Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/5CG9LafDERQlDqx10LqiWnmbeEs.roa
File: 5CG9LafDERQlDqx10LqiWnmbeEs.roa (raw, json)
Hash identifier: j9iNoXvGlZeRJTgVkViTU+O1Hz7K5NeXTlwQeauvVdA=
Subject key identifier: E4:21:BD:2D:A7:C3:11:14:25:0E:AC:75:D0:BA:A2:5A:79:9B:78:4B
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01960F9C16CCBCBAB5F3A5B2A1DD23CC5C81
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/5CG9LafDERQlDqx10LqiWnmbeEs.roa
Signing time: Mon 07 Apr 2025 09:36:49 +0000
ROA not before: Mon 07 Apr 2025 09:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41717
IP address blocks: 2.58.244.0/24 maxlen: 24
2.58.245.0/24 maxlen: 24
2.58.246.0/24 maxlen: 24
2.58.247.0/24 maxlen: 24
2.58.248.0/24 maxlen: 24
2.58.249.0/24 maxlen: 24
2.58.250.0/24 maxlen: 24
2.58.251.0/24 maxlen: 24
5.183.116.0/23 maxlen: 23
5.183.116.0/24 maxlen: 24
5.183.117.0/24 maxlen: 24
5.183.118.0/24 maxlen: 24
5.183.119.0/24 maxlen: 24
5.183.120.0/22 maxlen: 24
5.183.120.0/23 maxlen: 23
5.183.120.0/24 maxlen: 24
5.183.121.0/24 maxlen: 24
5.183.122.0/24 maxlen: 24
5.183.123.0/24 maxlen: 24
45.8.32.0/24 maxlen: 24
45.8.34.0/24 maxlen: 24
45.8.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:9c:16:cc:bc:ba:b5:f3:a5:b2:a1:dd:23:cc:5c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Apr 7 09:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e421bd2da7c31114250eac75d0baa25a799b784b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:a2:9c:30:3c:f7:19:38:95:fb:1c:90:ed:
2c:84:92:db:fe:19:0f:92:1f:aa:f1:0a:b1:2e:98:
f5:c6:1b:4d:e6:ac:40:f8:5a:4b:2b:b1:01:b6:11:
fe:ee:cb:1a:8f:34:fa:fc:dc:ac:7f:bd:cf:ea:71:
a1:2e:6f:6a:0d:3a:24:43:c5:3a:2a:b7:19:5e:78:
e1:4d:6c:f2:b9:fe:ad:48:82:32:ba:64:39:ca:43:
02:e5:b0:8b:48:d0:49:ef:0a:41:7e:c1:8e:3b:41:
5c:f5:b1:36:20:e0:6f:08:81:e1:c3:93:39:dc:cc:
eb:f5:6d:89:cd:a5:3c:ec:a2:8d:b4:d0:49:73:a1:
44:ed:30:e6:7a:c2:f7:e9:54:ee:bc:16:89:1d:8a:
62:7c:23:ca:30:d0:e1:41:f6:92:eb:20:42:09:41:
2d:59:83:a7:a2:5c:ea:43:3a:63:10:0d:9b:7f:8b:
b9:1a:2f:58:5c:ad:83:1c:43:a4:5e:a3:ff:fb:eb:
18:e5:b1:9c:6c:8f:f5:44:e7:96:1c:20:55:44:4c:
d2:e2:f8:c0:58:ac:83:7f:0e:4c:11:28:d5:d0:5a:
8e:2c:65:a2:44:75:85:3a:ac:c1:cc:11:b9:2a:27:
18:46:0c:92:58:a4:4c:65:01:2d:9d:ea:6e:e8:e0:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:21:BD:2D:A7:C3:11:14:25:0E:AC:75:D0:BA:A2:5A:79:9B:78:4B
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/5CG9LafDERQlDqx10LqiWnmbeEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.244.0-2.58.251.255
5.183.116.0-5.183.123.255
45.8.32.0/24
45.8.34.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:a1:62:81:7a:df:ec:61:fe:ca:e7:19:7c:fc:6c:12:ae:cc:
2d:25:d1:2a:8c:c7:d1:6b:39:6d:61:c6:77:4c:7a:c1:00:89:
11:40:2f:34:3f:5a:3a:04:78:fb:f7:ff:8a:46:7b:66:dd:e9:
04:59:98:46:82:42:f9:f5:ae:75:f1:07:ab:30:64:35:67:d8:
83:e6:37:a9:15:aa:d7:b7:5a:03:f8:53:de:ad:24:b7:ac:84:
89:59:f5:83:5f:05:19:ab:8b:cb:6a:c3:d3:47:0d:69:2a:09:
7a:40:81:3c:09:dd:a2:13:e9:43:2f:b9:6e:e9:23:41:ec:cd:
55:57:ef:fe:6e:ed:2c:e5:38:6d:7c:01:f5:61:12:6f:37:1e:
0a:b9:29:be:3c:65:98:c9:87:9b:ee:d6:e3:7e:f9:b5:3c:d4:
f2:ce:f0:b8:28:ad:65:ae:ac:3c:ef:54:29:96:81:cd:f2:7c:
ac:8c:07:ae:c6:55:37:05:69:2f:10:16:03:27:9c:1a:f0:89:
a9:12:d8:e5:db:db:be:38:21:fc:71:4a:f6:4b:b0:b9:d5:fa:
5f:b9:19:d4:f1:fa:44:fe:e6:c0:83:0e:9b:84:db:df:92:67:
c2:27:f9:95:c8:a5:eb:de:22:14:89:1a:74:8e:a8:a8:b7:2e:
87:12:6f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net