Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/M5UnjkjdDIA4Wq7IZJeGum1YMV4.roa
File: M5UnjkjdDIA4Wq7IZJeGum1YMV4.roa (raw, json)
Hash identifier: 9NayAwcxCW1n3/8BOCRZU8yd2dDJoUwqM77msxRe3S4=
Subject key identifier: 33:95:27:8E:48:DD:0C:80:38:5A:AE:C8:64:97:86:BA:6D:58:31:5E
Certificate issuer: /CN=868e89c7ab4e1512a9b46d5389b5de9c6a1d7e99
Certificate serial: 38095ACC
Authority key identifier: 86:8E:89:C7:AB:4E:15:12:A9:B4:6D:53:89:B5:DE:9C:6A:1D:7E:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho6Jx6tOFRKptG1TibXenGodfpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/M5UnjkjdDIA4Wq7IZJeGum1YMV4.roa
Signing time: Sat 01 Jan 2022 11:54:28 +0000
ROA not before: Sat 01 Jan 2022 11:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45011
IP address blocks: 188.120.160.0/19 maxlen: 19
37.17.248.0/21 maxlen: 21
82.117.96.0/19 maxlen: 19
188.122.128.0/19 maxlen: 19
5.44.192.0/20 maxlen: 20
178.251.240.0/21 maxlen: 21
91.232.59.0/24 maxlen: 24
91.232.60.0/23 maxlen: 23
79.138.0.0/17 maxlen: 17
178.132.248.0/21 maxlen: 21
85.238.192.0/19 maxlen: 19
85.8.0.0/18 maxlen: 18
109.225.64.0/18 maxlen: 18
85.30.0.0/18 maxlen: 18
195.78.224.0/22 maxlen: 22
146.247.80.0/21 maxlen: 21
185.18.164.0/22 maxlen: 22
83.209.0.0/16 maxlen: 22
31.192.192.0/20 maxlen: 20
5.172.144.0/21 maxlen: 21
83.209.153.0/24 maxlen: 24
95.155.192.0/18 maxlen: 18
77.53.0.0/16 maxlen: 16
87.241.64.0/18 maxlen: 18
87.241.80.0/20 maxlen: 20
87.96.128.0/17 maxlen: 17
87.241.96.0/19 maxlen: 19
87.236.88.0/21 maxlen: 21
2a02:7b8::/32 maxlen: 32
2a00:8280::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940137164 (0x38095acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868e89c7ab4e1512a9b46d5389b5de9c6a1d7e99
Validity
Not Before: Jan 1 11:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3395278e48dd0c80385aaec8649786ba6d58315e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:39:61:ec:fe:78:b6:2c:34:02:cf:9d:e0:
f8:9d:f7:c9:42:bc:8d:30:25:6f:c6:0f:c1:7e:a3:
97:07:22:78:bf:23:45:72:53:c5:15:64:53:d1:ec:
d1:37:db:7a:4a:ea:dd:d8:a7:d4:a1:22:56:87:07:
cb:a2:22:fe:37:5c:10:21:e0:1f:16:76:90:e5:c5:
e8:2a:cd:9d:c8:fc:78:87:f0:f3:62:b0:ae:38:25:
24:d9:8e:fd:88:c0:15:e5:41:e9:18:b4:f7:00:72:
27:ca:a3:52:c1:b9:f6:c7:f5:32:ee:5a:65:dc:2c:
cb:3f:1c:86:36:92:62:30:6c:34:f2:a7:62:7c:3a:
40:c2:26:a3:05:da:1b:a8:29:40:69:a6:11:54:a3:
06:ca:69:5c:8d:74:4a:41:85:77:c7:de:16:ff:03:
44:97:34:17:b1:5c:02:ee:0e:a0:10:ab:84:8f:e2:
7d:ca:29:f3:b7:c9:89:1d:b5:34:a8:49:3e:9a:fb:
8d:0d:b8:03:d1:84:6e:9d:7a:c1:b6:e0:37:e9:c1:
be:9b:08:56:ed:c5:ac:e4:70:6b:b5:15:cb:57:60:
33:6b:8f:6b:89:2d:12:fd:e4:1d:93:78:bb:ee:42:
e8:89:2a:92:db:49:cd:4e:59:15:fb:ac:24:ba:80:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:95:27:8E:48:DD:0C:80:38:5A:AE:C8:64:97:86:BA:6D:58:31:5E
X509v3 Authority Key Identifier:
keyid:86:8E:89:C7:AB:4E:15:12:A9:B4:6D:53:89:B5:DE:9C:6A:1D:7E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho6Jx6tOFRKptG1TibXenGodfpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/M5UnjkjdDIA4Wq7IZJeGum1YMV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/ho6Jx6tOFRKptG1TibXenGodfpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.192.0/20
5.172.144.0/21
31.192.192.0/20
37.17.248.0/21
77.53.0.0/16
79.138.0.0/17
82.117.96.0/19
83.209.0.0/16
85.8.0.0/18
85.30.0.0/18
85.238.192.0/19
87.96.128.0/17
87.236.88.0/21
87.241.64.0/18
91.232.59.0-91.232.61.255
95.155.192.0/18
109.225.64.0/18
146.247.80.0/21
178.132.248.0/21
178.251.240.0/21
185.18.164.0/22
188.120.160.0/19
188.122.128.0/19
195.78.224.0/22
IPv6:
2a00:8280::/32
2a02:7b8::/32
Signature Algorithm: sha256WithRSAEncryption
34:6e:d4:59:29:9f:bb:17:5c:bf:ae:66:a5:79:87:c3:e5:2d:
5a:b8:f0:ce:08:b3:01:98:04:da:d3:49:1c:d5:3c:a4:2a:68:
2f:8d:88:45:5c:35:15:4e:0b:15:bb:ca:e0:87:8f:5c:d1:3a:
04:ab:dc:60:63:7a:dd:5e:41:a2:00:2a:24:52:a7:ba:8f:a5:
83:9a:e1:e3:23:e4:e0:e2:84:65:0f:68:3a:cb:a1:79:c5:6e:
96:9d:68:4a:1d:15:f1:9f:64:bf:5a:d3:66:a7:83:5e:ff:3a:
95:69:23:6d:6c:e5:1c:95:9e:f4:5e:99:a4:3e:fa:2b:38:fc:
e4:cf:72:59:65:a6:19:d3:36:94:e4:5a:0d:18:fa:2e:b7:cf:
06:6e:65:43:8e:e5:7c:0e:51:82:62:56:f0:90:3e:96:51:5d:
40:03:b3:a9:97:36:15:36:cf:d3:f1:b7:c1:bd:81:d0:03:ec:
ac:34:06:95:76:d9:a8:24:40:63:3a:ee:5e:0c:fd:9e:16:8d:
5a:c8:e9:f0:ac:53:42:34:11:1d:8d:1b:e9:21:7f:67:48:ca:
7c:90:be:bf:d7:ed:4b:1c:6d:db:b9:6d:ff:d1:ae:43:83:f9:
7a:78:45:12:b0:5d:96:6a:49:44:7b:49:0f:07:4f:6f:7c:cd:
87:56:d8:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:38 2025 by rpki-client