Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa
File: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (raw, json)
Hash identifier: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=
Subject key identifier: D5:CF:80:6E:8D:0B:C4:15:43:0C:4E:2C:06:B1:BD:25:2F:DE:3F:32
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 01942521E4D4C88AE497BE2D605ABE0FDC1C
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50957
IP address blocks: 5.153.248.0/21 maxlen: 21
31.25.184.0/21 maxlen: 21
37.128.128.0/21 maxlen: 21
77.73.0.0/21 maxlen: 21
78.31.104.0/21 maxlen: 21
89.200.136.0/21 maxlen: 21
185.98.196.0/22 maxlen: 22
213.170.0.0/19 maxlen: 19
2a02:24e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e4:d4:c8:8a:e4:97:be:2d:60:5a:be:0f:dc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5cf806e8d0bc415430c4e2c06b1bd252fde3f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:c8:b1:e1:a3:fe:d5:b2:bb:d9:4c:86:95:
d5:99:16:13:98:c2:1a:05:fa:ac:fe:bb:13:33:d7:
6e:23:11:b0:8e:f1:9d:87:53:5f:d7:c6:4a:60:da:
1b:4c:b1:28:d6:85:ce:b6:3e:10:ec:e7:dc:40:97:
f4:91:c3:7c:70:e4:5d:43:75:9d:8a:82:20:c2:bf:
11:ad:3b:07:14:98:5e:b7:cf:9a:2b:80:d8:f4:70:
e0:7c:da:ea:91:83:cd:f5:22:17:4d:54:c4:34:46:
64:53:a3:c2:2f:d6:b3:e2:c5:c7:02:0f:9c:52:73:
ad:db:0e:2e:0a:4c:0b:58:24:61:e4:97:0c:38:dd:
72:ae:f9:ce:cd:be:87:06:5f:a5:1b:34:de:a7:18:
23:71:60:2d:a6:18:ed:c0:c0:ae:b6:d6:7f:2f:23:
29:ff:1f:38:d2:1f:36:08:fb:61:9d:02:56:b2:e6:
6a:27:0d:aa:97:70:cd:69:c9:49:72:59:29:b6:1c:
1f:4b:e6:ec:a7:98:37:75:df:42:9f:4e:59:17:d0:
60:01:e1:3a:e9:9d:60:57:79:81:b8:b4:8c:0e:1b:
da:be:2f:80:df:b0:87:3c:58:93:7b:5c:90:2f:5e:
f5:44:0f:e3:80:3c:b3:83:6d:28:d1:c9:8e:28:7f:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:80:6E:8D:0B:C4:15:43:0C:4E:2C:06:B1:BD:25:2F:DE:3F:32
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.248.0/21
31.25.184.0/21
37.128.128.0/21
77.73.0.0/21
78.31.104.0/21
89.200.136.0/21
185.98.196.0/22
213.170.0.0/19
IPv6:
2a02:24e0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:00:f2:32:57:8a:02:55:29:7c:87:03:fb:03:ed:b6:15:20:
7c:de:70:8b:0e:74:e5:b5:05:5e:dc:71:73:24:11:e4:22:c4:
35:fd:89:e1:5c:5b:e4:15:ad:05:dc:30:85:ab:33:4b:dd:78:
5b:74:7e:70:f6:96:a5:18:a3:6f:73:31:b8:6d:a1:77:af:ec:
27:1d:9f:82:4c:86:30:55:20:f2:75:d6:41:bd:f6:54:99:d2:
53:cd:de:b9:86:bc:6a:92:78:71:e5:d3:78:87:be:00:e9:0b:
82:a1:e9:0b:a7:b3:f1:db:ce:99:b2:09:32:1e:2d:81:90:16:
16:e2:07:2b:85:0d:92:21:9c:15:0d:d0:c1:08:cd:dc:0c:a4:
c4:9c:4f:4e:9f:5a:d6:a0:73:64:17:7e:a1:bb:3d:84:77:7c:
7b:9f:55:cf:d8:f3:c4:ab:78:b0:ba:6b:0d:c0:0d:66:b6:e4:
6e:7a:3e:96:93:fb:f2:0d:18:7b:1a:be:34:ca:6e:f4:24:95:
8e:31:24:68:91:e6:78:22:02:d4:73:b7:11:ce:44:6a:a2:db:
01:8b:31:09:27:e0:71:79:d6:03:a8:4d:fc:99:43:57:e0:02:
74:f0:6b:81:70:70:e7:a4:18:39:3f:cc:4e:f8:ad:46:00:64:
32:7e:98:ca
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZQlIeTUyIrkl74tYFq+D9wcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjMyMDE4ODA5ODUyMGMzNjYyNzdmNzQ5YTRmNzdhMWQ0
NDQ0MzkwHhcNMjUwMTAyMDM0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWNmODA2ZThkMGJjNDE1NDMwYzRlMmMwNmIxYmQyNTJmZGUzZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOnIseGj/tWyu9lMhpXVmRYTmMIa
Bfqs/rsTM9duIxGwjvGdh1Nf18ZKYNobTLEo1oXOtj4Q7OfcQJf0kcN8cORdQ3Wd
ioIgwr8RrTsHFJhet8+aK4DY9HDgfNrqkYPN9SIXTVTENEZkU6PCL9az4sXHAg+c
UnOt2w4uCkwLWCRh5JcMON1yrvnOzb6HBl+lGzTepxgjcWAtphjtwMCuttZ/LyMp
/x840h82CPthnQJWsuZqJw2ql3DNaclJclkpthwfS+bsp5g3dd9Cn05ZF9BgAeE6
6Z1gV3mBuLSMDhvavi+A37CHPFiTe1yQL171RA/jgDyzg20o0cmOKH8qDwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFNXPgG6NC8QVQwxOLAaxvSUv3j8yMB8GA1UdIwQY
MBaAFLRjIBiAmFIMNmJ390mk93odREQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80YWNiODMtZjk0MC00NzY2LWJjYTkt
NjA4ZTdkNzc5YmM3LzEvMWMtQWJvMEx4QlZEREU0c0JyRzlKU19lUHpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80YWNiODMtZjk0MC00NzY2LWJjYTktNjA4ZTdkNzc5YmM3
LzEvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDBZn4AwQD
Hxm4AwQDJYCAAwQDTUkAAwQDTh9oAwQDWciIAwQCuWLEAwQF1aoAMA0EAgACMAcD
BQAqAiTgMA0GCSqGSIb3DQEBCwUAA4IBAQB6APIyV4oCVSl8hwP7A+22FSB83nCL
DnTltQVe3HFzJBHkIsQ1/YnhXFvkFa0F3DCFqzNL3XhbdH5w9palGKNvczG4baF3
r+wnHZ+CTIYwVSDyddZBvfZUmdJTzd65hrxqknhx5dN4h74A6QuCoekLp7Px286Z
sgkyHi2BkBYW4gcrhQ2SIZwVDdDBCM3cDKTEnE9On1rWoHNkF36huz2Ed3x7n1XP
2PPEq3iwumsNwA1mtuRuej6Wk/vyDRh7Gr40ym70JJWOMSRokeZ4IgLUc7cRzkRq
otsBizEJJ+BxedYDqE38mUNX4AJ08GuBcHDnpBg5P8xO+K1GAGQyfpjK
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:18 2025 by rpki-client