Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/dem0uBwT7g7YZDZIQsS-aXVQdOI.roa
File: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (raw, json)
Hash identifier: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=
Subject key identifier: 75:E9:B4:B8:1C:13:EE:0E:D8:64:36:48:42:C4:BE:69:75:50:74:E2
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 01942445A4C50422BDB799B20E9AB2168D99
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/dem0uBwT7g7YZDZIQsS-aXVQdOI.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61157
IP address blocks: 185.5.24.0/24 maxlen: 24
185.5.25.0/24 maxlen: 24
185.5.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a4:c5:04:22:bd:b7:99:b2:0e:9a:b2:16:8d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75e9b4b81c13ee0ed864364842c4be69755074e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:c5:06:80:15:46:7e:90:06:e0:3d:93:04:
5b:c4:9c:4e:2c:0d:27:69:2f:a8:d0:48:f5:7e:93:
8b:22:6d:fa:33:0e:0a:44:a7:79:72:91:22:af:b3:
a5:31:bb:b9:ec:f8:c9:34:3c:ca:e4:d6:df:9a:5e:
5e:7d:a0:23:28:f6:4e:c2:d2:49:b5:6a:0f:9e:ef:
e7:bc:88:ae:df:27:49:7f:f5:9b:b6:e1:92:01:f6:
67:a1:58:41:65:ff:a6:f5:cd:5b:40:95:35:ef:3c:
8f:6c:66:4f:d9:e6:18:90:7c:fd:4f:e3:8b:e0:bf:
e0:e9:f7:46:08:d8:b0:ae:59:56:d9:64:14:72:10:
d2:d8:92:e8:b0:b3:a3:8c:c8:73:7a:1d:53:29:ef:
c6:8d:4e:99:c2:df:9a:e1:37:9f:fe:50:a2:92:81:
ef:12:90:48:f3:80:73:41:16:78:a8:92:24:fb:0b:
b1:e7:ed:7a:bd:74:38:ea:cc:3e:c1:1d:ba:50:d9:
22:04:ab:e4:b9:7f:29:46:59:eb:1d:e3:26:37:86:
e8:25:43:0e:08:1c:a0:3f:94:56:5e:bf:e1:46:90:
85:01:64:9f:ce:b9:65:ec:33:29:1b:4d:ed:68:91:
42:72:27:3b:80:d4:cd:97:47:d2:75:3b:e3:7b:6d:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E9:B4:B8:1C:13:EE:0E:D8:64:36:48:42:C4:BE:69:75:50:74:E2
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/dem0uBwT7g7YZDZIQsS-aXVQdOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.24.0/23
185.5.27.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a1:28:d6:c3:bd:58:94:02:a8:a6:45:4e:4d:6c:a8:2e:68:
b7:4e:7b:c0:95:1e:ec:19:be:a4:08:70:01:95:53:f9:20:6b:
ec:92:d5:ae:d7:7e:6d:cc:3d:f3:31:e4:bd:10:4d:70:4f:55:
e3:5f:65:76:1d:b3:c8:84:b9:fa:a1:e2:c9:fd:e7:f6:bc:0f:
bb:6a:d9:c7:b7:95:32:7c:3b:78:4a:e4:71:cf:cb:5e:95:d2:
a2:1c:77:46:01:5c:85:fa:d2:bf:85:37:9a:37:29:9c:2b:13:
15:71:8d:d4:27:27:5b:ce:c6:ea:c5:24:a0:2b:e4:16:4d:c9:
02:3a:87:b0:20:92:df:7d:08:6b:17:c1:54:18:9a:f1:20:2c:
a3:6e:1b:9c:e5:8c:d7:d6:7e:25:18:9b:a6:68:29:1c:4b:0d:
e0:29:cd:02:b8:55:f5:6c:d1:4b:6b:d1:4d:a1:9c:a1:fb:25:
5f:ca:37:19:7c:af:78:e5:74:90:1e:53:ab:9b:86:9a:18:42:
a7:8d:90:a1:cc:9e:dc:e8:c4:c5:a6:5e:06:8c:17:a1:46:a0:
e3:24:e0:ca:a0:4c:f5:2c:db:18:53:98:c2:3b:1d:54:3a:90:
b0:0c:40:a5:15:55:20:9f:75:bd:47:88:a6:cf:c4:b9:9c:16:
ab:6d:26:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:28 2025 by rpki-client