Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS9125.roa
File: AS9125.roa (raw, json)
Hash identifier: 0UDkoS5aEeKq51iPoHP2K3/YeOtp+bFcpY7IUmZ5FX0=
Subject key identifier: 4C:18:91:E6:04:FF:C5:F3:91:1E:95:8D:8F:6D:4A:29:01:09:C2:07
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 6C91A085B7C6F040E2F4C96F8931FE7917E31AC7
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS9125.roa
Signing time: Tue 06 Jun 2023 09:29:07 +0000
ROA not before: Tue 06 Jun 2023 09:24:07 +0000
ROA not after: Tue 04 Jun 2024 09:29:07 +0000
asID: 9125
IP address blocks: 5.172.33.0/24 maxlen: 24
5.172.34.0/23 maxlen: 23
5.172.34.0/24 maxlen: 24
5.172.36.0/22 maxlen: 22
5.172.36.0/23 maxlen: 23
89.23.65.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.252.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
93.93.192.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.116.0/22 maxlen: 22
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.227.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.229.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.232.0/22 maxlen: 22
109.111.236.0/22 maxlen: 22
109.111.240.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.246.0/24 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 23
109.111.254.0/24 maxlen: 24
178.254.128.0/21 maxlen: 21
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.140.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.145.0/24 maxlen: 24
178.254.163.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
178.254.184.0/21 maxlen: 21
185.157.44.0/24 maxlen: 24
217.169.208.0/20 maxlen: 20
217.169.208.0/22 maxlen: 22
217.169.212.0/22 maxlen: 22
217.169.216.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.220.0/22 maxlen: 22
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:91:a0:85:b7:c6:f0:40:e2:f4:c9:6f:89:31:fe:79:17:e3:1a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:24:07 2023 GMT
Not After : Jun 4 09:29:07 2024 GMT
Subject: CN=4C1891E604FFC5F3911E958D8F6D4A290109C207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:eb:07:d7:bd:bf:90:a4:4c:17:04:89:0d:
6b:91:34:24:58:c5:b7:08:39:b2:ce:67:75:12:0e:
a6:4d:df:9d:d3:4e:e4:cd:1b:53:b8:c6:e8:aa:b5:
3e:96:92:82:33:80:77:18:4b:e5:a2:27:12:41:46:
59:f8:28:d9:87:da:f3:92:73:eb:2c:97:ce:09:10:
42:b1:c0:fd:1a:da:8a:5e:7d:cd:f9:a5:08:b7:9a:
08:55:96:c8:f3:b5:9f:8a:6e:91:c9:7f:98:26:4c:
bb:8a:3c:97:9e:d2:96:c6:4c:0e:ed:ed:a9:6e:30:
dd:9a:a1:f2:91:f5:c4:3f:37:ac:07:48:e7:46:d7:
76:a8:0b:95:30:18:04:36:6c:4b:22:e8:74:58:48:
06:a5:a9:c4:b8:9b:37:b1:f0:64:83:ba:aa:8f:18:
ea:04:b1:1d:f8:e8:98:e7:78:25:8c:6a:d9:59:50:
99:4f:10:9d:36:df:f3:87:64:be:bf:14:85:c7:71:
13:53:93:ef:5d:3a:d6:58:0c:51:f1:bd:53:25:9e:
18:f0:a5:39:60:cf:06:c2:5c:d3:c3:23:2c:0a:49:
8c:41:b3:f4:56:9b:4f:5c:38:49:28:7e:29:e7:1d:
92:7c:5a:4f:81:7c:1d:80:08:c6:64:30:72:72:1f:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:18:91:E6:04:FF:C5:F3:91:1E:95:8D:8F:6D:4A:29:01:09:C2:07
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS9125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.39.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.75.0/24
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.163.0/24
178.254.165.0/24
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
5b:8d:84:40:cf:41:dc:52:bf:24:65:b9:8a:10:08:5f:fd:85:
4a:ad:aa:3b:7f:58:58:dd:02:e0:da:ee:92:58:96:17:ca:8e:
ba:8c:94:13:79:17:0c:b6:2d:b1:b7:de:2a:28:9e:57:ce:88:
f8:fb:81:e2:ba:e3:8e:43:d2:da:5b:e6:95:e3:f0:b3:77:08:
37:9a:78:06:ad:48:01:ab:73:c9:58:97:19:17:07:f8:ec:cb:
45:27:f6:7f:d0:ea:10:e3:d3:23:93:f5:fb:52:b7:87:33:16:
d6:45:73:17:87:6e:f5:36:fc:fb:06:e4:11:b2:c2:52:72:c1:
71:57:e1:9a:54:f3:fe:be:02:5f:f6:1d:96:bd:41:46:e9:a6:
d2:95:32:05:5d:58:ac:a0:b4:5d:e4:39:01:13:3e:ba:65:2c:
69:6a:e1:90:1d:09:43:14:20:4a:e0:c5:b6:85:7d:87:f8:32:
7e:d0:f0:ae:6c:a5:aa:87:36:0f:30:60:35:a9:61:eb:ee:97:
04:7a:fd:16:c9:23:3e:4c:fb:e9:a3:64:5d:b9:df:aa:97:a2:
72:b8:7a:a7:b6:e0:e8:ec:4d:7a:06:b3:7a:85:ea:7d:f0:d5:
be:3b:ad:98:50:ae:43:a5:e1:d9:38:48:b4:98:2b:2b:4a:b6:
85:56:c1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org