Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/t2KUlecrJopo3Q18DTABuP6MxmI.roa
File: t2KUlecrJopo3Q18DTABuP6MxmI.roa (raw, json)
Hash identifier: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=
Subject key identifier: B7:62:94:95:E7:2B:26:8A:68:DD:0D:7C:0D:30:01:B8:FE:8C:C6:62
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0194B6DC6D173935A2762BA01A8E1178E66E
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/t2KUlecrJopo3Q18DTABuP6MxmI.roa
Signing time: Thu 30 Jan 2025 10:58:06 +0000
ROA not before: Thu 30 Jan 2025 10:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213544
IP address blocks: 5.153.182.0/23 maxlen: 24
176.96.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:dc:6d:17:39:35:a2:76:2b:a0:1a:8e:11:78:e6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 30 10:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7629495e72b268a68dd0d7c0d3001b8fe8cc662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:be:69:34:cd:14:c3:b7:16:c7:7e:16:72:
1f:a2:58:65:ae:a4:7f:ed:92:6c:eb:f4:31:bb:38:
48:48:83:96:4a:6f:91:82:c1:53:25:08:1a:ee:66:
0c:80:14:4f:6f:69:38:c6:ab:39:ac:da:e9:f2:ab:
e2:78:05:da:04:16:e9:71:6e:39:6e:38:c2:20:79:
60:5a:9d:87:6b:1f:22:d5:b0:be:90:6d:ec:d3:41:
5d:07:c3:1f:e0:83:9b:ef:db:7e:9d:ca:e2:84:02:
4e:c6:64:3e:a0:9d:2c:6f:44:97:29:2e:45:e1:66:
70:35:34:07:fc:6a:3f:1d:a4:7c:de:7f:24:d1:3a:
ac:ed:1c:69:ac:72:ea:09:8b:e1:9d:75:47:10:fc:
9b:60:b6:46:48:8d:40:4f:c6:50:85:94:8d:95:f8:
62:e2:36:45:4d:bf:9b:53:61:88:6e:b2:8c:f6:7c:
f0:f3:70:ea:06:e9:e4:9c:d2:28:79:51:ab:a1:84:
94:ae:2e:1d:bf:45:73:35:c4:e4:84:d9:3a:54:a1:
56:27:0a:b5:33:78:44:4e:e7:96:dc:6e:93:85:ef:
54:14:d2:1c:f9:d4:f8:36:76:d5:21:be:3d:29:7a:
32:05:8f:a8:24:bb:b2:d6:c8:94:5a:fc:73:cc:98:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:94:95:E7:2B:26:8A:68:DD:0D:7C:0D:30:01:B8:FE:8C:C6:62
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/t2KUlecrJopo3Q18DTABuP6MxmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.182.0/23
176.96.190.0/23
Signature Algorithm: sha256WithRSAEncryption
38:bd:d6:d6:21:42:56:59:dc:10:62:0c:52:f4:92:6f:01:01:
bc:57:58:9d:3a:c0:95:40:a6:aa:b6:85:76:72:a3:84:c8:a8:
45:72:b5:c6:6a:07:3d:ec:63:58:03:75:02:a5:a4:f6:44:2c:
22:78:96:9f:46:e7:57:93:e7:71:c4:6f:8c:0f:71:0e:d0:4e:
66:94:db:79:2c:34:ec:36:b0:a6:3f:dd:64:b2:48:24:a8:88:
7e:22:a4:cb:01:f8:db:6f:fe:67:d7:6c:4f:82:c8:05:04:66:
dc:07:f7:af:fd:19:3c:aa:1c:da:54:96:61:0f:f3:5e:22:98:
fc:7d:0f:b2:60:08:68:08:72:d0:88:ea:32:f6:b8:5d:28:58:
1a:df:10:31:73:f1:5a:78:75:a2:a8:ce:9a:53:27:96:34:da:
fa:b3:9d:d0:90:c9:53:b7:cc:63:7c:23:5a:5f:ae:11:74:3c:
ff:0f:77:15:f4:1a:60:3e:af:51:03:26:93:25:44:56:b5:44:
d7:a7:8d:cd:b1:3d:c4:af:e6:e3:38:2d:ef:57:49:bb:52:1a:
0e:e7:52:13:b5:c6:cf:73:e2:79:9c:05:ce:e5:d7:4f:e9:90:
d8:33:5d:d0:a9:36:fa:18:a4:12:cc:bd:23:1d:3b:38:9c:15:
1f:ae:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:07:51 2025 by rpki-client