Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/VwqFht4h_7XByGOfJ2QJtVf9FPg.roa
File: VwqFht4h_7XByGOfJ2QJtVf9FPg.roa (raw, json)
Hash identifier: 9JMQ3DA6tuKKb9Dn7fhunrwucPZg6Q0W4lbwGot04jg=
Subject key identifier: 57:0A:85:86:DE:21:FF:B5:C1:C8:63:9F:27:64:09:B5:57:FD:14:F8
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019492E239E507036E8CDEE640DDE6BC900E
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/VwqFht4h_7XByGOfJ2QJtVf9FPg.roa
Signing time: Thu 23 Jan 2025 11:18:07 +0000
ROA not before: Thu 23 Jan 2025 11:18:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58345
IP address blocks: 5.134.32.0/20 maxlen: 20
185.102.204.0/22 maxlen: 22
193.108.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:e2:39:e5:07:03:6e:8c:de:e6:40:dd:e6:bc:90:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 23 11:18:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=570a8586de21ffb5c1c8639f276409b557fd14f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:ee:f8:ae:16:f8:db:6a:09:64:21:9d:5e:
ff:f7:7b:a0:5f:d1:35:de:71:a2:0e:65:a3:b5:43:
4b:c9:e1:5f:69:9d:c6:6a:e1:f6:4d:05:fc:4e:36:
7c:10:4d:32:38:10:54:fe:c2:59:2b:32:f8:50:c3:
44:74:a5:df:22:04:a1:b5:c7:68:82:51:4a:fc:d1:
2e:14:47:fe:c1:4f:a9:12:dc:5b:69:1b:6b:0c:fb:
e4:45:7c:3a:90:b0:73:90:31:24:70:c0:d5:82:b1:
5f:bb:c8:3a:5e:f1:dd:b3:ba:71:d5:7b:dd:7b:bb:
69:11:99:5a:c7:c6:0d:f3:fe:c1:7b:a7:e7:1a:0d:
62:fa:dd:9e:cc:07:60:c5:02:1a:82:e2:66:22:ed:
d3:35:ce:cb:91:fb:45:35:db:23:f3:a6:1a:a8:b4:
28:02:5a:b4:79:6b:5c:ec:5c:8e:e9:6c:d7:8a:bc:
02:f0:a9:8d:ed:f5:fd:c0:c4:64:31:46:b4:35:99:
0b:b1:25:cd:0d:83:2e:46:51:ae:a8:6a:d8:be:f1:
99:ec:98:a3:6a:30:a9:27:d9:90:a3:cb:28:47:b8:
0e:5c:be:3e:48:3a:58:41:84:5e:24:74:b6:3a:75:
2c:e1:a2:44:3a:fd:5a:58:70:85:57:cf:9d:c0:27:
24:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0A:85:86:DE:21:FF:B5:C1:C8:63:9F:27:64:09:B5:57:FD:14:F8
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/VwqFht4h_7XByGOfJ2QJtVf9FPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.32.0/20
185.102.204.0/22
193.108.206.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:76:ae:b9:88:7f:95:2f:50:a7:cc:ee:3f:e3:45:34:db:04:
ea:ab:9a:e2:ea:5e:e9:15:f6:07:03:0f:00:5c:be:11:99:2a:
b1:0d:0d:ec:cd:88:ae:48:48:bd:e7:4c:58:1e:67:48:99:fd:
76:85:83:97:1e:f3:10:fe:7a:a6:6c:f3:75:bc:2e:ef:d5:9a:
a7:2d:f5:27:86:8a:0f:56:41:e5:5b:f0:3d:b2:9d:f4:55:4d:
85:9b:c1:14:6d:7a:3d:1a:5a:3f:47:dd:9d:b1:75:a5:14:29:
e2:0f:58:39:92:39:8f:e0:2c:e1:af:4e:2f:75:2f:2b:74:63:
89:c2:97:f3:01:68:04:e2:a6:f2:bb:0f:73:9e:06:88:7c:41:
dd:fe:27:a0:02:d7:0b:00:e4:e9:f5:14:f2:d5:0f:68:b3:d2:
42:4d:3d:23:50:04:33:90:25:f5:07:14:70:67:b6:3a:8f:7b:
92:2a:ce:0b:90:9c:ed:16:d6:a4:d7:6b:bb:10:be:3f:2d:4d:
ba:3c:d6:8b:1c:ba:87:ea:2f:9b:86:32:10:24:1d:fa:2e:cc:
71:7c:d6:32:1c:80:7e:9f:ca:af:04:8d:f4:85:94:dc:e6:90:
e0:b2:2c:6c:3b:75:21:a2:37:48:06:9d:bf:5a:09:b8:91:cb:
c7:f6:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:25:59 2025 by rpki-client