Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/fR8nd7Ui5M0TTCClOFZarT85ISQ.roa
File: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (raw, json)
Hash identifier: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=
Subject key identifier: 7D:1F:27:77:B5:22:E4:CD:13:4C:20:A5:38:56:5A:AD:3F:39:21:24
Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial: 0194282639C91042B6C06F66AF4F56031D3E
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/fR8nd7Ui5M0TTCClOFZarT85ISQ.roa
Signing time: Thu 02 Jan 2025 17:53:01 +0000
ROA not before: Thu 02 Jan 2025 17:53:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29588
IP address blocks: 91.247.248.0/22 maxlen: 22
91.247.248.0/24 maxlen: 24
91.247.249.0/24 maxlen: 24
91.247.250.0/24 maxlen: 24
91.247.251.0/24 maxlen: 24
213.108.136.0/21 maxlen: 21
213.108.136.0/24 maxlen: 24
213.108.137.0/24 maxlen: 24
213.108.138.0/24 maxlen: 24
213.108.139.0/24 maxlen: 24
213.108.140.0/24 maxlen: 24
213.108.141.0/24 maxlen: 24
213.108.142.0/24 maxlen: 24
213.108.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:39:c9:10:42:b6:c0:6f:66:af:4f:56:03:1d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Validity
Not Before: Jan 2 17:53:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d1f2777b522e4cd134c20a538565aad3f392124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:f7:39:56:62:b6:cd:f8:b3:9e:b7:f3:06:
ad:7e:9a:81:b5:0a:45:20:29:15:a4:9e:b6:5d:5b:
72:9f:8b:bc:06:0b:04:ec:41:37:27:88:db:e6:e0:
29:61:3c:1a:87:1e:a5:ef:57:38:d2:4c:b3:88:26:
52:b6:ca:f0:2d:3f:a6:b7:1a:cb:1e:db:f7:ac:72:
6f:3a:1b:53:3a:d2:fc:a0:fc:e1:b0:0e:f4:16:dd:
fb:7d:df:a0:4d:ee:27:ce:b2:fa:3c:cd:02:7c:5c:
6c:68:6b:d6:ea:64:25:fa:38:95:b9:5c:ee:db:d1:
97:81:2c:e8:72:17:25:e9:f1:12:2e:bd:3f:58:60:
24:07:77:6e:0b:09:01:5f:21:1f:e9:29:a1:75:6f:
61:5c:fd:d8:98:b8:bb:0b:fa:e0:70:ed:db:bf:c7:
df:76:6f:6a:01:bb:39:ac:f7:ab:01:1c:fe:b7:ae:
c1:55:4f:7d:90:fb:8c:cc:19:1a:c7:d4:d5:88:54:
a0:6c:c7:b4:ad:81:9a:73:34:b8:7b:60:a6:7f:47:
70:ac:97:66:86:cf:ec:c4:a7:7f:91:29:e9:2a:48:
ed:24:23:41:71:67:1a:7d:9b:1f:8a:e9:bd:e6:42:
cb:0b:a0:73:8d:13:7e:c9:99:a8:a3:e3:db:8f:7d:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1F:27:77:B5:22:E4:CD:13:4C:20:A5:38:56:5A:AD:3F:39:21:24
X509v3 Authority Key Identifier:
keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/fR8nd7Ui5M0TTCClOFZarT85ISQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.248.0/22
213.108.136.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:da:f3:83:5f:ea:db:28:2f:af:10:85:19:6c:0b:3b:6a:5e:
72:97:3c:b0:a5:ff:b9:fe:68:ce:1b:a9:39:ff:ab:7e:84:ae:
82:3e:2c:2c:8e:d8:d3:a7:17:1a:c1:3c:96:8f:a6:36:ff:a2:
1e:cb:7c:24:6c:89:bc:80:49:29:6d:c0:78:41:0d:49:59:dc:
84:1c:9d:f5:9e:1d:fb:71:f6:35:0a:84:8d:9b:24:bf:ad:fb:
df:d9:12:54:87:82:52:77:ba:1d:49:f9:46:5f:f5:36:13:3e:
83:de:2c:e8:2d:57:77:64:2b:c7:07:d3:a3:46:cd:df:47:2f:
83:ac:d5:a7:7f:fd:10:4b:6b:d0:c5:5b:bd:a4:a5:c2:6c:67:
72:5f:51:cb:40:68:57:49:6b:06:76:3a:c7:09:0c:40:b1:06:
08:f6:9a:6f:07:dd:3b:95:52:f6:aa:1d:f6:61:c9:a5:b8:fd:
4d:a2:bf:83:21:ad:4e:9a:a1:5d:93:bd:6a:b5:80:c1:59:02:
5d:8a:22:d7:78:6f:39:0e:e1:5e:92:9a:87:e7:6a:95:c7:29:
12:b5:0c:4c:bc:88:68:14:92:be:a3:82:4e:0b:9d:0c:8f:ff:
40:ab:12:13:55:f0:65:fc:1c:00:c4:bf:9a:a3:9f:dd:dc:6a:
7f:46:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:22 2025 by rpki-client