Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/0xAeo2a2iLttbU-9qLwxhP3W5ss.roa
File: 0xAeo2a2iLttbU-9qLwxhP3W5ss.roa (raw, json)
Hash identifier: KCgM9KWWYMbjy0SQJWIlI1gevbRgwTSQjmHIQMhZOFo=
Subject key identifier: D3:10:1E:A3:66:B6:88:BB:6D:6D:4F:BD:A8:BC:31:84:FD:D6:E6:CB
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 019425216D979E3B44990B067EB2640D4D3A
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/0xAeo2a2iLttbU-9qLwxhP3W5ss.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397192
IP address blocks: 5.226.176.0/21 maxlen: 24
78.143.244.0/24 maxlen: 24
78.143.245.0/24 maxlen: 24
78.143.246.0/24 maxlen: 24
78.143.247.0/24 maxlen: 24
2a03:a860:51::/48 maxlen: 48
2a03:a860:61::/48 maxlen: 48
2a03:a860:a00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6d:97:9e:3b:44:99:0b:06:7e:b2:64:0d:4d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3101ea366b688bb6d6d4fbda8bc3184fdd6e6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:f9:d8:32:ab:90:dd:fb:63:f4:e1:13:a0:
99:02:56:fb:f5:a9:8d:5a:a6:ce:fc:fc:3c:62:fb:
7a:b1:55:ee:c7:20:eb:55:e2:f9:c9:86:64:bb:95:
c8:74:5e:93:98:13:11:b8:7e:42:e2:81:f2:16:bd:
a6:3b:3e:c4:e1:dd:6c:d1:7b:23:fb:fc:f7:56:2c:
43:13:6c:71:89:6f:b6:10:5c:c3:a6:7b:db:17:b7:
48:b2:e1:64:ce:ff:aa:50:a1:87:08:c2:48:26:b8:
67:b7:e9:d4:d8:ee:41:08:6d:2b:49:ea:10:87:b1:
21:f0:64:6c:b3:2f:f2:d3:c0:ff:86:ca:e2:99:6f:
ed:92:fd:65:46:71:b0:ae:d3:50:32:71:f6:08:7a:
67:c6:70:6d:35:b9:16:42:3e:1a:b2:fd:5a:75:0a:
ee:f7:f5:f3:1b:88:9f:0b:71:a8:71:fd:64:02:86:
eb:f8:59:35:63:15:63:f6:d1:1f:0c:0f:78:41:52:
b8:a1:13:ab:cf:e2:14:b0:ef:18:9b:6f:07:be:aa:
47:35:47:0f:95:50:16:d0:d3:57:b0:f1:4e:d4:53:
6a:aa:7a:5b:ab:b4:2d:c6:31:af:8f:50:55:70:3b:
07:c5:4e:0a:b0:35:ef:c4:1c:67:76:e3:e7:a0:b0:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:10:1E:A3:66:B6:88:BB:6D:6D:4F:BD:A8:BC:31:84:FD:D6:E6:CB
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/0xAeo2a2iLttbU-9qLwxhP3W5ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.176.0/21
78.143.244.0/22
IPv6:
2a03:a860:51::/48
2a03:a860:61::/48
2a03:a860:a00::/40
Signature Algorithm: sha256WithRSAEncryption
1f:b9:80:34:8a:33:64:be:24:a6:6f:9b:f5:48:af:41:b2:b2:
f6:28:2b:fd:06:89:ab:01:98:db:3b:b4:9a:97:75:18:10:8b:
69:19:b1:a0:ac:ae:ac:9b:fd:10:9b:c1:a6:10:05:58:60:8d:
6f:3f:45:5c:04:a7:55:fa:15:06:0d:18:8f:bd:0d:46:be:9d:
25:8e:6d:68:73:b8:10:32:f0:c8:4d:14:72:a7:22:33:c6:49:
59:26:76:66:71:ae:73:8e:bb:ec:6f:87:89:0e:0a:b7:20:52:
f2:51:d1:6a:a8:eb:0a:da:8e:ed:c8:8b:ee:6a:e5:3f:17:96:
b1:17:53:11:e2:70:15:b0:74:c1:bc:26:c4:8f:20:54:9c:31:
0e:08:ea:25:62:76:72:e1:41:8a:dc:46:48:48:42:b6:19:b1:
cf:f3:50:5b:e3:01:ce:88:a0:91:28:e5:47:f5:67:28:86:cc:
81:0c:d2:66:16:5e:b5:08:e4:81:c9:b0:53:05:eb:f1:2f:23:
f5:19:96:80:37:80:4f:3a:be:d0:30:8d:bb:72:82:46:6f:d6:
86:f3:c0:af:29:31:70:5f:85:e1:c9:58:4b:76:d3:1e:08:81:
5d:cf:31:e4:d3:87:c8:05:ec:e9:8a:24:f3:cf:d5:b6:17:21:
da:c4:01:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:18 2025 by rpki-client