Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/5TF6S1D3zDhA0CA5RX-mADYxSvo.roa
File: 5TF6S1D3zDhA0CA5RX-mADYxSvo.roa (raw, json)
Hash identifier: J02Ss+YmPJGaMux/dUHZxtCfOWnAeSJeqVXWdQIrZm4=
Subject key identifier: E5:31:7A:4B:50:F7:CC:38:40:D0:20:39:45:7F:A6:00:36:31:4A:FA
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019068F3122978891AD936E9E4EC8E5A2002
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/5TF6S1D3zDhA0CA5RX-mADYxSvo.roa
Signing time: Sun 30 Jun 2024 11:41:18 +0000
ROA not before: Sun 30 Jun 2024 11:41:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
5.182.47.0/24 maxlen: 24
45.159.112.0/24 maxlen: 24
45.159.113.0/24 maxlen: 24
45.159.114.0/24 maxlen: 24
45.159.115.0/24 maxlen: 24
62.3.42.0/24 maxlen: 24
85.208.252.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
185.4.28.0/24 maxlen: 24
185.4.29.0/24 maxlen: 24
185.4.30.0/24 maxlen: 24
185.4.31.0/24 maxlen: 24
185.50.37.0/24 maxlen: 24
185.50.38.0/24 maxlen: 24
185.50.39.0/24 maxlen: 24
185.116.160.0/24 maxlen: 24
185.116.161.0/24 maxlen: 24
185.116.162.0/24 maxlen: 24
185.116.163.0/24 maxlen: 24
185.213.164.0/24 maxlen: 24
185.213.165.0/24 maxlen: 24
185.213.166.0/24 maxlen: 24
185.213.167.0/24 maxlen: 24
185.255.88.0/24 maxlen: 24
185.255.89.0/24 maxlen: 24
185.255.90.0/24 maxlen: 24
185.255.91.0/24 maxlen: 24
193.141.64.0/24 maxlen: 24
193.141.65.0/24 maxlen: 24
193.141.126.0/24 maxlen: 24
193.141.127.0/24 maxlen: 24
2a05:ab80::/48 maxlen: 48
2a05:ab80:3::/48 maxlen: 48
2a05:ab80:4::/48 maxlen: 48
2a05:ab80:100::/48 maxlen: 48
2a05:ab80:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:68:f3:12:29:78:89:1a:d9:36:e9:e4:ec:8e:5a:20:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Jun 30 11:41:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5317a4b50f7cc3840d02039457fa60036314afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:46:20:1e:76:23:a2:67:1f:da:e6:5b:bb:
12:6b:fb:0e:c0:89:ac:4e:a3:18:a2:5d:96:36:6c:
72:fb:f0:04:f4:92:fc:e1:d5:e3:38:ba:ff:5e:1b:
dd:2e:94:4e:e8:cf:9e:0b:3d:5d:e3:b5:15:1a:0c:
77:e8:bd:65:a6:fb:a3:b8:b8:29:75:39:03:26:f0:
a2:21:b6:bd:d3:73:a8:41:62:76:e4:d8:69:b7:5c:
f4:24:3b:d3:f3:9d:27:b1:32:44:9a:1d:d0:48:f6:
28:8e:cc:40:25:a2:16:08:c6:77:c7:dd:70:f1:8a:
73:8b:11:5d:8a:15:29:b7:3d:b6:b4:8a:70:23:bf:
68:99:b2:55:28:a5:c1:5d:8c:dd:f0:f7:5e:58:5c:
80:e2:f9:03:34:04:f7:49:3a:36:27:fb:21:39:f0:
4e:2a:a4:bb:87:1f:54:a3:bc:c4:2c:5a:f4:65:dd:
5d:75:67:84:65:69:d2:b1:ec:6a:4d:09:78:25:3a:
c0:fe:f0:3d:cd:7c:dc:cd:9c:a8:fd:3d:88:aa:10:
cb:12:f1:9d:d1:c8:25:de:3d:85:a1:34:c0:25:f4:
2d:7c:01:d7:1f:63:59:16:0f:fe:b5:e8:ef:1c:d6:
68:3a:25:ee:82:89:ec:e4:f6:ee:e8:f8:91:40:42:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:31:7A:4B:50:F7:CC:38:40:D0:20:39:45:7F:A6:00:36:31:4A:FA
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/5TF6S1D3zDhA0CA5RX-mADYxSvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0/22
45.159.112.0/22
62.3.42.0/24
85.208.252.0/22
185.4.28.0/22
185.50.37.0-185.50.39.255
185.116.160.0/22
185.213.164.0/22
185.255.88.0/22
193.141.64.0/23
193.141.126.0/23
IPv6:
2a05:ab80::/48
2a05:ab80:3::-2a05:ab80:4:ffff:ffff:ffff:ffff:ffff
2a05:ab80:100::/48
2a05:ab80:200::/48
Signature Algorithm: sha256WithRSAEncryption
85:68:96:d3:7a:de:b7:4e:07:02:72:bd:6c:d2:88:54:6f:a7:
d0:d8:16:65:62:2c:6d:0d:79:d6:12:91:d4:76:a1:c1:b8:25:
df:17:ae:d8:52:c3:8a:0c:77:38:9c:d8:7d:9e:18:93:3c:41:
a5:f6:c3:f8:a3:a6:ec:8c:d6:14:78:19:99:e3:07:c0:f8:35:
7d:f3:31:3e:d1:9c:60:52:41:3f:f2:3f:8f:6d:49:82:30:2b:
f3:97:27:36:86:d1:29:d2:33:41:fa:b0:1d:9d:a6:8a:e4:ab:
c2:c1:a6:f4:0f:3e:bc:f0:44:ef:db:43:3c:be:a2:8b:bf:08:
ae:87:dc:ca:0f:18:59:fb:74:08:fb:48:8e:18:cd:1d:1a:12:
67:79:4f:b1:be:66:9a:b4:88:39:59:b0:e6:37:90:f7:0a:42:
80:05:64:68:75:49:37:0e:db:e7:87:c8:66:45:ee:70:94:b3:
68:72:37:6b:b0:ed:fd:6f:df:5f:96:46:50:77:ad:33:64:e1:
46:eb:a2:d0:e4:5e:d4:53:fe:11:ee:50:a7:d1:57:00:d8:40:
2f:d9:97:f9:d8:a1:82:ac:18:cf:c7:60:e8:c9:f2:82:ed:e8:
11:e7:7c:85:24:61:87:57:6c:de:cb:56:c0:77:68:e3:45:9d:
25:d3:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:34 2024 by rpki-client on console.sobornost.net