Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/IpIgVrIRJ2mIFDTx0RlJWWdnvgc.roa
File: IpIgVrIRJ2mIFDTx0RlJWWdnvgc.roa (raw, json)
Hash identifier: 5+F4EaLafEmu3xl8kNyHR/EAaMVkKy04zk/GGcz3iw8=
Subject key identifier: 22:92:20:56:B2:11:27:69:88:14:34:F1:D1:19:49:59:67:67:BE:07
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01943F723DB1D15357F3D2B5C0CD92C58CAF
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/IpIgVrIRJ2mIFDTx0RlJWWdnvgc.roa
Signing time: Tue 07 Jan 2025 06:27:18 +0000
ROA not before: Tue 07 Jan 2025 06:27:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16190
IP address blocks: 5.134.86.0/23 maxlen: 24
217.113.0.0/21 maxlen: 24
217.113.0.0/22 maxlen: 22
217.113.0.0/23 maxlen: 23
217.113.2.0/23 maxlen: 23
217.113.4.0/23 maxlen: 23
217.113.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:72:3d:b1:d1:53:57:f3:d2:b5:c0:cd:92:c5:8c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 7 06:27:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22922056b2112769881434f1d11949596767be07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:94:2f:bb:12:3a:01:2a:db:2d:db:50:67:
e8:65:89:8e:5d:a1:8b:61:a6:53:a8:d6:37:d9:c0:
3c:e7:32:ca:3a:70:03:38:1c:b1:c5:97:10:0e:48:
2b:ed:83:93:9d:7c:a3:a7:16:0a:d9:e8:64:71:95:
32:ee:96:17:5a:6d:1e:25:7a:fb:70:ec:1e:b7:fc:
06:ff:f5:ab:a3:70:c6:67:1a:66:ab:5f:ea:9d:08:
e5:17:a1:6d:1d:28:00:d9:4e:59:a0:f3:88:1d:b6:
74:3f:1b:80:37:59:1d:f1:89:9b:a2:36:24:5f:c2:
c4:ea:6f:fd:21:e2:e7:5c:05:b5:c5:86:6c:ee:ea:
0d:3d:7d:ac:45:ce:e4:36:15:6e:89:8c:6b:07:85:
4c:2d:33:e4:60:37:7d:ca:e5:c9:35:53:08:93:62:
68:e0:36:82:10:0e:ee:b4:e4:5b:db:00:65:22:4a:
b0:ff:78:1c:ce:21:04:b7:3a:77:85:12:44:47:cb:
ea:f8:86:33:ce:e5:fa:4e:f6:c5:ea:26:ad:19:58:
3f:f6:48:a0:90:c9:5b:10:af:ef:5d:81:95:a8:0b:
11:3f:32:17:08:b5:b2:52:6f:25:c2:f3:d9:b4:61:
0f:41:fe:8f:30:5f:a8:60:e8:b6:3d:96:6b:6f:2e:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:20:56:B2:11:27:69:88:14:34:F1:D1:19:49:59:67:67:BE:07
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/IpIgVrIRJ2mIFDTx0RlJWWdnvgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.86.0/23
217.113.0.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:a7:7d:a4:82:00:f2:d8:79:a2:09:f4:39:4b:ca:52:72:9a:
ce:58:d3:d6:24:56:11:d9:a6:45:a6:02:d9:c4:17:2c:69:1a:
81:f1:ac:48:4a:67:57:4d:86:f0:26:06:20:7b:4c:3b:d8:5c:
fe:8e:c5:63:ca:31:3c:ae:33:a1:63:c6:57:81:1f:79:7b:aa:
c7:7d:4d:b7:c6:a9:fa:c0:0d:1e:18:d2:b1:a7:97:57:0e:c8:
74:78:c1:90:bf:70:2f:11:07:b5:e2:39:a9:29:47:11:56:b3:
ca:86:bc:55:de:ae:82:a7:5d:b2:3a:22:7f:dd:fb:e5:af:a5:
86:39:4e:43:9a:40:81:64:b0:4e:0d:48:47:3a:19:20:66:e0:
0b:73:44:c5:65:26:74:c0:84:b0:93:4e:7e:d0:aa:0d:db:9d:
ca:66:49:31:ce:af:40:30:dc:8e:8c:39:99:8f:75:02:ee:8c:
15:e9:ae:df:e6:6b:64:60:e4:db:c7:16:2e:6c:8a:ed:9d:e3:
6d:58:71:85:b1:6e:b0:94:d9:2e:0c:d3:a7:a0:26:96:7b:05:
0d:36:ce:f8:eb:c8:63:5f:82:8f:25:69:fc:6e:de:32:f9:8a:
96:da:d9:22:c4:35:40:ac:2d:68:ef:c8:13:f8:e9:7d:4a:ac:
39:d2:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net