Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/bV0vNuNlcsZTqRZGiJmM9peKZWg.roa
File: bV0vNuNlcsZTqRZGiJmM9peKZWg.roa (raw, json)
Hash identifier: KOE3TqLreSuCzK21n4crQxaG8rn0yQTomBPA4VlM+G4=
Subject key identifier: 6D:5D:2F:36:E3:65:72:C6:53:A9:16:46:88:99:8C:F6:97:8A:65:68
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 019425216A797E4DF237B5C0BA72D37DB91D
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/bV0vNuNlcsZTqRZGiJmM9peKZWg.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34587
IP address blocks: 5.226.176.0/21 maxlen: 24
81.94.208.0/20 maxlen: 24
81.94.213.0/24 maxlen: 24
81.94.214.0/24 maxlen: 24
178.237.160.0/23 maxlen: 24
178.237.163.0/24 maxlen: 24
178.237.164.0/24 maxlen: 24
178.237.165.0/24 maxlen: 24
178.237.170.0/24 maxlen: 24
178.237.173.0/24 maxlen: 24
178.237.174.0/24 maxlen: 24
178.237.175.0/24 maxlen: 24
2a03:a860:10::/44 maxlen: 48
2a03:a860:a00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6a:79:7e:4d:f2:37:b5:c0:ba:72:d3:7d:b9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d5d2f36e36572c653a9164688998cf6978a6568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:a1:aa:2f:b0:73:ce:fe:be:b8:bd:28:7d:
31:e4:68:b9:64:09:ae:c6:f7:ca:c8:73:39:88:2f:
21:3d:2e:10:ad:e6:90:10:ab:6b:90:b3:b5:58:7a:
60:2f:f8:63:c2:b3:4d:63:07:5f:a5:09:9e:64:9b:
d5:86:72:47:e2:b4:bb:f9:19:71:54:d9:ec:aa:c1:
2a:ed:4f:2e:1f:97:4e:87:03:45:c0:2f:45:c8:d5:
62:e3:e6:39:f9:69:4f:23:28:da:f5:97:a5:e1:28:
30:e2:0f:71:b9:e6:ad:45:9c:58:41:29:af:50:bd:
bf:3d:19:5a:02:cf:80:38:64:bc:62:a2:c5:d4:8a:
9c:61:a1:82:bd:56:b9:0b:b7:58:e4:b7:35:14:15:
20:ee:19:82:b9:bb:56:73:47:49:d7:43:2c:86:7a:
2c:34:c1:36:91:f8:3f:3a:d3:bc:f8:de:15:ee:a6:
16:9b:73:73:cc:32:d1:e7:d9:8b:f0:ce:ba:ea:a9:
dd:2f:9e:68:e5:cc:d4:77:84:ee:7b:b7:8d:c4:0e:
f8:c0:e3:02:ea:3b:da:a6:a0:87:df:f1:d3:5b:f1:
bd:06:e5:b5:e4:5a:2e:ee:cd:d8:fd:24:57:7a:ca:
18:58:15:3f:1d:ff:02:25:90:fc:e7:b8:e6:32:6d:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:2F:36:E3:65:72:C6:53:A9:16:46:88:99:8C:F6:97:8A:65:68
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/bV0vNuNlcsZTqRZGiJmM9peKZWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.176.0/21
81.94.208.0/20
178.237.160.0/23
178.237.163.0-178.237.165.255
178.237.170.0/24
178.237.173.0-178.237.175.255
IPv6:
2a03:a860:10::/44
2a03:a860:a00::/40
Signature Algorithm: sha256WithRSAEncryption
0e:2d:b9:b1:61:90:9a:eb:7b:b5:d1:dd:9c:41:b0:71:7a:83:
65:db:4e:17:7e:e7:71:2f:ef:7d:42:3b:0e:8c:88:57:19:d7:
e7:01:65:34:0a:2d:7b:2f:99:89:99:d8:e0:e0:b2:9c:0f:8b:
fe:43:6b:5b:d0:21:d6:7a:30:35:b0:bc:7a:8f:92:75:d6:5e:
be:a9:00:c8:47:0e:14:ed:f4:2e:25:eb:fc:09:94:b1:fa:b0:
67:1e:99:8f:9a:41:94:45:21:ae:ed:5e:f5:39:9a:ad:79:bf:
39:81:9e:f9:fb:ab:13:f9:fb:e9:49:91:06:6f:9f:8e:a3:c2:
3e:69:14:66:b3:fe:e9:e9:7c:34:13:0f:d7:5a:d1:ff:d5:36:
6f:28:c2:85:29:0b:fe:b1:11:a8:0e:90:1c:8e:db:60:f0:55:
48:7d:cc:bf:b5:50:26:59:c9:ab:08:5a:be:76:c2:a9:7c:82:
80:51:df:f9:05:28:c3:c3:29:78:fd:54:d4:20:6c:1f:29:73:
7e:52:5d:ff:cc:e9:f1:14:d0:d7:45:91:d2:47:14:b1:60:c4:
53:b2:7f:9b:56:2c:7e:35:46:68:b2:02:55:bb:ec:b8:9d:b2:
b0:ce:95:64:1d:a7:5f:02:c4:55:5a:3a:11:06:45:97:e1:f7:
bf:44:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:55 2025 by rpki-client