Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/1mpaZuDCYs44uvxRH6z2Ejpvg18.roa
File: 1mpaZuDCYs44uvxRH6z2Ejpvg18.roa (raw, json)
Hash identifier: SCT441ghaL2WqZRPiOCyS9Ob3laiZBvZ8Lbji0j039s=
Subject key identifier: D6:6A:5A:66:E0:C2:62:CE:38:BA:FC:51:1F:AC:F6:12:3A:6F:83:5F
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 01942521FBA9A5586845FDE60022370E6417
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/1mpaZuDCYs44uvxRH6z2Ejpvg18.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39798
IP address blocks: 5.181.156.0/22 maxlen: 24
5.252.176.0/22 maxlen: 24
94.158.244.0/22 maxlen: 24
185.163.44.0/22 maxlen: 24
185.225.16.0/22 maxlen: 24
194.180.157.0/24 maxlen: 24
194.180.158.0/24 maxlen: 24
194.180.174.0/24 maxlen: 24
194.180.191.0/24 maxlen: 24
2001:67c:2db8::/48 maxlen: 48
2a0a:c800::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fb:a9:a5:58:68:45:fd:e6:00:22:37:0e:64:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d66a5a66e0c262ce38bafc511facf6123a6f835f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9e:30:80:81:5e:4a:ee:e0:bb:05:7a:7d:03:
c5:4b:31:1e:9c:fe:5e:06:aa:3e:a4:2c:30:5f:2c:
bb:f6:ff:98:95:f4:d1:d5:d4:0e:e9:74:50:ef:3f:
38:44:ae:8f:97:8a:e4:29:a3:9b:8c:77:0c:33:f8:
f3:f9:0b:4e:28:61:ec:5c:40:b4:f2:3e:fa:74:f3:
1f:46:e2:ad:1b:d3:dd:5a:2d:ce:ea:b5:56:22:0f:
fe:ee:2e:53:48:18:80:86:26:55:e5:7a:d7:42:e9:
9f:64:ae:38:29:f2:1d:68:48:3a:7a:a3:a8:cf:9c:
09:e0:5c:57:a6:3d:0f:f7:91:89:54:df:e8:73:40:
9b:0c:b8:98:5e:75:5f:42:1f:a0:34:49:4c:e2:4e:
fb:73:f4:36:90:94:45:2f:8b:00:a0:cb:dd:97:d0:
af:3c:bf:0a:12:f8:8a:27:db:48:ac:b9:a2:56:c0:
50:3d:f3:c2:c5:0b:11:ab:b1:6e:27:56:af:41:f8:
be:d9:aa:73:92:1b:2f:d0:9e:fe:8f:b0:4a:29:45:
f1:8d:16:57:4f:1b:fe:a3:69:a5:46:4e:48:c1:36:
2b:4c:92:d0:f6:cf:92:fc:d1:03:0e:be:d3:db:12:
e1:f5:ce:d6:3f:40:e9:1d:94:24:12:37:de:a1:52:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6A:5A:66:E0:C2:62:CE:38:BA:FC:51:1F:AC:F6:12:3A:6F:83:5F
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/1mpaZuDCYs44uvxRH6z2Ejpvg18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.156.0/22
5.252.176.0/22
94.158.244.0/22
185.163.44.0/22
185.225.16.0/22
194.180.157.0-194.180.158.255
194.180.174.0/24
194.180.191.0/24
IPv6:
2001:67c:2db8::/48
2a0a:c800::/29
Signature Algorithm: sha256WithRSAEncryption
00:73:9d:74:30:c4:15:7c:6f:a5:3f:73:0a:17:4c:5e:c5:14:
94:97:36:e0:21:5c:71:bc:30:2e:c8:c4:26:e9:90:15:7e:5b:
b0:fc:92:d0:f5:96:81:2d:06:bd:d3:fd:af:48:ca:7b:fa:e3:
4b:fb:53:ec:27:59:20:be:fa:28:d9:87:e4:32:32:f6:67:15:
87:e3:57:96:aa:fc:96:40:bb:f8:13:ed:7c:9d:7c:70:f1:c4:
2d:f2:fc:42:5d:82:a7:16:7b:94:5a:b8:bc:d9:03:43:f9:63:
91:5b:11:d5:eb:6d:ec:5c:f7:fc:c4:90:33:e1:07:33:25:1a:
b0:1c:3d:cd:78:f3:11:b8:9e:63:86:a2:99:e7:88:5a:29:b1:
f7:03:f5:fb:f4:e0:75:43:98:40:9b:0d:ef:56:45:01:8f:f7:
ca:bf:ec:5e:f3:86:db:3b:82:f9:0a:7b:dc:0e:a9:f9:2a:85:
12:1c:49:f9:1f:15:5e:4a:cb:a7:4a:97:69:a9:69:a0:57:99:
73:e6:f3:f5:ad:cf:4a:ef:5b:28:e6:ad:fb:a8:6f:04:82:03:
9b:5c:05:b9:28:89:b3:73:a7:f1:b7:85:e3:e4:c3:9e:90:85:
c2:b7:71:34:5b:0f:fc:ce:03:5a:f9:11:f6:12:f6:9e:5d:e3:
9b:7b:5b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:10 2025 by rpki-client