Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/g98umGUKaIsIR9xhfA8-rwzXBkk.roa
File: g98umGUKaIsIR9xhfA8-rwzXBkk.roa (raw, json)
Hash identifier: gYZ4VFMb+UUTpwfo6vDsnpff1ZdyvQ+vvN+iyWpptf8=
Subject key identifier: 83:DF:2E:98:65:0A:68:8B:08:47:DC:61:7C:0F:3E:AF:0C:D7:06:49
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C52B279637C4B81046484A852A4B2
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/g98umGUKaIsIR9xhfA8-rwzXBkk.roa
Signing time: Thu 02 Jan 2025 09:50:20 +0000
ROA not before: Thu 02 Jan 2025 09:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8439
IP address blocks: 5.28.16.0/20 maxlen: 20
31.28.32.0/19 maxlen: 19
37.9.144.0/20 maxlen: 20
62.106.96.0/19 maxlen: 19
62.106.96.0/20 maxlen: 20
62.106.112.0/21 maxlen: 21
62.106.120.0/21 maxlen: 21
81.28.160.0/19 maxlen: 19
85.114.160.0/19 maxlen: 19
92.240.128.0/20 maxlen: 20
95.128.160.0/21 maxlen: 21
95.128.160.0/22 maxlen: 22
95.128.164.0/22 maxlen: 22
109.226.64.0/18 maxlen: 18
185.10.180.0/22 maxlen: 22
185.50.8.0/22 maxlen: 22
188.122.224.0/19 maxlen: 19
193.106.240.0/22 maxlen: 22
213.178.32.0/19 maxlen: 19
213.178.32.0/21 maxlen: 21
213.178.40.0/21 maxlen: 21
213.178.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:52:b2:79:63:7c:4b:81:04:64:84:a8:52:a4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83df2e98650a688b0847dc617c0f3eaf0cd70649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:d7:0d:15:40:5f:6c:6f:c0:f6:23:00:ef:
db:70:13:45:c2:14:b3:b2:c1:7c:84:7f:17:cf:2a:
9b:48:0a:29:b8:0a:a8:a8:19:00:ce:3f:5b:78:85:
c4:c9:ba:17:f5:5e:48:c0:a9:17:ae:6d:f4:77:4a:
b3:52:22:e4:a0:88:96:2e:e3:ce:ae:12:77:ba:77:
5d:f5:36:ca:00:1d:ad:ae:5d:d3:56:ef:20:cd:06:
82:ef:ca:6f:dc:94:2b:90:55:ac:4d:db:3f:40:0c:
a5:88:a0:b7:f2:8b:80:ac:55:aa:fb:d4:95:a4:b9:
10:18:ce:72:63:a6:74:40:26:9d:2a:67:9f:50:33:
57:eb:ae:d7:f8:64:ee:4c:4c:09:e4:ef:54:3a:f2:
a7:a0:26:96:44:4a:c4:a3:2c:33:c8:ba:de:0e:dc:
9f:36:ce:dd:c7:18:1c:57:c4:50:95:19:e9:0c:20:
18:9a:e9:20:80:92:2d:3e:d8:99:84:36:e5:65:fa:
b6:18:9c:e1:d3:5c:ec:40:e3:53:30:b0:48:00:39:
dd:cc:26:66:52:8e:a5:96:f5:78:f7:f9:ef:79:4f:
0e:b5:7a:2a:65:16:81:3a:b7:c8:fb:3d:a1:9f:8f:
1a:ff:dc:0b:f9:54:c7:f6:11:57:81:e0:f5:f7:ca:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:2E:98:65:0A:68:8B:08:47:DC:61:7C:0F:3E:AF:0C:D7:06:49
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/g98umGUKaIsIR9xhfA8-rwzXBkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.16.0/20
31.28.32.0/19
37.9.144.0/20
62.106.96.0/19
81.28.160.0/19
85.114.160.0/19
92.240.128.0/20
95.128.160.0/21
109.226.64.0/18
185.10.180.0/22
185.50.8.0/22
188.122.224.0/19
193.106.240.0/22
213.178.32.0/19
Signature Algorithm: sha256WithRSAEncryption
54:c1:c6:f6:6e:0a:89:69:8f:8a:df:e6:79:3d:af:e4:e3:58:
aa:ba:b8:35:01:8b:c5:62:8d:5b:fb:30:f0:df:88:2c:54:f1:
7e:cf:b5:87:ec:69:dc:29:af:2a:3e:ad:88:af:9d:05:de:74:
df:5a:f6:83:e3:44:51:0c:71:5f:a1:fb:57:f0:4d:06:02:3d:
e3:6e:f9:66:92:ad:a9:40:3c:68:ce:ba:9f:8e:e2:97:94:01:
85:0a:e3:d6:4b:24:09:06:bf:3b:28:cc:f0:d0:67:af:c0:6d:
ce:7a:3d:d5:f1:0c:84:37:d0:48:87:42:9f:47:c9:40:d1:8e:
38:1c:43:0f:6a:02:16:1d:06:40:4e:e5:54:8d:2b:7a:74:f7:
32:46:8c:e4:82:85:2f:22:91:71:b2:8d:94:a6:9a:14:1f:d6:
21:6c:d0:45:07:ff:01:7b:e9:07:e3:9b:29:66:05:4a:51:3e:
19:df:e1:bc:d3:23:cc:4e:16:fc:2e:38:4a:c8:9e:92:f0:9d:
58:6f:20:d2:08:61:11:b6:64:20:d6:89:55:e4:97:33:6e:f1:
9e:30:96:d3:a0:62:10:82:67:24:f6:3c:d1:23:e7:04:38:b1:
43:f1:25:da:95:5d:42:e4:69:c7:4d:8d:20:76:90:a8:6a:ec:
31:ad:e5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:54 2025 by rpki-client