Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/zP5R8a3op0AinKANwtJJCIKO-GU.roa
File: zP5R8a3op0AinKANwtJJCIKO-GU.roa (raw, json)
Hash identifier: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=
Subject key identifier: CC:FE:51:F1:AD:E8:A7:40:22:9C:A0:0D:C2:D2:49:08:82:8E:F8:65
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 0194266B499D68A8DEEEED18816CF043C2CA
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/zP5R8a3op0AinKANwtJJCIKO-GU.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214982
IP address blocks: 5.102.177.0/24 maxlen: 24
96.9.145.0/24 maxlen: 24
2a0a:c743:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:49:9d:68:a8:de:ee:ed:18:81:6c:f0:43:c2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccfe51f1ade8a740229ca00dc2d24908828ef865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:fc:f9:42:9f:9a:8b:ea:e4:62:c0:68:ac:
20:1a:78:34:b9:b1:cd:82:5b:1e:68:0b:d5:26:9b:
c9:f9:1a:6c:bd:bf:1d:24:bf:2a:62:af:3f:e5:6d:
e8:6a:97:13:6a:91:50:a1:77:dc:80:4e:0b:09:ab:
00:4e:48:92:d5:48:e5:ac:47:67:80:6f:60:b4:a7:
dd:e1:f3:91:52:13:79:62:23:e4:8e:5e:a2:bb:ed:
76:99:bf:fa:5d:71:66:3e:9c:d2:8a:5a:76:c8:0f:
44:14:58:bb:0b:88:2c:38:64:29:64:a9:c8:e2:cf:
06:78:18:c4:a1:b6:2e:cb:21:44:16:3f:2f:31:f7:
90:94:2e:40:33:ad:28:7f:d2:1e:05:ce:38:73:ac:
86:6b:da:1b:2b:43:32:ae:3c:41:d7:41:97:35:e2:
d1:57:3d:b9:df:a1:c4:2c:10:8d:f5:ce:90:b3:de:
9f:df:3a:30:2e:09:b1:7c:d0:82:4b:04:b9:c1:84:
d5:8f:4f:5a:2d:1e:76:04:da:21:99:d3:dd:20:9e:
bd:01:5b:81:b0:c7:ea:a0:bd:1a:d5:74:49:91:55:
d4:d6:b3:49:6b:bf:67:6e:e6:d1:f2:cc:07:c0:b7:
f3:1c:d8:21:4b:95:c0:ca:19:5c:98:38:df:49:34:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FE:51:F1:AD:E8:A7:40:22:9C:A0:0D:C2:D2:49:08:82:8E:F8:65
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/zP5R8a3op0AinKANwtJJCIKO-GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.177.0/24
96.9.145.0/24
IPv6:
2a0a:c743:1::/64
Signature Algorithm: sha256WithRSAEncryption
05:59:82:79:bc:fd:df:5d:b8:d3:65:10:a6:8f:de:90:1a:df:
3e:1a:e0:3e:7a:6c:64:c5:fa:c8:3c:5d:fa:bf:65:2d:81:4c:
ca:03:76:ab:bf:75:6a:a7:3e:db:0d:b7:56:66:db:8f:78:2f:
95:54:17:3f:c1:63:7a:17:86:b7:43:b6:28:eb:be:08:ab:c2:
1e:d2:bb:01:77:5e:fc:70:8c:a3:b9:c6:eb:f3:60:04:90:20:
7d:11:a2:16:ce:52:30:d3:bd:5b:32:50:0b:f3:57:8f:1a:c8:
64:e9:e0:1a:fd:fb:24:d8:7e:3d:d7:c2:91:34:75:3e:a1:a3:
7a:00:30:fb:9f:db:78:79:44:9a:19:6f:3e:85:13:0a:bb:68:
22:66:4b:8c:c3:85:de:ed:8e:8f:93:38:f2:35:43:f3:59:02:
fa:c0:10:b0:53:a1:91:73:be:b3:62:27:b1:13:db:bd:7b:8e:
35:a9:e4:a2:50:c3:86:39:a6:ef:c0:99:29:d7:7b:68:e0:77:
ef:67:f5:3c:68:5f:d9:4f:96:c3:f1:c6:9c:f1:01:fc:fa:4c:
61:ff:56:9a:76:3a:5f:bd:6f:87:ba:49:c9:ca:0c:95:ec:a5:
10:f3:56:a7:63:9a:a2:43:4f:b6:e1:2c:38:c0:23:97:cf:42:
0f:0a:2b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:20 2025 by rpki-client