Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/cYWtfR4pbfpUeZ8Chqkw3bKeaec.roa
File: cYWtfR4pbfpUeZ8Chqkw3bKeaec.roa (raw, json)
Hash identifier: WLIPM153NdwWVkC7bbTckQ/htiEa+xgCSdtU/UiAsKo=
Subject key identifier: 71:85:AD:7D:1E:29:6D:FA:54:79:9F:02:86:A9:30:DD:B2:9E:69:E7
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 019421B241E6D6D79EBE9983715DC900A2BE
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/cYWtfR4pbfpUeZ8Chqkw3bKeaec.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49813
IP address blocks: 5.63.128.0/21 maxlen: 21
5.63.131.0/24 maxlen: 24
5.63.132.0/22 maxlen: 24
5.63.134.0/24 maxlen: 24
109.105.128.0/20 maxlen: 20
109.105.133.0/24 maxlen: 24
109.105.135.0/24 maxlen: 24
109.105.137.0/24 maxlen: 24
109.105.138.0/24 maxlen: 24
109.105.139.0/24 maxlen: 24
109.105.144.0/21 maxlen: 24
109.105.144.0/23 maxlen: 24
109.105.144.0/24 maxlen: 24
109.105.146.0/24 maxlen: 24
109.105.147.0/24 maxlen: 24
109.105.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:41:e6:d6:d7:9e:be:99:83:71:5d:c9:00:a2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7185ad7d1e296dfa54799f0286a930ddb29e69e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:a1:d8:77:3c:b6:95:10:3a:d8:c5:62:32:
ec:66:78:c9:ef:74:12:5f:a5:66:05:a9:5a:a7:50:
6a:f7:da:d2:40:4e:b2:dd:32:1c:7b:73:29:c7:72:
bc:10:17:e4:a4:69:bd:3f:df:c8:5f:53:11:4c:96:
0d:1a:3b:f2:88:31:17:46:7d:1e:a0:61:a4:53:6d:
c0:1e:2a:7f:6b:63:d4:07:48:3f:7a:dc:d4:35:11:
e8:ce:ee:a9:bd:b5:23:aa:50:ea:3e:0f:c3:a4:83:
17:b5:e7:ce:57:48:d9:2a:4c:ff:f4:3a:61:83:fa:
d2:cd:ba:d9:2b:4c:18:ac:e4:ba:18:e1:28:53:41:
97:95:22:ab:c7:8f:42:ae:29:b1:dd:ff:bb:3c:35:
8c:06:20:9f:94:70:18:80:0e:dd:eb:d4:a6:bb:56:
8b:37:f2:11:f2:80:09:46:ad:2d:87:d5:d1:e8:dc:
87:33:5a:46:43:01:7b:70:69:1b:0c:da:be:85:ac:
23:5d:4f:2d:c0:98:91:03:84:a2:84:3b:1a:ac:56:
de:7a:df:6c:21:ab:98:5e:87:8a:8e:62:3e:6d:9f:
14:27:3a:21:65:bb:fe:0c:64:b0:65:47:0e:5e:5b:
6d:b7:fa:87:c4:86:18:f1:16:04:07:37:2c:3c:d4:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:85:AD:7D:1E:29:6D:FA:54:79:9F:02:86:A9:30:DD:B2:9E:69:E7
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/cYWtfR4pbfpUeZ8Chqkw3bKeaec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.128.0/21
109.105.128.0-109.105.151.255
Signature Algorithm: sha256WithRSAEncryption
64:8a:a3:0a:34:8b:6d:62:6e:4a:73:a4:2e:28:b3:b1:fd:4e:
a8:92:34:20:fc:fe:26:c1:f2:02:aa:ed:d9:16:ba:52:eb:9e:
c1:06:4e:79:e6:42:e0:b9:c0:40:a2:9d:87:97:c2:a0:13:ee:
41:28:7d:f8:63:96:40:7a:73:e9:0a:45:e1:c6:1e:89:75:de:
c1:c9:92:fb:61:c6:08:0b:0a:ce:25:a4:ad:b0:90:b9:f6:a7:
f5:61:e3:f6:32:1e:2b:ab:25:e7:2b:8f:49:f1:fe:61:db:cf:
0a:40:78:2e:f0:61:32:43:70:9f:10:84:f5:05:a0:30:29:d9:
a6:17:8f:6a:13:09:6e:59:13:a2:e0:2c:50:22:cb:48:18:5b:
f0:4b:6c:a6:1e:ed:c3:a5:4b:50:6d:62:b5:4c:c2:30:cd:e8:
67:bf:7c:d5:e3:af:03:12:68:05:8b:c4:2f:00:99:e4:15:8b:
19:a8:a4:9e:df:9f:12:22:c8:39:cb:b1:5d:ef:b5:cb:be:08:
7c:f2:6d:c7:b6:8c:40:63:ee:9d:d9:e6:6e:6b:3a:fe:1b:6c:
1c:66:33:2a:ef:ab:bb:6b:a1:f2:40:87:67:39:af:cd:a1:e2:
a6:89:9c:a2:2b:e9:2b:5f:47:0d:27:0b:98:95:20:f5:22:ba:
fc:21:d7:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:20 2025 by rpki-client on console.sobornost.net