Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G7vFKdAofir9BH4ITYvK7SFL_aQ.roa
File: G7vFKdAofir9BH4ITYvK7SFL_aQ.roa (raw, json)
Hash identifier: ZLwuynP9kB/K3Dylu8d2TA1S4Kv9y2VyJavX1pDDkqQ=
Subject key identifier: 1B:BB:C5:29:D0:28:7E:2A:FD:04:7E:08:4D:8B:CA:ED:21:4B:FD:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194A8D6A4D2EB008C083E83DE6E5F25AAB2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G7vFKdAofir9BH4ITYvK7SFL_aQ.roa
Signing time: Mon 27 Jan 2025 17:37:06 +0000
ROA not before: Mon 27 Jan 2025 17:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.180.0/23 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:d6:a4:d2:eb:00:8c:08:3e:83:de:6e:5f:25:aa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 27 17:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bbbc529d0287e2afd047e084d8bcaed214bfda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:2b:23:56:55:c5:c2:00:54:28:6f:fe:15:
c2:1d:f4:cc:7e:b9:59:24:ef:86:dd:68:8b:57:7a:
9b:0c:87:cd:37:3c:5a:b9:f4:1d:16:5b:ae:7b:3f:
c1:3f:45:57:46:00:80:f1:51:9a:df:02:6a:96:7e:
41:82:ca:34:e0:2c:4d:52:c9:db:b5:3e:b4:29:a4:
d9:d8:b6:8c:e1:c3:2b:58:78:b0:19:58:55:18:4a:
d1:66:56:e5:7d:23:82:26:05:2a:e4:1d:8a:71:11:
30:6f:66:8e:a1:ea:cc:3c:db:1b:5b:37:bc:72:be:
67:e4:f0:f7:72:31:c9:e1:32:76:47:df:4c:fc:ec:
90:a8:53:c8:c9:c1:c4:82:8f:45:3e:06:6a:f6:0d:
ea:71:67:9c:f3:88:17:54:95:79:d8:d3:30:77:a0:
3e:41:f2:0b:ce:9d:44:69:3b:0e:e1:8a:d4:7c:18:
b0:3d:fd:8d:b4:c4:85:54:d8:9d:9e:35:ee:41:ae:
72:f8:05:4f:10:dd:d8:0b:cc:40:35:0e:de:ad:5c:
c9:a4:ee:0a:06:60:59:10:57:27:d4:fc:a5:c7:be:
1d:12:d2:26:04:00:a0:ea:53:45:bc:34:03:5f:ca:
7a:c3:2a:c4:fa:84:f6:b5:a2:30:c6:40:c2:87:a8:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BB:C5:29:D0:28:7E:2A:FD:04:7E:08:4D:8B:CA:ED:21:4B:FD:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G7vFKdAofir9BH4ITYvK7SFL_aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/23
93.123.76.0/22
94.156.154.0/23
94.156.180.0/23
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
14:41:a9:6e:e8:60:c9:61:ef:c6:09:b3:f9:48:ee:7f:5d:2a:
55:50:14:62:3c:a1:36:95:87:dc:d1:7e:2d:1a:75:87:a5:83:
1c:2e:12:8f:f6:9b:77:5e:24:85:ba:02:c6:74:0c:5a:b9:af:
c4:92:0f:f5:f4:82:3d:79:85:61:d0:52:91:c3:88:4e:a3:7c:
0e:2f:5c:51:10:a1:ad:40:95:79:cd:aa:22:b1:ed:69:0a:db:
e8:6d:cf:64:60:57:7e:39:a7:f8:ee:d6:96:a1:bf:a0:ce:04:
bf:23:83:5b:e9:b9:d8:21:9d:cd:1a:fc:0b:62:7f:7d:4e:78:
e1:9d:6b:a8:7f:aa:45:1f:ae:8e:a9:33:56:98:14:1e:1f:9c:
81:38:44:c4:73:70:67:2f:3f:7b:fe:a8:6b:dc:4e:3c:ad:1e:
41:b5:fa:ea:c1:14:19:8a:8a:6e:2b:a5:9f:34:bc:45:c1:d9:
17:86:4e:21:52:9e:23:15:cb:af:bd:94:48:6f:47:d4:3f:87:
ca:f4:e1:a3:72:48:23:a8:58:e7:df:90:6b:f7:5f:9b:d0:73:
e7:60:be:0f:15:64:af:a9:6a:46:35:bf:df:02:72:70:81:9b:
7a:33:b3:bd:f9:80:6c:a8:f3:a1:15:17:d6:12:aa:4a:90:ce:
7e:4f:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:25 2025 by rpki-client