Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/4K24stKfDp1H3GNlLGKVCADGEk8.roa
File: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (raw, json)
Hash identifier: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=
Subject key identifier: E0:AD:B8:B2:D2:9F:0E:9D:47:DC:63:65:2C:62:95:08:00:C6:12:4F
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 019424B3C22BD0C875973FFDF7A08673A3CA
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/4K24stKfDp1H3GNlLGKVCADGEk8.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58262
IP address blocks: 5.61.24.0/24 maxlen: 24
5.61.25.0/24 maxlen: 24
5.61.26.0/24 maxlen: 24
5.61.28.0/24 maxlen: 24
5.61.29.0/24 maxlen: 24
5.61.30.0/24 maxlen: 24
5.61.31.0/24 maxlen: 24
92.119.57.0/24 maxlen: 24
92.119.58.0/24 maxlen: 24
185.73.112.0/24 maxlen: 24
185.73.114.0/24 maxlen: 24
2a05:2d80::/48 maxlen: 48
2a05:2d80:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c2:2b:d0:c8:75:97:3f:fd:f7:a0:86:73:a3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0adb8b2d29f0e9d47dc63652c62950800c6124f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:27:d6:6b:36:32:80:2e:ec:38:cd:94:06:
dd:93:f9:bc:f2:76:24:01:8d:c6:22:a7:9a:d1:11:
cb:20:7b:fd:8d:cb:9e:c3:bb:3a:b9:13:56:e1:98:
cf:a8:6a:f3:46:36:4e:c9:d5:f3:95:d6:dd:05:58:
10:40:77:5a:2c:25:ec:ae:17:31:68:9b:9e:1e:49:
fd:f6:11:11:a5:93:62:21:c2:f8:99:e5:1b:43:c0:
bd:9f:fe:7d:43:9b:87:7c:c7:24:fc:32:09:ef:15:
8f:1a:df:5a:44:8f:fe:91:63:06:b0:85:3b:13:64:
ed:47:73:ae:a8:fc:21:78:ac:02:a9:45:b3:41:3b:
6e:03:8c:af:87:7b:b3:cb:05:de:c5:0b:cd:d9:7d:
9a:29:27:06:5e:4b:21:e8:cc:a9:c3:c3:f7:34:a2:
67:2f:4d:7b:3a:1b:7c:13:fb:d1:4b:7a:3a:87:d4:
18:3c:71:89:79:45:6c:fb:d7:92:27:89:96:4f:fe:
a2:d0:b5:cc:f7:57:2c:dd:29:9f:16:17:5a:35:c5:
ab:b5:18:a7:1c:45:7f:82:db:0b:37:fe:fa:5a:26:
3a:2a:a8:9c:54:7c:67:be:87:1a:d6:e5:42:de:25:
84:8f:64:9b:6a:9c:4e:2e:21:26:cd:42:d0:ed:b8:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AD:B8:B2:D2:9F:0E:9D:47:DC:63:65:2C:62:95:08:00:C6:12:4F
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/4K24stKfDp1H3GNlLGKVCADGEk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.24.0-5.61.26.255
5.61.28.0/22
92.119.57.0-92.119.58.255
185.73.112.0/24
185.73.114.0/24
IPv6:
2a05:2d80::/47
Signature Algorithm: sha256WithRSAEncryption
07:77:71:f8:fb:90:11:ed:c2:fe:b2:fa:0d:f1:df:b8:17:8e:
0d:28:4f:99:f8:80:ff:ab:62:99:22:7c:71:25:d4:03:99:0d:
c3:73:37:0c:86:ec:be:c6:0d:bd:aa:32:70:6b:22:b2:72:8d:
98:d6:65:c0:94:da:86:fa:30:48:c3:22:57:1f:03:a8:1c:70:
05:29:46:42:4a:c8:d2:e4:2b:fb:4e:96:18:66:fc:2b:be:87:
27:0c:0d:b9:b4:97:0e:52:6c:fc:c7:c8:0b:f3:36:8c:a0:8f:
cb:3d:44:7b:ce:da:7a:71:b8:38:b1:2d:06:3d:f2:d6:25:ca:
88:4a:97:bc:b2:03:51:ab:ae:a4:62:29:8e:ee:68:02:27:e0:
ba:64:f5:eb:63:f9:4d:55:aa:28:64:b1:40:fc:ba:dc:81:24:
6f:dc:24:d4:9a:ba:69:7e:c1:bb:94:5f:82:16:d4:21:e3:5a:
ca:56:f4:3d:7f:05:5a:9f:55:ba:c5:c2:74:f7:fb:92:fb:63:
13:82:92:05:b1:fb:20:62:01:96:33:59:13:cc:e2:c2:f4:24:
0c:30:69:38:58:e4:b1:73:8a:bb:f8:ca:d8:bd:63:8b:1e:4b:
a6:ba:75:e4:9b:36:27:3a:35:09:51:d6:e9:4c:0e:f9:da:f1:
2a:60:73:dd
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZQks8Ir0Mh1lz/996CGc6PKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzJjZDVkZjczMjM5NTdhYjg3YzA3ZjVjZGQxNWM5MWVm
ZmM4ZDUwHhcNMjUwMTAyMDE0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGFkYjhiMmQyOWYwZTlkNDdkYzYzNjUyYzYyOTUwODAwYzYxMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/sn1ms2MoAu7DjNlAbdk/m88nYk
AY3GIqea0RHLIHv9jcuew7s6uRNW4ZjPqGrzRjZOydXzldbdBVgQQHdaLCXsrhcx
aJueHkn99hERpZNiIcL4meUbQ8C9n/59Q5uHfMck/DIJ7xWPGt9aRI/+kWMGsIU7
E2TtR3OuqPwheKwCqUWzQTtuA4yvh3uzywXexQvN2X2aKScGXksh6Mypw8P3NKJn
L017Oht8E/vRS3o6h9QYPHGJeUVs+9eSJ4mWT/6i0LXM91cs3SmfFhdaNcWrtRin
HEV/gtsLN/76WiY6KqicVHxnvoca1uVC3iWEj2SbapxOLiEmzULQ7bgm/QIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFOCtuLLSnw6dR9xjZSxilQgAxhJPMB8GA1UdIwQY
MBaAFDByzV33MjlXq4fAf1zdFcke/8jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYt
NWU5NzQzNzc2MDBjLzEvNEsyNHN0S2ZEcDFIM0dObExHS1ZDQURHRWs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYtNWU5NzQzNzc2MDBj
LzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA0BAIAATAuMAwDBAMFPRgD
BAAFPRoDBAIFPRwwDAMEAFx3OQMEAFx3OgMEALlJcAMEALlJcjAPBAIAAjAJAwcB
KgUtgAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAHd3H4+5AR7cL+svoN8d+4F44NKE+Z
+ID/q2KZInxxJdQDmQ3DczcMhuy+xg29qjJwayKyco2Y1mXAlNqG+jBIwyJXHwOo
HHAFKUZCSsjS5Cv7TpYYZvwrvocnDA25tJcOUmz8x8gL8zaMoI/LPUR7ztp6cbg4
sS0GPfLWJcqISpe8sgNRq66kYimO7mgCJ+C6ZPXrY/lNVaooZLFA/LrcgSRv3CTU
mrppfsG7lF+CFtQh41rKVvQ9fwVan1W6xcJ09/uS+2MTgpIFsfsgYgGWM1kTzOLC
9CQMMGk4WOSxc4q7+MrYvWOLHkumunXkmzYnOjUJUdbpTA752vEqYHPd
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:56 2025 by rpki-client