Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa
File: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (raw, json)
Hash identifier: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=
Subject key identifier: F6:6B:F9:04:9B:C4:68:0A:96:A2:3F:2F:1F:9A:F5:C7:1F:E9:16:0A
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 019420D63C9176FEAD81C5A4242EE8E838A4
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 5.63.24.0/24 maxlen: 24
5.63.25.0/24 maxlen: 24
5.63.26.0/24 maxlen: 24
5.63.27.0/24 maxlen: 24
5.63.28.0/24 maxlen: 24
91.190.168.0/24 maxlen: 24
91.190.169.0/24 maxlen: 24
91.190.171.0/24 maxlen: 24
91.190.172.0/24 maxlen: 24
91.190.173.0/24 maxlen: 24
91.190.174.0/24 maxlen: 24
91.190.175.0/24 maxlen: 24
185.85.78.0/24 maxlen: 24
185.85.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3c:91:76:fe:ad:81:c5:a4:24:2e:e8:e8:38:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f66bf9049bc4680a96a23f2f1f9af5c71fe9160a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:80:5e:8f:68:d5:6a:cd:19:0d:de:43:18:
d3:dc:fc:ec:9e:f8:cf:30:94:27:55:e9:b5:7e:68:
b6:bd:b1:ea:2e:3d:b9:e4:a5:93:bd:b4:cd:2b:ec:
d0:a4:ec:68:63:ce:73:89:ef:61:3d:63:b2:e4:36:
34:04:47:b8:9e:d8:04:db:55:35:f3:c5:d7:91:05:
aa:8e:6d:03:8c:08:82:a0:6c:ea:71:a7:d3:fe:c9:
ae:c4:d1:29:c7:68:e6:2d:30:de:c2:8f:0e:8e:35:
2f:97:16:2b:a6:5b:04:50:43:d6:01:04:5b:80:c8:
e2:24:39:a4:5a:94:05:81:71:98:98:13:b3:0d:14:
b3:17:6a:2a:22:d6:47:0d:76:08:f1:61:b5:c4:74:
13:b9:d8:b7:39:c0:b9:26:9c:fc:8f:68:7d:c3:26:
99:4c:f1:7e:8e:20:68:65:11:ee:15:86:b8:74:c3:
2e:d0:18:94:46:5e:0e:94:fc:8a:41:a5:ac:42:45:
66:32:9a:65:8d:2a:05:5f:f1:c8:aa:a7:75:49:a5:
9e:ad:a9:96:91:14:75:45:0c:bf:38:97:1d:0c:07:
ce:7b:29:46:97:f8:c3:a8:3e:ea:53:6d:4a:71:f8:
25:73:db:ce:c5:7b:91:4c:84:ae:18:00:0f:df:7a:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6B:F9:04:9B:C4:68:0A:96:A2:3F:2F:1F:9A:F5:C7:1F:E9:16:0A
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0-5.63.28.255
91.190.168.0/23
91.190.171.0-91.190.175.255
185.85.78.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:2a:72:13:56:2b:12:29:8d:2b:87:2f:b5:5c:c1:2b:f7:95:
50:f8:f4:08:66:a6:b4:23:c8:97:8e:8c:1f:3d:41:ea:d3:5f:
73:f6:ef:b3:fb:58:c8:a0:6d:a3:82:91:1e:de:9d:8f:fc:ed:
5e:2d:8e:83:ec:8c:5e:43:ec:44:7f:a6:b9:36:61:e7:90:58:
22:b8:15:30:63:e7:e4:bc:36:a3:81:4f:bd:50:7c:97:b7:01:
3e:10:2e:74:ba:fe:7a:ee:36:49:1d:33:e9:71:db:e2:47:f7:
7f:38:d8:c5:95:64:e9:dc:ab:47:7d:e1:fc:93:ab:39:ee:a2:
d6:0b:9a:72:68:3d:9b:c5:d9:16:a2:eb:1c:05:27:ab:68:ad:
4a:1c:8a:66:10:7e:cd:40:67:09:00:de:d8:c4:96:30:4c:ec:
3f:2b:3c:e8:99:05:c9:3d:54:b1:a3:aa:07:ee:d0:cd:99:9c:
02:bd:9d:fc:16:6d:dc:f5:0a:3f:a7:60:bf:26:df:33:d4:68:
40:8a:23:2d:6f:e3:70:b6:df:0e:86:b4:66:45:44:cf:ff:f6:
98:6f:cc:14:7b:48:22:0e:3b:3e:a6:30:68:f7:17:42:28:18:
b7:ad:dd:41:f4:64:be:0d:5a:3e:af:ed:04:3b:d6:ad:9c:c2:
ec:64:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:58 2025 by rpki-client