Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/x_rxqF-JJR6RocSDql__H0qmhrc.roa
File: x_rxqF-JJR6RocSDql__H0qmhrc.roa (raw, json)
Hash identifier: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=
Subject key identifier: C7:FA:F1:A8:5F:89:25:1E:91:A1:C4:83:AA:5F:FF:1F:4A:A6:86:B7
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 0194206834E04707A2544B416E9B827B7D2E
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/x_rxqF-JJR6RocSDql__H0qmhrc.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57888
IP address blocks: 5.149.64.0/20 maxlen: 20
5.149.78.0/23 maxlen: 23
5.149.80.0/21 maxlen: 21
5.149.80.0/22 maxlen: 22
5.149.84.0/22 maxlen: 22
5.149.92.0/22 maxlen: 22
82.117.232.0/21 maxlen: 21
85.235.84.0/22 maxlen: 22
178.210.184.0/21 maxlen: 21
194.53.156.0/22 maxlen: 22
194.99.16.0/22 maxlen: 22
217.9.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:34:e0:47:07:a2:54:4b:41:6e:9b:82:7b:7d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7faf1a85f89251e91a1c483aa5fff1f4aa686b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:6e:44:fa:4e:83:a8:17:57:8b:9e:6b:40:
68:66:33:30:10:6c:20:2d:c6:a6:50:b4:c6:34:35:
14:b0:65:34:cc:93:cb:3b:55:1d:4d:c6:ee:6c:f7:
66:38:e0:cf:f1:1f:61:d5:35:87:a6:a6:c4:08:61:
1f:74:4b:6d:36:30:d3:be:84:f5:9d:70:80:c1:f3:
5a:40:a2:07:e2:5b:ef:ca:87:8b:02:d7:30:11:94:
9f:55:0d:37:58:fd:92:8a:f8:5c:65:c9:35:55:5a:
ce:45:86:11:06:0e:b6:f6:ff:e3:70:05:19:85:c9:
5d:47:f5:ad:66:e6:7e:83:fb:71:18:99:7c:87:29:
b2:c0:4b:f3:22:a9:67:19:1f:5b:4f:18:f7:5d:0c:
4d:48:25:66:51:25:df:08:f7:3d:cc:1d:56:bd:44:
e9:36:df:16:d8:39:9c:ce:16:a8:4d:b8:b8:e1:d9:
c2:4d:cb:c6:56:b0:b9:64:74:80:ed:ac:45:37:d7:
de:d1:d2:73:a1:1a:1e:ee:b1:a9:c9:37:4f:af:1e:
5c:73:1d:39:87:a3:e7:2c:f2:3f:64:12:94:28:77:
28:07:0f:bf:e4:1f:53:66:8f:86:ba:da:d0:68:cc:
40:31:88:d7:7a:58:a0:0e:56:b4:36:61:60:57:e2:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FA:F1:A8:5F:89:25:1E:91:A1:C4:83:AA:5F:FF:1F:4A:A6:86:B7
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/x_rxqF-JJR6RocSDql__H0qmhrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.64.0-5.149.87.255
5.149.92.0/22
82.117.232.0/21
85.235.84.0/22
178.210.184.0/21
194.53.156.0/22
194.99.16.0/22
217.9.20.0/22
Signature Algorithm: sha256WithRSAEncryption
06:a0:83:65:8b:0b:b8:22:05:70:12:0c:9d:0b:f1:4c:5e:88:
1d:9e:f4:3c:48:7b:d4:e2:39:30:51:a5:65:82:e7:15:cd:7d:
8c:e5:90:95:f7:20:ee:9c:82:1b:02:7d:15:92:f3:9c:4b:e3:
06:2e:10:25:5e:4c:88:fa:f3:3f:db:e6:70:6b:26:b7:e3:a4:
76:b2:9a:60:ea:cb:80:89:72:cd:e3:3b:67:d3:9d:d5:d3:71:
6a:4d:e0:31:38:49:26:20:35:2e:e2:fd:82:f6:50:ea:b6:fd:
d8:9d:93:42:a2:98:d1:62:fe:c3:a9:f7:7a:3a:71:30:e2:32:
a6:3e:b1:fa:b0:00:89:6b:2d:ae:f9:12:74:3f:e6:e6:f2:94:
dd:24:09:9e:e1:ba:c5:46:5e:35:96:95:50:cc:f3:9f:ae:2a:
35:76:af:e1:9d:3a:73:8f:6e:6c:7b:2e:0f:52:73:96:61:27:
ad:f4:d0:c0:47:a5:b2:fa:8c:00:9a:d9:cc:c1:b4:5f:a3:20:
25:24:57:6f:cd:3a:3c:96:9d:b3:10:84:de:ff:fc:25:f7:92:
f6:e2:72:1a:54:6a:1b:59:41:dd:77:d1:f9:65:71:39:23:eb:
4d:d3:17:49:4d:a8:9c:40:f1:8f:66:2f:81:c2:1f:70:87:58:
b7:fc:86:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:24 2025 by rpki-client