Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/n5GsmZ_Cote79PaOH4IhSX3Qs9s.roa
File: n5GsmZ_Cote79PaOH4IhSX3Qs9s.roa (raw, json)
Hash identifier: 7cRxQakTgkPylEmCOTuvsg1V1569OTHimK27bhs28Vw=
Subject key identifier: 9F:91:AC:99:9F:C2:A2:D7:BB:F4:F6:8E:1F:82:21:49:7D:D0:B3:DB
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 0194282351CFD1B46D06F89366BDF2704CEA
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/n5GsmZ_Cote79PaOH4IhSX3Qs9s.roa
Signing time: Thu 02 Jan 2025 17:49:50 +0000
ROA not before: Thu 02 Jan 2025 17:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209523
IP address blocks: 5.198.192.0/19 maxlen: 19
5.198.193.0/24 maxlen: 24
45.158.68.0/22 maxlen: 22
185.97.140.0/22 maxlen: 22
185.97.140.0/24 maxlen: 24
185.97.141.0/24 maxlen: 24
2a02:e58::/32 maxlen: 32
2a02:e58:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:51:cf:d1:b4:6d:06:f8:93:66:bd:f2:70:4c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Jan 2 17:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f91ac999fc2a2d7bbf4f68e1f8221497dd0b3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:c3:d9:d2:72:b7:eb:1b:93:3a:c9:fe:b2:
e0:ba:ea:c1:8a:cd:62:f5:91:de:85:7f:94:f4:c8:
55:27:96:7a:50:ff:d5:17:34:fb:b0:af:96:26:05:
9b:4f:dd:5e:58:5e:84:1d:14:bf:f9:7a:43:8c:93:
21:0a:1d:86:c5:6f:b5:df:13:91:7c:95:05:48:2f:
c6:a7:26:6e:b0:19:56:b7:6f:14:59:07:25:a4:8f:
3f:08:af:ab:c8:f3:e3:f6:be:d8:54:e3:03:2a:96:
97:47:e9:99:26:2f:24:b7:8f:f1:c0:c1:aa:41:94:
36:32:1b:77:54:5e:69:d8:a7:39:bd:e2:1d:30:97:
96:34:17:3a:82:91:99:19:52:63:e9:eb:97:e0:19:
d6:e9:bc:4b:e0:e6:68:81:40:8f:ae:4c:89:6b:72:
15:ec:37:32:91:d2:c0:76:ed:7c:12:56:e8:1b:0d:
fc:92:d8:85:94:69:25:67:76:fa:76:8e:88:ff:f8:
b2:1a:cb:6e:85:10:02:6e:2e:60:0c:d8:18:8b:ed:
88:1f:fd:76:84:b4:0d:b7:93:41:9a:af:86:90:d8:
90:6a:27:ed:f3:99:b4:3e:bc:4c:e8:4b:f2:cd:2c:
78:3e:92:ed:08:c2:6f:36:31:e6:2f:6b:5a:f4:5a:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:AC:99:9F:C2:A2:D7:BB:F4:F6:8E:1F:82:21:49:7D:D0:B3:DB
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/n5GsmZ_Cote79PaOH4IhSX3Qs9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.192.0/19
45.158.68.0/22
185.97.140.0/22
IPv6:
2a02:e58::/32
Signature Algorithm: sha256WithRSAEncryption
4b:31:e9:15:8c:2f:d9:d3:29:fa:29:ab:43:e2:ca:22:be:c3:
51:11:7f:87:01:b3:92:70:ba:c8:5b:b9:1c:22:46:d4:e9:bf:
20:85:f1:ed:16:c1:41:dd:e3:88:6f:2a:0c:cc:d4:71:d2:d7:
0a:ff:af:3c:85:86:83:9a:89:89:56:95:40:b5:29:60:fd:02:
6e:ec:16:d7:1a:a0:b0:55:20:b7:d9:1d:4a:1a:43:7e:b7:19:
cd:a1:0a:a4:25:30:98:d5:d7:c2:a9:1c:38:14:2d:88:c2:77:
6e:f3:df:91:d5:39:9e:e1:3a:6a:7e:09:b7:af:91:78:ee:a6:
4b:80:0f:6a:d3:11:1c:fe:35:d0:54:ca:fe:51:de:bf:3f:93:
f3:63:c1:e3:06:a6:84:85:35:3c:db:86:b7:86:57:b1:ed:2f:
96:e8:74:8d:83:4f:c5:72:57:e3:6e:93:4e:8e:11:6b:42:3e:
47:ab:b0:7e:d2:5f:58:a4:93:3e:6f:02:fc:60:27:8c:3d:72:
08:f3:20:d9:ba:bb:98:5d:cd:e3:62:aa:3b:45:0f:bf:e9:b6:
da:e2:0b:d9:a3:a2:f8:bd:97:f0:3a:c8:a5:56:50:f0:84:b7:
8b:3e:69:63:3d:c6:a6:cd:4b:8c:cc:e7:2d:37:3e:48:c4:7c:
bf:cb:1d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:45 2025 by rpki-client