Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa
File: pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa (raw, json)
Hash identifier: WRGBj9YhrJQ6r6myfQ5P/R+NIt879XmbiNbiLcGeJP4=
Subject key identifier: A6:3C:77:AC:D4:D9:73:CC:E0:C5:67:EE:C1:70:4E:5E:04:B7:B2:A9
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 019425FDBE9E319499C953476D73868526C0
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28717
IP address blocks: 5.83.24.0/21 maxlen: 21
78.111.160.0/20 maxlen: 20
88.212.64.0/18 maxlen: 18
91.143.112.0/20 maxlen: 20
94.18.0.0/16 maxlen: 16
109.202.128.0/19 maxlen: 19
176.222.232.0/21 maxlen: 21
188.120.64.0/19 maxlen: 19
212.60.96.0/19 maxlen: 19
2a01:4f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:be:9e:31:94:99:c9:53:47:6d:73:86:85:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a63c77acd4d973cce0c567eec1704e5e04b7b2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:3d:c7:9f:e6:b5:86:61:fb:02:e7:e2:e9:
a8:58:de:44:0c:ff:53:15:f0:16:e8:d4:71:3a:87:
9c:74:09:24:b8:b3:be:9f:a3:c8:c5:f8:ad:9e:19:
60:e9:81:d6:75:6d:31:9c:80:a0:ca:30:bf:ee:f0:
2b:f7:f7:dd:e5:5e:10:d0:6b:a0:1b:77:3c:4b:fc:
75:bd:a7:77:99:83:a0:9a:74:51:81:31:86:39:32:
bc:3c:57:cf:a7:f6:84:f4:24:8a:74:de:f0:be:fe:
57:f0:19:30:b5:1e:cc:83:a8:0b:de:92:85:9c:25:
35:b7:5e:6a:0c:9a:39:27:83:05:77:f3:3a:bd:92:
10:1c:97:fd:b9:94:f9:4a:7a:d6:b3:23:a6:0f:ee:
aa:b3:72:04:94:c3:fa:c5:5d:71:c0:8d:ba:3c:42:
33:8a:aa:a5:7b:97:18:5a:4b:f0:15:6e:be:fd:9b:
04:00:1a:12:87:67:d7:42:2a:a0:ec:6b:16:7d:27:
08:ee:1b:ca:e9:c5:67:64:f3:c5:4e:f0:ce:ba:bf:
fe:9f:17:8a:bc:0a:28:ed:a6:9b:73:6e:95:db:d2:
e6:52:dd:40:60:78:59:39:04:0c:00:71:97:5b:e1:
72:8c:33:13:cc:53:26:92:14:66:f4:f2:41:7e:4d:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3C:77:AC:D4:D9:73:CC:E0:C5:67:EE:C1:70:4E:5E:04:B7:B2:A9
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.24.0/21
78.111.160.0/20
88.212.64.0/18
91.143.112.0/20
94.18.0.0/16
109.202.128.0/19
176.222.232.0/21
188.120.64.0/19
212.60.96.0/19
IPv6:
2a01:4f0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:bb:b0:db:fb:4f:1d:9e:36:ec:2b:2e:5d:dc:3a:75:5c:06:
13:6e:8f:d2:b0:6f:82:a5:04:e1:c5:10:20:34:53:2c:13:e3:
c1:e9:df:f4:56:91:2d:5d:57:aa:a5:db:c0:2c:00:7a:68:5c:
04:97:13:7d:b0:9e:ad:bb:6d:05:55:d1:a3:3f:94:b3:14:d4:
08:4e:af:c4:7c:46:9c:32:8b:26:a1:da:28:cd:6c:2d:fd:d8:
1a:6a:e1:a6:ff:4b:c4:62:ea:34:ee:f2:bd:3f:6f:d4:54:3d:
ca:28:f2:74:ae:62:e6:21:92:53:f0:01:64:e5:93:4b:a3:ab:
4e:ad:94:93:51:c6:4d:c4:fc:5a:89:be:5d:81:ba:0c:f7:bc:
85:0b:d2:38:d3:e6:2b:88:fa:24:7c:80:32:d1:92:50:2b:3c:
1c:fb:22:07:2e:c5:ed:e3:14:0c:5e:66:76:90:1f:7b:55:c7:
4a:83:30:18:d9:08:20:bc:f9:e3:ca:59:bd:4f:47:cb:97:6b:
0f:40:b7:be:cf:3b:f9:7a:1b:a9:32:52:ab:af:de:98:86:d4:
b3:76:fe:3e:65:b2:38:24:82:99:70:7a:8d:ea:ec:31:53:c5:
61:f4:0d:47:49:f9:d3:15:14:8b:26:c5:1a:64:5c:b6:97:07:
70:fb:c1:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:22 2025 by rpki-client