Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/5fuOdmrlGVquJxF0B-B8z5sBlNI.roa
File: 5fuOdmrlGVquJxF0B-B8z5sBlNI.roa (raw, json)
Hash identifier: DT/HXrl83qCIDVdBkYEE4TLDh03lHlOlq+VLneGm87c=
Subject key identifier: E5:FB:8E:76:6A:E5:19:5A:AE:27:11:74:07:E0:7C:CF:9B:01:94:D2
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 019420D5DC80CCB8C3E39B8A85D15CA75101
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/5fuOdmrlGVquJxF0B-B8z5sBlNI.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59445
IP address blocks: 5.144.80.0/24 maxlen: 24
5.144.84.0/22 maxlen: 22
5.144.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:dc:80:cc:b8:c3:e3:9b:8a:85:d1:5c:a7:51:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5fb8e766ae5195aae27117407e07ccf9b0194d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:c2:b6:81:c2:51:5a:6d:78:e5:09:77:b7:
4c:e3:bc:a2:e1:50:b4:4e:22:68:6c:90:cb:a8:63:
a4:99:2d:16:cf:75:7b:cb:ac:43:40:96:77:82:b5:
10:42:17:90:69:fb:1e:fe:d3:3b:48:d4:07:0b:b3:
e3:b1:42:03:dc:06:5b:2e:6a:d8:1f:39:ff:57:71:
ff:02:ea:cb:91:50:97:65:5c:96:4e:36:7f:e4:22:
d7:39:16:ab:ab:d4:b9:35:79:d9:48:35:a5:da:c1:
50:5c:18:bc:13:78:82:17:00:86:a4:8e:bf:d7:61:
34:3e:31:93:99:2b:a0:e2:62:71:07:a6:4b:2e:bc:
2d:dd:d0:2c:7d:15:7e:8f:db:6c:c9:25:a3:25:f5:
64:e7:aa:84:4e:f5:b2:05:7c:b2:a1:a0:95:59:5a:
21:e1:90:b9:4c:38:a4:07:7f:e4:dd:34:cc:84:de:
7e:0c:08:d2:73:24:b6:bc:5a:e1:fb:06:cd:94:c1:
a6:cb:d6:79:cc:e9:1d:cc:8c:98:5a:8d:f7:d9:cf:
26:fb:c6:98:2e:ca:e0:65:93:c9:3f:ef:df:f5:95:
bc:ee:a3:85:18:36:dd:37:c4:f0:45:c8:c5:a4:42:
5a:55:09:2f:b9:1b:99:8f:9b:fa:2d:a4:6a:e8:ac:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FB:8E:76:6A:E5:19:5A:AE:27:11:74:07:E0:7C:CF:9B:01:94:D2
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/5fuOdmrlGVquJxF0B-B8z5sBlNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.80.0/24
5.144.84.0/22
5.144.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a9:2c:4b:c3:99:2d:bf:c6:66:43:58:e5:56:f7:f0:94:fd:
44:9c:c4:36:7d:e4:f6:82:61:87:a2:bb:7b:5c:30:a0:1f:a5:
81:0f:f5:1d:53:32:7c:78:af:98:a5:33:0f:6d:b2:3f:f6:69:
4c:ab:4c:8c:1d:45:7b:fd:e9:28:31:69:65:e1:2b:61:e5:0b:
32:3e:cb:8b:44:aa:98:c9:a0:4d:3d:8c:7d:b2:74:32:7e:48:
8f:c8:ac:36:fa:df:c5:b5:89:4d:1d:a8:23:ae:f8:44:6c:4a:
77:5c:46:fd:b1:3c:8e:f2:78:f7:70:3e:de:3a:40:c0:c9:8b:
28:bf:29:f1:8b:2f:fd:18:a2:25:0d:53:b8:77:2d:66:50:35:
d9:9d:10:10:45:6e:a0:b3:dc:c2:33:24:46:59:a7:16:28:15:
9f:4a:2a:e8:b4:88:f4:35:84:73:e7:85:d5:e7:d1:81:c2:1c:
31:85:3b:14:37:03:88:0a:49:36:62:c9:42:2f:f5:5d:76:a8:
d7:e8:c2:34:94:80:d2:66:0b:31:60:c1:2d:88:39:95:1c:19:
55:c3:04:4c:ab:f7:bd:02:91:a4:9f:7d:31:9f:3b:ec:3a:db:
47:e4:8d:a0:8e:d4:14:7f:34:d8:53:d6:b5:a3:3f:3f:54:fd:
61:cc:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:24:47 2025 by rpki-client