Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/Ta5lPzjSaWOGZmJzb8ldMeucHGI.roa
File: Ta5lPzjSaWOGZmJzb8ldMeucHGI.roa (raw, json)
Hash identifier: d1Ea1L5jJ9KIi1NEhEpKqHGMktv6fUL4cljVIHxwf/0=
Subject key identifier: 4D:AE:65:3F:38:D2:69:63:86:66:62:73:6F:C9:5D:31:EB:9C:1C:62
Certificate issuer: /CN=c5420eb5d94f0fab862e0840414f432b785e6054
Certificate serial: 019421B196C12018BCF1C4EC8223A1EB7F1B
Authority key identifier: C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/Ta5lPzjSaWOGZmJzb8ldMeucHGI.roa
Signing time: Wed 01 Jan 2025 11:47:53 +0000
ROA not before: Wed 01 Jan 2025 11:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9177
IP address blocks: 46.172.96.0/20 maxlen: 24
81.161.208.0/20 maxlen: 24
83.97.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:96:c1:20:18:bc:f1:c4:ec:82:23:a1:eb:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5420eb5d94f0fab862e0840414f432b785e6054
Validity
Not Before: Jan 1 11:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dae653f38d26963866662736fc95d31eb9c1c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:d5:d1:0e:7c:00:21:4c:a6:96:0e:ee:50:
4f:ef:a3:20:f7:ad:e7:80:7d:74:1e:27:68:06:51:
e4:75:35:a4:d6:da:58:0f:d2:c2:7b:f5:ca:80:07:
f4:f0:2d:c5:52:fe:88:50:03:b0:d6:23:ad:9a:ec:
0a:fb:ab:2c:ef:02:74:96:26:8a:2f:d1:5f:2c:2f:
8e:aa:e4:6c:45:04:28:d9:bc:3f:d7:57:25:39:ea:
3f:a6:57:49:35:f1:fc:1c:b7:16:7d:f4:75:18:71:
3b:54:45:c0:fa:c6:65:d5:75:7a:7a:24:51:18:44:
a3:50:98:ae:33:41:78:c2:54:9b:89:e5:2b:5c:54:
36:e3:aa:c0:6d:4b:be:c6:d0:0e:ca:ea:e2:8d:ea:
f4:5c:c6:7f:f9:b9:b9:14:b8:0b:87:a1:59:67:e1:
a4:ac:9f:f9:60:92:63:fd:e0:6f:c2:8b:fa:12:43:
33:fd:20:29:20:f9:a0:c3:e7:98:82:4e:50:7d:50:
1f:27:be:f7:7f:84:23:65:63:ce:36:69:29:29:c2:
f6:5b:57:ae:0d:c8:ae:65:19:f1:94:f7:d4:af:bc:
59:0b:4b:1b:94:83:1a:e6:14:ff:34:35:20:8c:ce:
50:7b:35:3d:20:06:c8:a9:54:e5:bd:2d:74:83:7b:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AE:65:3F:38:D2:69:63:86:66:62:73:6F:C9:5D:31:EB:9C:1C:62
X509v3 Authority Key Identifier:
keyid:C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/Ta5lPzjSaWOGZmJzb8ldMeucHGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.96.0/20
81.161.208.0/20
83.97.0.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:47:19:ac:28:4b:b8:ac:57:c8:5b:65:e3:be:c7:11:e6:54:
fb:74:7c:9e:d7:b6:a0:98:f0:56:47:e2:73:00:25:01:90:28:
23:f6:df:d4:94:a0:ca:65:e5:35:bf:e6:8d:dc:02:89:c5:50:
0f:36:fb:e6:3f:48:d3:ec:d3:ee:e4:17:42:2e:fb:00:53:5b:
ac:e5:5a:43:0a:1d:d1:4d:ef:12:e8:dd:20:13:21:24:4a:80:
23:ef:7a:db:51:89:69:2a:02:2b:0c:dc:4d:e2:90:e5:3a:d5:
72:59:55:4c:a8:b5:d2:50:07:95:7f:37:00:7a:95:e0:87:90:
63:b0:24:04:ed:a3:2b:9a:8c:c4:59:e7:a9:a5:57:b2:a6:99:
f0:5e:33:37:b9:fe:a1:a1:01:c8:e3:07:5d:91:b3:fa:13:12:
18:3b:99:a7:da:08:7e:bd:68:ea:f1:f2:e1:fd:7d:1c:dc:93:
bc:c9:86:44:ce:06:76:7b:91:fe:43:99:f1:f2:00:bc:29:42:
19:fd:47:29:38:68:06:7b:8a:69:70:6f:dd:ec:15:e8:12:20:
09:7b:a6:03:c8:a5:fb:60:b5:fc:63:e1:28:eb:92:fc:11:26:
ac:c7:cf:a7:e9:47:7d:7c:4f:09:94:6d:9c:aa:00:04:4b:3c:
14:2e:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:56:45 2025 by rpki-client