Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/5gefhPupXGMjzsgq0OKOkBlguf0.roa
File: 5gefhPupXGMjzsgq0OKOkBlguf0.roa (raw, json)
Hash identifier: IdihGOA1nFuPlzif6mX/sdPmuX9pgoo7t01a9txWbZ0=
Subject key identifier: E6:07:9F:84:FB:A9:5C:63:23:CE:C8:2A:D0:E2:8E:90:19:60:B9:FD
Certificate issuer: /CN=5af4de6e73c8e053cb640b74d2b912abd90b0580
Certificate serial: 0194228E1A627AE9937F148F00B8C2CAFD5E
Authority key identifier: 5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/5gefhPupXGMjzsgq0OKOkBlguf0.roa
Signing time: Wed 01 Jan 2025 15:48:45 +0000
ROA not before: Wed 01 Jan 2025 15:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44795
IP address blocks: 62.128.160.0/19 maxlen: 19
62.128.168.0/21 maxlen: 21
62.128.168.0/22 maxlen: 22
62.128.172.0/22 maxlen: 22
82.214.192.0/18 maxlen: 18
82.214.210.0/24 maxlen: 24
82.214.240.0/21 maxlen: 21
82.214.240.0/22 maxlen: 22
82.214.244.0/22 maxlen: 22
128.65.64.0/19 maxlen: 24
185.117.52.0/22 maxlen: 22
195.238.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1a:62:7a:e9:93:7f:14:8f:00:b8:c2:ca:fd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af4de6e73c8e053cb640b74d2b912abd90b0580
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6079f84fba95c6323cec82ad0e28e901960b9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:ab:1a:d5:6f:6d:2e:5b:4e:9b:a4:a6:dd:
52:2c:7f:52:08:9c:a9:60:dc:c9:9f:70:6a:ef:0a:
dd:ea:c4:6e:80:e8:bd:69:56:f4:f6:4f:c9:74:2b:
79:df:29:b3:18:87:7b:1b:93:86:7c:92:c9:a7:bd:
2c:75:07:0a:21:f3:bc:6a:11:5b:0b:97:eb:b4:95:
cf:d8:ed:de:98:a2:ea:17:a8:74:f4:f3:00:1b:56:
fb:18:9c:21:8c:84:bd:fd:6b:6c:7b:02:5d:7b:51:
b0:87:5a:68:ff:56:3b:9d:cf:c3:99:a8:ba:af:a2:
31:af:bb:f9:77:ed:5e:ce:cd:5e:ac:fa:74:04:7f:
23:6a:ac:fe:f2:1c:c3:55:6a:9c:ec:e1:04:52:0f:
40:3d:5d:41:47:b6:86:24:35:ad:6b:2f:d1:21:cd:
a8:dd:ec:4a:a6:54:9c:27:88:54:dc:93:ec:e4:50:
5b:b9:c5:1e:c0:0e:d3:54:dc:b2:7d:b0:17:d3:89:
a4:b3:09:a9:8a:8e:f1:48:af:9c:71:cd:38:39:a7:
41:88:b3:3a:17:bf:19:c3:0a:64:b3:84:7c:08:85:
35:c2:8b:cd:ca:f7:69:68:fa:9d:ba:37:c9:2d:63:
ab:76:eb:6e:16:83:1b:e8:22:11:24:d5:33:09:bd:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:07:9F:84:FB:A9:5C:63:23:CE:C8:2A:D0:E2:8E:90:19:60:B9:FD
X509v3 Authority Key Identifier:
keyid:5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/5gefhPupXGMjzsgq0OKOkBlguf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.128.160.0/19
82.214.192.0/18
128.65.64.0/19
185.117.52.0/22
195.238.32.0/19
Signature Algorithm: sha256WithRSAEncryption
20:4b:eb:70:32:d3:3b:d2:05:ed:af:70:f4:96:ca:b8:3d:d0:
44:be:ee:1e:37:34:b3:11:3e:54:6d:6c:c1:ef:ba:f9:ba:64:
9b:2b:da:28:81:41:3a:49:a9:a4:d9:81:b7:e1:80:fd:56:bd:
7b:f2:da:b0:62:98:fc:e2:17:a2:8f:71:68:c0:ed:21:87:c0:
6f:5a:b7:65:57:1e:3c:cd:ea:fa:f7:94:25:93:a9:f8:b8:f4:
1f:38:f1:de:99:3d:8b:c2:a9:45:0e:94:39:ce:d8:f3:4d:7b:
b6:a1:c3:5b:48:50:40:d5:14:9c:bd:34:8b:57:18:da:f0:44:
57:ab:bf:4d:ea:1f:1b:f0:1d:b0:59:7c:92:41:75:8a:47:d6:
33:41:60:e3:63:e1:6e:b1:52:60:db:a1:b5:7a:51:7e:20:a3:
d4:71:47:bd:a6:32:9e:31:08:6a:2c:a7:48:94:30:a6:83:c7:
6f:aa:89:24:a1:c2:65:5d:b4:9e:02:3c:c4:b1:42:bf:4c:59:
ac:6d:96:76:26:26:1b:cc:51:31:57:3b:b0:c4:f3:61:23:ba:
e9:32:b4:99:c9:77:64:35:b0:44:df:cf:25:77:59:82:5c:88:
b0:ff:19:90:68:98:6d:08:91:99:1f:5b:b3:6a:99:d1:25:92:
74:1e:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net