3:9e:ac:a2:df:76:5a:da:
78:96:94:f4:1e:5b:bf:eb:1e:39:16:c5:69:cf:1d:
0f:4c:72:ef:46:66:ba:45:9f:08:10:2b:18:55:76:
f6:d9:3c:b0:a2:c0:04:9e:9f:57:c2:07:7e:9e:53:
9a:21:ab:b6:2c:fa:81:e8:2b:c8:fb:d1:20:f8:10:
80:be:2a:47:1d:c6:21:f6:b5:c7:c9:77:31:64:1c:
bf:6f:68:77:b3:cb:5a:7f:9f:fc:71:0a:59:79:bb:
8c:e5:be:1d:a2:3a:2e:72:1c:70:78:e2:5b:99:06:
43:b8:4c:8f:b3:d0:6f:12:e1:ef:34:cf:64:68:d1:
86:a9:38:84:26:3d:58:46:dd:9f:0f:5d:f7:00:bd:
2a:28:0f:e7:fd:72:2a:a4:48:5e:87:01:85:24:f1:
4f:f1:cf:3d:55:5f:7c:7c:9f:8d:fb:17:15:46:d0:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:92:D2:93:40:73:99:67:7C:24:7A:2A:E6:6C:81:57:BF:7B:10:22
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/g5LSk0BzmWd8JHoq5myBV797ECI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
2.59.182.0/23
45.156.144.0/22
Signature Algorithm: sha256WithRSAEncryption
50:18:c6:33:d1:7b:9e:c2:6d:ca:9d:1e:c5:28:bd:c0:4c:fe:
61:fa:0b:4b:aa:e9:83:a5:9c:42:50:ef:ab:46:88:4a:cd:14:
cb:b4:86:91:bb:fe:c0:4d:72:48:e0:2a:ed:d7:94:9c:69:97:
b7:a3:30:91:b6:21:4e:d3:30:e3:bc:7b:d5:e2:44:47:ae:46:
62:8c:77:ed:32:08:49:18:51:4f:0b:c3:39:65:f7:50:ad:97:
b0:b3:55:63:3a:96:cb:8a:43:47:71:43:02:12:03:54:a0:b8:
d2:35:14:38:b6:61:8d:2a:eb:85:be:f7:96:38:4c:b7:44:ed:
b0:e0:8b:c3:29:20:c6:3e:8b:c6:53:34:30:e3:97:19:28:29:
ed:46:fd:61:66:78:75:b5:09:2b:36:a0:82:8f:e7:a1:32:8a:
55:e5:13:1f:d8:0b:66:c0:71:63:57:70:ee:2b:4c:a9:f8:6f:
22:4f:89:8c:d6:78:31:5f:a1:3e:9d:36:25:cb:c5:1e:e0:c1:
78:74:b3:f1:f4:9e:ce:9b:78:12:74:a0:ce:04:88:8e:a2:a3:
f8:f6:ec:c8:7d:11:7a:a9:5e:6b:c8:cb:66:03:2e:8c:03:12:
eb:23:50:d2:5d:82:ad:2e:31:62:71:d7:9a:e6:b1:14:04:aa:
13:1c:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:35 2025 by rpki-client