Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/9VHnso7HKhi305msO0E0LZUPW1k.roa
File: 9VHnso7HKhi305msO0E0LZUPW1k.roa (raw, json)
Hash identifier: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=
Subject key identifier: F5:51:E7:B2:8E:C7:2A:18:B7:D3:99:AC:3B:41:34:2D:95:0F:5B:59
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 019426D959F67523589E1EF4B7DC65CB9960
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/9VHnso7HKhi305msO0E0LZUPW1k.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199939
IP address blocks: 45.133.248.0/23 maxlen: 24
45.139.120.0/23 maxlen: 24
89.19.60.0/22 maxlen: 24
141.98.2.0/23 maxlen: 24
185.42.8.0/22 maxlen: 24
185.156.160.0/22 maxlen: 24
212.237.253.0/24 maxlen: 24
2a01:5860::/32 maxlen: 48
2a0d:bb40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:59:f6:75:23:58:9e:1e:f4:b7:dc:65:cb:99:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f551e7b28ec72a18b7d399ac3b41342d950f5b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:cd:c7:97:ef:bc:74:d9:b7:47:0d:3f:4d:
e4:f8:70:47:51:d4:8e:4f:db:7b:54:2f:03:fc:be:
b8:7d:ac:70:30:17:7d:ba:98:1b:e1:bb:ac:25:4a:
62:c4:a5:d9:2d:28:24:d8:7e:11:56:f7:a5:53:6b:
85:87:76:e2:b9:79:f5:f1:9a:58:75:7d:e2:52:92:
6e:03:24:47:48:00:c2:de:ca:98:de:7e:d3:94:d1:
e5:df:d0:74:5d:e7:39:fd:72:f6:74:20:12:12:40:
68:d5:ae:5a:c2:fd:ef:f2:13:2c:c9:d2:a4:5b:1e:
f3:7e:f9:3f:a7:d5:6c:76:b9:32:d9:f4:ed:0b:4b:
65:a7:e3:30:51:48:f2:c9:7f:1b:15:5c:69:8a:73:
d9:0c:b6:ce:7b:01:02:da:9b:8e:11:c6:fb:48:ab:
19:77:74:c0:52:b4:2a:34:82:38:fa:a2:2b:46:9c:
1a:73:a4:ca:34:ba:f1:a9:40:ec:9c:b6:8c:a2:5b:
52:d4:24:d6:2b:11:2e:48:3f:e5:3c:b1:17:02:b6:
09:f7:56:dd:cc:a2:38:d8:3a:7b:f2:2b:51:e5:51:
c0:2d:07:37:9e:82:9a:62:39:cf:f7:06:93:a8:9b:
4a:61:04:db:fb:51:32:0c:84:c9:53:02:f1:c4:21:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:51:E7:B2:8E:C7:2A:18:B7:D3:99:AC:3B:41:34:2D:95:0F:5B:59
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/9VHnso7HKhi305msO0E0LZUPW1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.248.0/23
45.139.120.0/23
89.19.60.0/22
141.98.2.0/23
185.42.8.0/22
185.156.160.0/22
212.237.253.0/24
IPv6:
2a01:5860::/32
2a0d:bb40::/32
Signature Algorithm: sha256WithRSAEncryption
21:3b:14:f1:03:76:90:18:e6:e3:e8:61:a9:1f:21:b6:26:a5:
f9:cf:4e:eb:85:a0:37:54:6c:fd:4e:d5:7b:d7:36:72:5e:42:
2f:06:67:1a:7c:70:e2:07:5b:b1:a4:7c:9e:76:9b:e1:fe:a9:
be:e1:3a:b6:3f:cf:e2:57:ec:6e:89:57:05:cc:2a:fe:76:a2:
96:31:7c:e9:49:e9:3d:0c:d8:24:a8:e4:d0:a1:2b:9c:7f:bb:
95:22:70:5f:21:8d:85:d8:a9:02:7f:0b:ed:e0:2c:f5:d5:73:
5a:f9:a0:00:18:2e:53:a6:f9:9a:6c:56:bc:77:96:0d:40:ea:
58:1d:5a:8d:e8:1f:93:92:a4:ae:17:95:92:4e:a0:8b:46:2e:
f1:46:e5:b1:97:33:d2:2f:be:47:37:d8:97:75:4a:90:ed:f0:
79:be:db:aa:54:35:ad:74:e0:c8:79:e3:3e:26:9a:ec:4d:fa:
72:c0:69:2d:46:dd:5b:68:42:a0:8f:d5:3d:3e:cc:9c:af:2f:
89:d5:24:f6:4e:b2:8d:8e:4d:e8:36:b8:6f:c7:6e:22:3a:91:
91:3a:2c:67:26:68:56:41:a9:4b:b5:a1:6d:92:38:76:b7:f7:
55:de:34:52:6b:b6:5d:fb:c3:f9:07:01:19:6f:cf:39:15:5f:
27:68:6a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:44 2025 by rpki-client