Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/Z4nN-Ws_wnObQX43h7KB04MEX0Y.roa
File: Z4nN-Ws_wnObQX43h7KB04MEX0Y.roa (raw, json)
Hash identifier: 7C7D7tdUB5rOJYlfI1UfJ/CA32g7kMZ0Kt4eDwWV77Q=
Subject key identifier: 67:89:CD:F9:6B:3F:C2:73:9B:41:7E:37:87:B2:81:D3:83:04:5F:46
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 019420D5DD254072F4C2FBA6DC19DDC81B98
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/Z4nN-Ws_wnObQX43h7KB04MEX0Y.roa
Signing time: Wed 01 Jan 2025 07:47:54 +0000
ROA not before: Wed 01 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61349
IP address blocks: 5.144.88.0/23 maxlen: 23
5.144.91.0/24 maxlen: 24
5.144.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:dd:25:40:72:f4:c2:fb:a6:dc:19:dd:c8:1b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6789cdf96b3fc2739b417e3787b281d383045f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e7:16:85:f0:b3:71:4d:2d:88:d7:31:b8:25:
3b:b2:ca:ee:66:9f:64:44:f2:04:76:7e:d1:1c:1a:
ec:c9:c7:2e:3e:d3:04:1c:a5:6e:e9:78:29:af:e9:
96:23:4a:a4:75:fb:b7:c1:a5:44:3f:8a:34:1c:62:
7b:32:b1:f2:46:33:1f:01:6b:0c:36:86:53:90:00:
f4:f6:52:42:ab:1c:a5:98:a7:bd:bd:f3:21:fd:0c:
26:53:18:24:ca:07:97:83:aa:1d:54:c5:f6:27:1b:
46:47:f7:8f:b6:11:fc:25:cf:79:69:d8:0a:4a:10:
b9:b8:60:03:0f:b9:94:1e:5f:96:58:a2:27:55:76:
72:8c:04:e4:7e:5f:d9:80:84:54:ac:ce:0a:ed:ac:
fe:6e:fe:07:ff:69:2d:44:cb:07:02:23:5a:13:cf:
2a:92:5b:dd:d5:18:a5:a7:d6:49:0f:86:8b:2e:1f:
c5:f9:30:e5:29:8e:5b:14:3d:ad:71:83:1d:d7:ed:
7b:38:2c:27:d8:a8:a5:bb:3a:74:80:e0:41:ef:5c:
7d:6f:36:a6:76:8e:d3:95:ed:1a:82:8e:b3:73:81:
44:07:b3:ee:40:52:bf:b6:10:2e:9a:0d:0b:e1:fb:
1d:9f:ce:7d:f9:a2:bd:d9:f4:b7:08:84:45:9c:a8:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:89:CD:F9:6B:3F:C2:73:9B:41:7E:37:87:B2:81:D3:83:04:5F:46
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/Z4nN-Ws_wnObQX43h7KB04MEX0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.88.0/23
5.144.91.0-5.144.92.255
Signature Algorithm: sha256WithRSAEncryption
a9:9f:ca:eb:fe:85:75:2d:b7:74:7b:00:ac:55:6c:69:de:2c:
f2:1c:b0:ab:cb:1a:cf:77:31:df:80:ca:06:3e:bf:27:c5:bb:
03:d8:da:73:6f:85:b3:89:a3:86:b1:75:0c:43:bb:22:fb:59:
52:8f:73:80:84:1d:59:33:c1:98:53:4d:4d:39:78:9c:bf:70:
43:8b:c8:1b:6d:7c:af:59:57:fa:3f:5b:42:17:c4:19:12:cd:
0f:1f:c4:f5:86:76:9d:0c:70:f0:3c:29:89:d8:ff:cc:60:98:
02:dc:c8:46:26:d4:82:a8:90:b0:77:bf:c8:22:2e:07:c5:c5:
46:32:f0:0a:4a:e6:3d:7f:c1:07:fd:90:e5:94:75:86:a9:43:
86:1f:6e:29:35:5c:c1:b8:b0:5a:c7:86:21:94:d2:b4:51:6d:
c2:de:08:a2:ba:8b:76:9d:35:3b:d4:90:4e:f1:f6:6a:89:ca:
bc:77:9f:dd:f1:f1:67:06:0c:a5:f0:b1:bf:19:6c:71:df:8d:
8f:d6:af:dc:86:be:d6:a5:2c:35:ff:26:42:ec:e5:b3:14:df:
8f:61:a8:f2:ac:da:d2:d1:fa:9a:72:da:b2:8a:22:98:72:34:
ee:23:71:bd:4d:fc:df:83:15:af:5d:d3:f2:bc:67:76:15:49:
c6:1f:f9:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:51 2025 by rpki-client