Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RU50R6pd3nRtCHtX2WkkAw7Llyg.roa
File: RU50R6pd3nRtCHtX2WkkAw7Llyg.roa (raw, json)
Hash identifier: T5CeoexH64aMyXZVlfI39Z1RQIh+lo/XDGBIg41v35o=
Subject key identifier: 45:4E:74:47:AA:5D:DE:74:6D:08:7B:57:D9:69:24:03:0E:CB:97:28
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B9F83DB5A28B3CAE9CF632D023292
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RU50R6pd3nRtCHtX2WkkAw7Llyg.roa
Signing time: Thu 02 Jan 2025 09:49:34 +0000
ROA not before: Thu 02 Jan 2025 09:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207614
IP address blocks: 5.154.7.0/24 maxlen: 24
78.136.79.0/24 maxlen: 24
84.232.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9f:83:db:5a:28:b3:ca:e9:cf:63:2d:02:32:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=454e7447aa5dde746d087b57d96924030ecb9728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:e9:5f:9c:76:da:97:ee:69:72:c3:4d:89:
92:92:43:27:27:a3:92:2f:81:5d:3a:2a:8b:30:4a:
bd:7e:5e:e7:28:b7:0c:19:67:00:f7:84:06:0b:23:
40:c0:a6:d2:a2:ce:74:17:90:ce:f3:d8:eb:b7:3f:
b5:52:19:10:c5:70:90:2e:5a:1c:81:8f:f2:f7:c0:
a6:8a:2d:b0:cd:3e:e5:ca:c6:6b:ab:98:63:98:c7:
02:6e:ae:11:82:f4:95:85:06:7d:18:30:e6:00:f7:
81:9d:7a:c5:67:d0:98:f4:49:75:eb:65:54:59:ae:
65:bc:81:b0:0e:16:45:8d:e3:19:f6:96:5a:f9:4e:
4a:28:52:f3:3f:6f:ce:8f:fd:6b:fc:55:31:69:03:
0d:a3:d9:c3:d0:e8:2b:1e:9d:be:95:fa:cc:59:5e:
b9:bc:bc:0f:94:a1:c7:0b:4b:00:24:46:6a:96:e9:
00:72:9e:4c:51:a7:ac:29:d6:c1:a6:8f:f5:f3:ab:
13:f5:2f:cd:8f:fc:c7:89:7b:2a:de:f4:d0:23:68:
19:01:f7:8e:5d:74:b2:0c:ba:82:44:30:a6:eb:c7:
10:a0:71:ac:1e:88:18:ef:9e:f4:e4:1c:8e:7a:ae:
1f:39:f6:6b:ef:3e:27:e5:79:02:f9:86:21:cd:a7:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:74:47:AA:5D:DE:74:6D:08:7B:57:D9:69:24:03:0E:CB:97:28
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RU50R6pd3nRtCHtX2WkkAw7Llyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.7.0/24
78.136.79.0/24
84.232.38.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b2:de:0b:7b:d1:d4:dd:f0:40:06:6e:f6:9a:7e:c6:9b:2e:
40:34:ff:ba:48:80:11:30:0a:c5:6b:28:c9:f1:41:a1:d7:da:
dd:44:b5:45:a4:77:0e:ba:8d:62:43:d7:7c:e1:d1:f8:ce:84:
f3:94:0b:dd:9b:81:62:8c:2c:0d:8a:6a:5c:a5:58:c9:ac:4c:
76:de:91:8d:1b:cc:cb:02:6f:87:ce:01:a6:ee:68:3f:e3:78:
c2:51:0d:ce:b0:78:9e:e9:c7:ca:ab:fa:c3:84:73:ec:ee:ad:
12:06:f8:f0:83:77:80:c3:77:7d:e6:aa:fe:47:6c:94:8a:a3:
18:23:9e:24:aa:47:2e:87:c8:be:38:f6:b2:cd:91:d0:47:db:
f5:54:ee:0f:a7:c2:2a:15:e0:20:fe:ec:40:be:cf:96:79:7c:
70:57:d0:5e:03:d7:bf:9f:43:35:26:a5:72:d4:ee:8d:7a:fd:
c1:26:21:40:9a:cc:27:fc:59:f9:43:90:7d:4a:78:97:8d:45:
30:41:91:98:3d:13:31:71:ad:c1:5b:68:6c:78:8b:79:12:47:
66:e6:0c:a1:85:da:79:74:3f:e1:01:50:27:41:d0:f9:33:f7:
3a:71:cc:c1:da:c5:af:41:a2:87:c6:d3:58:62:ec:76:6a:fa:
b0:a9:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:11:46 2025 by rpki-client