Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa
File: VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa (raw, json)
Hash identifier: xI9AJIQruyMmhbpTp5z9YUSoSRn5ytxFSzSALijAUX4=
Subject key identifier: 55:44:C4:F4:EE:7F:86:AF:DB:55:9A:96:E3:D7:0A:F1:4C:A3:F5:BA
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 019422FBF80E75DA3AAF3E80C00A90C61C69
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203507
IP address blocks: 5.104.152.0/22 maxlen: 22
185.123.224.0/22 maxlen: 22
185.123.224.0/23 maxlen: 23
185.123.224.0/24 maxlen: 24
185.123.225.0/24 maxlen: 24
185.123.226.0/23 maxlen: 23
185.123.226.0/24 maxlen: 24
185.123.227.0/24 maxlen: 24
193.28.13.0/24 maxlen: 24
195.245.199.0/24 maxlen: 24
212.79.224.0/19 maxlen: 19
2a06:e380::/29 maxlen: 32
2a06:e380::/36 maxlen: 36
2a06:e380::/48 maxlen: 48
2a06:e380:1::/48 maxlen: 48
2a06:e380:8000::/36 maxlen: 36
2a06:e380:8000::/48 maxlen: 48
2a06:e380:8001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f8:0e:75:da:3a:af:3e:80:c0:0a:90:c6:1c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5544c4f4ee7f86afdb559a96e3d70af14ca3f5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:57:08:8a:89:a3:df:7b:28:58:1c:91:09:
49:5e:53:51:08:55:39:2d:48:d5:a7:54:e2:a9:83:
a4:f6:1c:dd:f4:ae:86:15:50:00:a5:27:57:4b:7e:
00:7b:01:9a:69:9f:1b:04:2a:d1:41:3a:43:76:30:
46:7e:38:f3:56:27:cd:18:b8:3b:4a:2c:c5:ea:7d:
f3:71:fa:97:ee:3b:bd:78:2f:04:fe:fa:2c:5e:9a:
6f:0a:4e:68:bc:33:55:13:c8:10:27:0f:7f:96:f0:
71:08:90:e1:25:f2:91:dd:d5:e7:f5:c9:26:26:aa:
29:3a:00:0a:b8:72:96:f4:a0:fb:9b:a6:dc:93:19:
56:c0:93:36:83:4c:74:84:60:41:11:36:75:ad:d2:
a3:a0:69:e9:d5:72:c1:08:13:4d:2d:2b:29:a8:cc:
ae:a9:fa:92:a7:24:41:73:df:9d:6b:eb:e2:54:a9:
93:f7:cf:d3:65:75:81:c3:c9:e7:a1:a6:44:e6:3d:
d4:87:7e:7a:0e:16:d5:8c:8b:3c:fa:7b:75:9c:fb:
1a:46:8e:d4:26:ea:4c:e7:89:79:12:1b:79:aa:3e:
f8:33:da:fc:a9:0c:42:e0:e8:87:2a:83:a4:9a:0e:
17:87:46:ad:d6:c4:6e:f8:76:d8:9b:ea:14:cb:eb:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:44:C4:F4:EE:7F:86:AF:DB:55:9A:96:E3:D7:0A:F1:4C:A3:F5:BA
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.152.0/22
185.123.224.0/22
193.28.13.0/24
195.245.199.0/24
212.79.224.0/19
IPv6:
2a06:e380::/29
Signature Algorithm: sha256WithRSAEncryption
80:5d:3a:4e:bd:4b:64:6b:78:5d:e9:ea:13:a2:be:41:4e:3e:
fd:fe:77:9f:7c:f9:48:a7:a2:68:bb:b1:c1:ab:03:99:4c:71:
e4:d9:61:58:1b:7b:81:30:95:4d:79:26:09:45:5b:41:76:08:
e8:9f:8e:4a:a7:10:24:42:3f:24:09:56:1a:89:37:51:9c:df:
e6:eb:82:ec:58:d5:a6:8d:85:ef:4f:67:af:b3:cf:bf:fd:a0:
9b:5b:1a:65:c9:13:fe:9f:6a:3a:8b:f2:f8:37:b1:f3:c1:ee:
b8:34:9c:52:73:66:08:2d:a7:99:60:4c:dc:2a:5b:63:c7:56:
48:2e:c6:59:6f:ee:b0:a8:07:3c:0f:c8:18:a4:c2:9a:6b:86:
03:81:40:2e:90:df:84:ed:f5:85:6c:10:88:07:50:f7:ed:a1:
f3:13:3d:28:92:ad:88:59:36:c2:4d:59:7e:f6:ef:e4:ed:fa:
fd:16:23:0b:3d:5b:15:19:2f:05:f9:c8:c6:07:9c:68:ca:0f:
e8:25:0d:1d:51:b8:81:66:c1:9a:54:38:51:9c:f1:41:d0:a5:
53:c0:dd:71:77:d5:42:10:13:89:ca:e1:a3:dd:fd:c3:c2:16:
cd:ff:1c:c1:4b:09:b4:bf:8d:25:17:46:05:39:ed:8b:2c:d7:
2d:d6:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net