Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa
File: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (raw, json)
Hash identifier: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=
Subject key identifier: 73:9C:83:D0:E3:B6:84:90:87:6F:37:46:35:1F:2E:C0:C2:E4:23:B4
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 0194266AAD260759DD085C2A839443E73ECC
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa
Signing time: Thu 02 Jan 2025 09:48:32 +0000
ROA not before: Thu 02 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 192.26.239.0/24 maxlen: 24
192.82.214.0/24 maxlen: 24
192.92.135.0/24 maxlen: 24
192.94.24.0/24 maxlen: 24
192.133.108.0/24 maxlen: 24
192.147.155.0/24 maxlen: 24
192.153.13.0/24 maxlen: 24
192.207.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:ad:26:07:59:dd:08:5c:2a:83:94:43:e7:3e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Jan 2 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=739c83d0e3b68490876f3746351f2ec0c2e423b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:01:58:83:7a:8b:7c:64:cd:93:4a:7d:67:
57:3a:b5:4f:ac:d4:da:6a:8a:c8:44:10:2b:54:98:
cc:3f:50:b7:d7:3b:34:a6:fd:73:67:ea:03:48:90:
44:1b:14:f3:1e:b0:61:10:45:ff:37:05:8e:4c:a9:
f1:9d:b9:2f:d6:30:1a:84:1e:a4:dd:e6:04:57:3d:
d2:1d:eb:33:98:d7:78:4b:0c:6c:ff:ab:ec:d8:f5:
18:3a:86:87:f6:c9:97:b8:2e:ec:ed:df:79:a0:29:
a6:d4:2f:65:19:27:17:4f:33:ea:15:cb:21:e2:32:
b8:a8:e4:d7:0d:a2:39:0e:22:92:22:ad:bf:3b:03:
58:84:55:74:0d:d0:85:e8:db:e6:35:0f:2a:5a:ff:
03:dc:2a:dc:d2:65:89:d5:ef:d7:ac:50:a5:52:66:
e7:69:e9:c4:e4:14:06:b6:25:9d:16:26:d1:11:e1:
56:40:40:74:4e:c2:45:6d:cf:85:09:a8:06:fa:17:
84:cb:8a:47:ee:c4:cd:97:bf:4d:a5:87:e0:e3:30:
6f:33:ae:21:dc:7b:c5:21:7d:9a:bf:70:68:91:8d:
3f:a0:e1:43:6c:38:4a:cf:51:90:2d:fe:78:13:7f:
c5:e6:fa:11:61:f2:4c:22:f2:57:81:71:e6:3b:7a:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9C:83:D0:E3:B6:84:90:87:6F:37:46:35:1F:2E:C0:C2:E4:23:B4
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.26.239.0/24
192.82.214.0/24
192.92.135.0/24
192.94.24.0/24
192.133.108.0/24
192.147.155.0/24
192.153.13.0/24
192.207.196.0/24
Signature Algorithm: sha256WithRSAEncryption
53:18:8a:fb:2a:81:95:25:0f:17:49:a7:28:a2:ab:46:d3:57:
12:7e:5d:30:34:75:f0:c2:1d:f6:51:9e:cb:ff:b0:b1:42:8b:
ae:0c:4d:69:b3:04:cc:72:a0:77:f0:fb:fd:78:7e:c6:f4:fa:
d7:ee:69:c5:79:ee:31:bf:bc:6a:90:86:b0:12:cb:16:5b:3b:
9d:9c:13:28:f3:84:6d:1d:3b:42:cb:3b:97:e5:89:01:76:4d:
a2:f1:be:63:84:82:75:50:70:14:14:e2:b4:69:69:fb:f0:52:
66:28:5f:cc:9b:7c:9c:57:6a:05:c8:c9:55:07:22:ba:11:27:
4f:41:19:ee:47:28:23:3d:57:33:23:d4:f8:41:50:30:95:2d:
91:bc:3e:14:a8:46:30:a3:72:66:f9:e9:5f:19:a2:df:fa:24:
07:5a:b9:d5:46:fc:2f:ae:2e:31:c8:7a:0d:90:49:e1:1b:57:
b6:56:d3:c2:78:65:e6:bd:7d:71:99:12:e9:71:d0:7f:c3:e9:
fb:9e:e0:53:92:f0:7c:10:90:f0:ef:b6:0a:4b:10:87:2e:cc:
0d:47:07:2b:e4:61:90:0e:4d:7b:90:aa:ab:5d:07:18:1c:68:
e6:22:5f:22:53:d6:aa:5a:e7:91:36:29:f9:85:23:0d:06:55:
c4:c1:33:c3
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZQmaq0mB1ndCFwqg5RD5z7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi
NjkyMzgwHhcNMjUwMTAyMDk0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzljODNkMGUzYjY4NDkwODc2ZjM3NDYzNTFmMmVjMGMyZTQyM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJIBWIN6i3xkzZNKfWdXOrVPrNTa
aorIRBArVJjMP1C31zs0pv1zZ+oDSJBEGxTzHrBhEEX/NwWOTKnxnbkv1jAahB6k
3eYEVz3SHeszmNd4Swxs/6vs2PUYOoaH9smXuC7s7d95oCmm1C9lGScXTzPqFcsh
4jK4qOTXDaI5DiKSIq2/OwNYhFV0DdCF6NvmNQ8qWv8D3Crc0mWJ1e/XrFClUmbn
aenE5BQGtiWdFibREeFWQEB0TsJFbc+FCagG+heEy4pH7sTNl79NpYfg4zBvM64h
3HvFIX2av3BokY0/oOFDbDhKz1GQLf54E3/F5voRYfJMIvJXgXHmO3pUNwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFHOcg9DjtoSQh283RjUfLsDC5CO0MB8GA1UdIwQY
MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct
ZTBkOTE0YzFjYjUwLzEvYzV5RDBPTzJoSkNIYnpkR05SOHV3TUxrSTdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw
LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAwBrvAwQA
wFLWAwQAwFyHAwQAwF4YAwQAwIVsAwQAwJObAwQAwJkNAwQAwM/EMA0GCSqGSIb3
DQEBCwUAA4IBAQBTGIr7KoGVJQ8XSacooqtG01cSfl0wNHXwwh32UZ7L/7CxQouu
DE1pswTMcqB38Pv9eH7G9PrX7mnFee4xv7xqkIawEssWWzudnBMo84RtHTtCyzuX
5YkBdk2i8b5jhIJ1UHAUFOK0aWn78FJmKF/Mm3ycV2oFyMlVByK6ESdPQRnuRygj
PVczI9T4QVAwlS2RvD4UqEYwo3Jm+elfGaLf+iQHWrnVRvwvri4xyHoNkEnhG1e2
VtPCeGXmvX1xmRLpcdB/w+n7nuBTkvB8EJDw77YKSxCHLswNRwcr5GGQDk17kKqr
XQcYHGjmIl8iU9aqWueRNin5hSMNBlXEwTPD
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:00 2025 by rpki-client