
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5CikPgAp5jK6pSp3Js9BBzIPLTs.roa
File: 5CikPgAp5jK6pSp3Js9BBzIPLTs.roa (raw, json)
Hash identifier: 3KlXSk2A55yorEOG87Fyp/oyUbDybm4fyMBJebbovv0=
Subject key identifier: E4:28:A4:3E:00:29:E6:32:BA:A5:2A:77:26:CF:41:07:32:0F:2D:3B
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019421B1E5D18E3D355A84494396C0D9EDA2
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5CikPgAp5jK6pSp3Js9BBzIPLTs.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21416
IP address blocks: 62.76.253.0/24 maxlen: 24
212.193.104.0/24 maxlen: 24
212.193.105.0/24 maxlen: 24
212.193.106.0/24 maxlen: 24
212.193.107.0/24 maxlen: 24
212.193.108.0/24 maxlen: 24
212.193.109.0/24 maxlen: 24
212.193.110.0/24 maxlen: 24
212.193.111.0/24 maxlen: 24
212.193.112.0/24 maxlen: 24
212.193.113.0/24 maxlen: 24
212.193.114.0/24 maxlen: 24
212.193.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e5:d1:8e:3d:35:5a:84:49:43:96:c0:d9:ed:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e428a43e0029e632baa52a7726cf4107320f2d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:7a:54:1b:9c:51:ad:41:d7:71:be:bf:88:
52:18:9c:a0:7a:cd:3c:e1:f8:25:41:0c:c4:b6:ac:
3f:8f:ba:b0:3d:21:ad:7b:ee:50:9a:ef:86:ac:e2:
b4:68:79:1b:e1:be:34:59:e0:ac:2d:be:51:b0:73:
cd:96:bc:8e:01:99:3d:1d:d6:b5:88:e2:b4:33:ab:
46:e3:a2:77:32:8c:43:69:43:f9:a1:ed:1d:98:c4:
03:e1:4c:7f:d6:c2:e4:2a:d6:0b:60:75:cf:dc:32:
c6:73:ff:02:84:81:2c:6d:99:6a:2e:c5:78:f6:d7:
aa:ce:a3:9d:d3:32:80:e9:4c:80:2b:d0:fa:a9:73:
e7:6f:b9:12:80:c5:05:9b:b5:8b:ae:68:8a:b9:c6:
f0:59:67:7c:7d:a5:7b:56:dd:7b:dd:10:e8:7d:ad:
35:1a:d5:cf:e1:73:13:a4:01:d4:82:2e:c1:45:81:
fe:79:cc:99:43:23:c0:9c:0c:4d:2b:3f:02:a4:1f:
05:f5:bf:1c:37:1b:ea:f9:ff:5e:56:99:b6:5f:1b:
d2:20:88:19:3e:2d:27:61:3f:57:da:a4:1e:f3:30:
5b:5d:2f:25:5d:85:0f:61:11:2e:72:07:d6:9b:47:
4a:3e:a5:97:b3:33:00:74:6d:c5:e0:ab:31:a6:3c:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:28:A4:3E:00:29:E6:32:BA:A5:2A:77:26:CF:41:07:32:0F:2D:3B
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5CikPgAp5jK6pSp3Js9BBzIPLTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.253.0/24
212.193.104.0-212.193.115.255
Signature Algorithm: sha256WithRSAEncryption
5f:09:0a:d6:f5:4f:7d:3a:3f:0a:b2:2c:98:fa:24:8a:f8:b4:
fe:f4:12:57:e4:d7:17:6a:87:0e:83:c0:12:81:c9:ab:52:99:
35:99:4a:a8:2c:11:a1:f3:38:cf:29:eb:b3:29:12:e8:32:30:
1f:30:36:07:b4:e8:2e:2c:96:0b:21:7c:c1:3f:88:b8:21:47:
8c:a1:8e:6e:bb:de:50:0e:e7:5f:a0:cb:38:f5:25:4f:13:22:
16:fd:e5:b0:e8:df:83:38:76:f2:b7:bb:03:48:d8:36:23:34:
d3:7e:e9:aa:4b:e8:25:92:41:16:d5:53:68:11:fd:2e:a4:04:
e9:59:a8:bd:31:a0:0f:67:c5:41:12:eb:aa:ba:ed:a8:76:82:
e6:0e:5b:78:a9:5b:9c:17:9b:6d:56:f8:bf:89:b0:22:6b:b8:
b6:7a:a9:07:a0:93:00:61:db:da:37:c0:70:ee:b5:62:02:b7:
4e:65:c7:b9:8c:c8:a9:bd:a7:a2:82:8c:0f:54:df:37:ee:d1:
f0:24:1e:e4:b7:6a:b8:6d:f0:24:f1:0b:ed:13:a9:e6:5c:c6:
a5:69:14:58:91:bd:aa:63:f6:7c:34:50:a2:3f:a4:b7:53:b8:
cd:d7:af:a0:82:74:aa:aa:70:6d:a7:da:8e:c2:de:67:05:1c:
42:60:60:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:19 2025 by rpki-client