Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/GEGTqowZtUkTUv1qAcKltfL_Qqo.roa
File: GEGTqowZtUkTUv1qAcKltfL_Qqo.roa (raw, json)
Hash identifier: Nfex2D/6Jrlc2ccEC/IAJ9RTJYtQzpbhFMc0JoM+FZA=
Subject key identifier: 18:41:93:AA:8C:19:B5:49:13:52:FD:6A:01:C2:A5:B5:F2:FF:42:AA
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCD878A9E07DCF240C928E4ADD8877
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/GEGTqowZtUkTUv1qAcKltfL_Qqo.roa
Signing time: Thu 02 Jan 2025 07:48:34 +0000
ROA not before: Thu 02 Jan 2025 07:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 5.182.192.0/24 maxlen: 24
31.132.52.0/24 maxlen: 24
45.67.140.0/24 maxlen: 24
45.248.52.0/24 maxlen: 24
45.248.55.0/24 maxlen: 24
92.249.31.0/24 maxlen: 24
94.154.177.0/24 maxlen: 24
94.154.180.0/23 maxlen: 23
94.154.182.0/24 maxlen: 24
147.78.205.0/24 maxlen: 24
147.78.206.0/24 maxlen: 24
162.218.90.0/24 maxlen: 24
162.218.95.0/24 maxlen: 24
185.187.212.0/24 maxlen: 24
185.205.205.0/24 maxlen: 24
185.230.122.0/24 maxlen: 24
185.253.122.0/24 maxlen: 24
192.145.71.0/24 maxlen: 24
212.60.15.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:d8:78:a9:e0:7d:cf:24:0c:92:8e:4a:dd:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=184193aa8c19b5491352fd6a01c2a5b5f2ff42aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:c9:5f:31:7c:b7:80:76:db:e5:53:cc:fa:
6b:e7:23:fa:e3:a2:39:ee:40:ff:a8:1b:d9:0f:a0:
bb:cc:35:de:6d:ff:e1:ae:7f:79:05:96:7c:18:49:
a0:1d:64:37:7b:03:51:89:94:eb:01:05:51:f0:5c:
fb:63:07:88:25:b1:b2:ef:81:4d:fa:79:1c:ad:94:
e1:5f:db:db:ef:48:43:5f:06:77:60:40:2a:4d:c8:
2f:3e:06:d3:77:ba:8e:7a:f5:09:0c:d1:f6:20:ca:
9e:05:65:8a:f8:cb:72:c5:0d:53:77:b9:97:c4:78:
ab:cb:99:1c:df:e3:bb:1a:24:c4:95:8c:c6:e3:e6:
60:ad:85:12:a3:5c:22:a4:82:c4:e1:2f:88:2c:0e:
ba:bb:85:a4:9c:18:19:ab:30:87:b7:b3:2f:48:4b:
bb:27:1b:bb:c1:da:40:3c:55:4a:b9:a8:41:0d:81:
c4:15:99:18:b0:d4:f4:22:96:81:1c:0f:76:0c:14:
e3:86:73:73:6f:47:09:04:d9:71:d2:d5:d2:dd:ae:
c0:1d:84:ef:96:81:c7:5c:3b:cd:6f:0e:9c:a5:0a:
26:60:76:cf:b4:60:b2:e0:2b:56:c8:ea:84:0e:74:
39:74:61:6b:82:0d:26:c3:09:f0:6a:95:da:42:0a:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:93:AA:8C:19:B5:49:13:52:FD:6A:01:C2:A5:B5:F2:FF:42:AA
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/GEGTqowZtUkTUv1qAcKltfL_Qqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.192.0/24
31.132.52.0/24
45.67.140.0/24
45.248.52.0/24
45.248.55.0/24
92.249.31.0/24
94.154.177.0/24
94.154.180.0-94.154.182.255
147.78.205.0-147.78.206.255
162.218.90.0/24
162.218.95.0/24
185.187.212.0/24
185.205.205.0/24
185.230.122.0/24
185.253.122.0/24
192.145.71.0/24
212.60.15.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b0:98:85:cb:3b:be:aa:da:76:96:4d:ae:81:77:40:f6:bb:
38:6b:1b:21:7b:dc:f9:5e:d9:6d:18:0d:1d:f4:57:e7:39:44:
3f:98:f4:92:f4:df:ee:d7:9e:82:63:6d:66:25:42:3e:05:bc:
18:74:2b:bc:ea:be:2e:be:20:83:8a:f1:d5:f2:62:d2:bc:2d:
ea:91:ca:17:9d:6e:e4:69:05:34:de:f6:7a:8e:07:d2:fa:01:
b1:22:4b:f2:26:2c:d6:ca:fa:32:29:2c:ef:c4:97:eb:ff:28:
12:f5:5e:fa:c3:62:79:bc:23:67:b5:53:9c:b3:81:15:fd:33:
9d:30:5a:41:e8:05:b9:30:f1:06:bb:d5:00:10:de:2c:74:90:
be:e7:31:77:25:a4:f5:35:41:fb:a8:20:38:94:c4:b7:c2:7a:
a3:1c:1b:47:87:e0:0b:65:03:a1:9a:6c:6f:07:88:c8:7e:c9:
95:f8:63:92:90:d6:f5:e7:61:b3:94:0b:34:29:05:5f:71:b8:
ec:44:99:3a:7d:a8:f3:7c:f6:58:cd:f8:7a:6c:4c:f6:37:38:
50:dd:eb:1d:0f:43:5a:a0:7f:0c:40:14:f8:c8:14:e6:26:ef:
c6:7f:18:b1:c2:c8:d6:91:b2:23:af:f2:a6:4d:18:2c:5b:05:
3b:36:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:00 2025 by rpki-client