Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/q2PhtlxaWPMFB5GcAwVXc_wKZRg.roa
File: q2PhtlxaWPMFB5GcAwVXc_wKZRg.roa (raw, json)
Hash identifier: 7exTPbh4OHsbAofG4+Te19GLuWs10iEQg0/XWCeBGJg=
Subject key identifier: AB:63:E1:B6:5C:5A:58:F3:05:07:91:9C:03:05:57:73:FC:0A:65:18
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 019427480F8C03AA4E0A8ABF67D4F42683F7
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/q2PhtlxaWPMFB5GcAwVXc_wKZRg.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202766
IP address blocks: 5.61.202.0/24 maxlen: 24
5.61.204.0/24 maxlen: 24
5.61.205.0/24 maxlen: 24
5.61.206.0/24 maxlen: 24
5.61.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0f:8c:03:aa:4e:0a:8a:bf:67:d4:f4:26:83:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab63e1b65c5a58f30507919c03055773fc0a6518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:10:27:46:4e:dc:48:0a:0a:f3:ce:44:3b:
a8:89:43:82:09:fd:a4:cf:24:74:00:e1:23:30:b4:
bb:b6:4b:49:cb:78:7e:07:3f:e6:f6:e5:8d:c1:f0:
d7:98:e9:9a:b7:cc:ab:34:e4:98:85:49:b9:07:0d:
b4:42:29:b4:c4:90:f1:06:c0:bd:8a:b7:3e:86:d1:
f5:d4:0a:31:02:d1:5b:6a:26:29:8a:1e:14:1e:cb:
0f:98:53:e0:11:36:f2:ec:14:55:41:23:4c:e8:94:
bc:24:50:55:64:da:93:d8:1f:fb:b4:d0:be:d3:f3:
49:c6:5d:f1:db:66:18:fa:20:c7:15:20:c4:d0:ce:
9a:9c:2c:08:1c:e7:a3:61:3c:54:64:50:dd:2a:c0:
c4:74:fa:a6:67:59:21:df:05:e5:1f:60:b9:82:f9:
9d:6a:21:32:ee:69:89:e2:75:26:a8:04:8e:ae:36:
0a:4c:12:7f:1f:59:41:86:d5:83:56:45:78:be:c6:
6c:bc:3c:28:64:d5:4d:bc:91:8b:e4:36:c4:72:42:
62:8d:30:6e:e3:a7:9b:7e:28:8f:eb:f1:b8:b1:27:
80:b2:bd:c1:28:21:b7:c0:d3:c9:ac:c8:47:7a:60:
87:0d:4f:ec:30:0a:bb:8d:e1:10:a7:c9:bf:c7:43:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:63:E1:B6:5C:5A:58:F3:05:07:91:9C:03:05:57:73:FC:0A:65:18
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/q2PhtlxaWPMFB5GcAwVXc_wKZRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.202.0/24
5.61.204.0/22
Signature Algorithm: sha256WithRSAEncryption
60:3b:2c:bf:73:da:e1:b4:4d:2c:4a:fe:14:52:77:ab:10:8a:
73:59:0a:ce:0b:20:29:38:4a:76:cd:c6:d1:7f:18:d9:5d:80:
fe:e4:cf:28:13:f1:50:fa:57:0d:09:5b:b1:80:00:b5:ca:4d:
9a:56:09:37:d0:e9:31:5c:3c:c0:a3:a6:ba:65:3a:86:4b:d0:
99:0a:47:e4:55:4d:de:30:04:b5:a7:34:8d:45:af:cd:8e:fb:
be:a9:c9:3d:af:a6:f5:5a:26:04:26:cc:72:36:ec:46:34:00:
53:6a:89:26:4e:b5:c5:4d:8a:9e:79:b2:98:8e:8b:2b:3d:a4:
81:3a:5a:5c:2e:18:f2:c7:01:b1:e7:c3:c6:4c:80:94:20:6a:
70:9c:f1:29:2e:c4:c5:c0:03:c7:80:48:5f:f8:4e:8e:71:b3:
d4:34:63:e4:f9:37:c7:ed:6e:ac:29:4a:04:c0:9a:2a:01:36:
56:9e:71:92:8b:23:28:f7:36:b8:bb:27:d2:fe:48:a6:68:7a:
b8:f9:fc:45:f3:a8:4d:d2:82:c4:6e:43:0c:3f:35:8b:84:f2:
99:84:02:3a:15:71:f7:3b:a5:80:78:75:77:a2:67:9a:81:27:
7c:2e:db:cf:4f:38:a8:38:e5:58:f5:55:3c:cd:65:59:14:78:
8b:e2:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:35 2025 by rpki-client