Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/KyGy1yiZWdO5Baarc34FhluuX6o.roa
File: KyGy1yiZWdO5Baarc34FhluuX6o.roa (raw, json)
Hash identifier: PluDSAEvqHUwzzXaYjhHiEYtCeH5Nq3YEFQLeyKhxg0=
Subject key identifier: 2B:21:B2:D7:28:99:59:D3:B9:05:A6:AB:73:7E:05:86:5B:AE:5F:AA
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 019420683D6ED37BD44C5FD1B2B30E2323BC
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/KyGy1yiZWdO5Baarc34FhluuX6o.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59458
IP address blocks: 5.149.96.0/24 maxlen: 24
5.149.97.0/24 maxlen: 24
5.149.98.0/24 maxlen: 24
5.149.99.0/24 maxlen: 24
5.149.100.0/24 maxlen: 24
5.149.101.0/24 maxlen: 24
5.149.102.0/24 maxlen: 24
5.149.103.0/24 maxlen: 24
5.149.104.0/24 maxlen: 24
5.149.105.0/24 maxlen: 24
5.149.109.0/24 maxlen: 24
5.149.110.0/24 maxlen: 24
5.149.111.0/24 maxlen: 24
2a12:2340::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3d:6e:d3:7b:d4:4c:5f:d1:b2:b3:0e:23:23:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b21b2d7289959d3b905a6ab737e05865bae5faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:38:70:79:c4:33:08:ff:8a:8a:0f:69:b8:
93:dc:6f:86:62:28:d8:cd:02:09:09:93:31:03:dd:
dd:7c:65:d4:85:a1:09:58:60:ec:53:c6:53:a9:fa:
8f:37:71:1e:57:a7:1a:ec:d5:40:4b:41:0e:31:e8:
64:ae:bf:e6:16:a0:40:4a:e0:5f:38:67:98:7c:17:
7a:be:3d:1e:62:5c:04:3c:1a:e0:1a:7e:05:b0:98:
aa:45:3d:6d:23:39:47:c7:8c:15:91:dd:c8:09:f4:
2e:07:f5:bb:06:7b:a8:07:53:f0:2f:b3:44:ae:14:
7d:67:36:a2:ee:46:15:bc:03:bd:52:3c:e0:7a:b2:
8d:84:b0:73:d1:1f:9b:aa:4a:69:56:2a:5e:75:d1:
c8:97:de:6f:7b:66:cf:f8:8c:70:f6:2e:3e:39:82:
c4:b4:a8:14:19:8c:9c:55:c8:f6:c7:14:02:66:d1:
92:08:4e:7d:49:0b:9b:1f:75:ac:c7:1f:7a:dc:0f:
78:79:26:bf:5c:ff:9f:d4:a0:29:c0:67:4b:31:65:
56:52:af:fc:94:1c:68:95:b2:8f:e7:45:5d:75:ac:
f7:f7:29:23:db:ba:3a:56:7c:21:0e:df:87:d4:94:
72:73:45:1c:c8:28:48:6e:82:f3:70:ca:d6:78:4c:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:21:B2:D7:28:99:59:D3:B9:05:A6:AB:73:7E:05:86:5B:AE:5F:AA
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/KyGy1yiZWdO5Baarc34FhluuX6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.96.0-5.149.105.255
5.149.109.0-5.149.111.255
IPv6:
2a12:2340::/48
Signature Algorithm: sha256WithRSAEncryption
ac:dc:87:a9:74:76:34:57:c8:2b:95:af:7f:d2:69:5f:f2:02:
35:de:8e:80:ce:f4:38:1c:e7:de:64:02:a6:18:ae:df:12:89:
68:2a:13:db:c5:40:24:3a:92:7b:9d:44:e7:79:7c:ad:bc:f5:
b6:1e:46:4a:4c:0e:12:ef:e4:01:ed:57:ac:87:2a:12:c7:78:
22:94:37:33:b2:d1:af:4c:bf:c0:9f:4f:dd:db:1f:42:65:d4:
3f:d1:cf:22:f7:e1:7b:55:be:2d:ea:07:aa:55:fe:5c:3b:2b:
df:c6:53:ed:25:2e:c8:25:38:65:23:b4:ae:26:81:55:7e:cf:
8f:51:94:29:72:82:7a:af:74:fa:01:e7:0f:b5:23:20:11:53:
96:98:10:2a:35:bd:e7:cb:92:15:1a:0b:01:7d:11:85:5e:73:
e8:3c:4b:fd:e9:ba:23:2f:7f:a3:82:41:3b:ed:c6:a4:4d:25:
9e:2b:e0:9e:5c:9a:88:0d:bd:45:c2:c3:00:35:18:2b:6d:dd:
00:d9:dc:fb:51:0e:a1:0b:05:e0:45:75:34:dc:8f:50:4f:f9:
78:79:3c:c6:87:9c:a8:fb:7f:6b:81:4b:0a:d5:c1:39:4f:ec:
df:52:7c:c3:7d:10:b4:ea:ed:ae:22:52:c9:10:59:db:7b:c5:
83:76:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:39 2025 by rpki-client