Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/fV4CO55wgQW9hfh18y1_D2jQQS0.roa
File: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (raw, json)
Hash identifier: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=
Subject key identifier: 7D:5E:02:3B:9E:70:81:05:BD:85:F8:75:F3:2D:7F:0F:68:D0:41:2D
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 019425FDCE923E04E03B4104D7A6CC4DD31B
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/fV4CO55wgQW9hfh18y1_D2jQQS0.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51984
IP address blocks: 46.253.40.0/24 maxlen: 24
46.253.41.0/24 maxlen: 24
46.253.42.0/24 maxlen: 24
46.253.43.0/24 maxlen: 24
46.253.44.0/24 maxlen: 24
46.253.45.0/24 maxlen: 24
46.253.46.0/24 maxlen: 24
46.253.47.0/24 maxlen: 24
185.182.152.0/24 maxlen: 24
185.182.153.0/24 maxlen: 24
185.182.154.0/24 maxlen: 24
185.182.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ce:92:3e:04:e0:3b:41:04:d7:a6:cc:4d:d3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d5e023b9e708105bd85f875f32d7f0f68d0412d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:70:47:83:51:f6:66:35:b4:ce:85:82:35:
fa:bf:91:8c:fa:5c:58:33:89:45:7f:2f:72:a5:eb:
7d:b1:ff:a5:4b:a2:d2:46:28:93:a9:96:68:41:a7:
33:fd:b1:eb:ec:e2:d8:b9:73:77:a9:89:e5:30:99:
44:32:3d:d8:75:94:2d:f0:7c:9f:9f:f0:29:0c:30:
5d:b0:93:ab:94:ae:bc:9d:99:21:c3:12:41:bb:4f:
72:2e:fe:15:ea:95:a8:87:9c:55:6c:50:b3:be:ef:
96:9d:f9:e5:c6:f0:8d:9f:6d:24:7c:08:db:6a:2a:
59:cb:d1:df:2d:46:fc:0d:6e:2d:89:54:28:fd:52:
7a:28:d3:db:60:59:1a:6e:0d:df:74:ab:d7:ce:ab:
a9:f4:5a:0c:ad:eb:7e:ba:0b:19:a1:82:bd:b1:36:
26:92:6a:7d:54:90:ab:27:60:cb:ce:fd:29:67:03:
ff:b3:75:80:97:ad:56:ca:bf:b9:c1:0d:93:de:f9:
3c:bc:81:d8:04:65:59:30:0a:a8:b2:a4:47:db:55:
6f:b1:ef:6a:07:09:88:4e:43:39:58:53:80:03:4e:
11:ac:a6:51:5c:ec:1c:ff:5b:19:89:fc:1f:70:75:
d8:6c:bc:22:f4:69:8b:56:22:0f:13:be:2d:f2:66:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5E:02:3B:9E:70:81:05:BD:85:F8:75:F3:2D:7F:0F:68:D0:41:2D
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/fV4CO55wgQW9hfh18y1_D2jQQS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.40.0/21
185.182.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:f3:27:82:bf:b0:63:5a:42:bd:46:09:04:e4:42:95:bb:d3:
8b:ab:f9:68:9d:03:b7:6b:2e:d0:88:8d:ba:74:4a:9f:24:ea:
9d:a3:83:5c:5c:0f:67:e9:99:8f:e7:6a:ff:2f:bb:ba:11:c4:
a1:f4:32:23:da:9a:ce:f0:bb:b8:5f:3e:6f:87:ea:e5:89:84:
47:dd:43:16:07:61:f0:4c:26:2a:22:4b:47:f0:fe:5d:97:32:
52:da:9f:65:39:90:79:e5:66:09:41:25:cc:83:44:ea:6b:24:
59:93:7c:b7:a3:d9:6c:b6:21:44:a6:22:2a:5c:22:59:1a:12:
91:af:97:49:c5:62:43:a5:bc:bd:9c:17:97:c6:4e:c5:e7:79:
0f:0c:96:be:6d:e8:f3:af:e6:e9:29:a3:78:94:87:49:b8:5b:
28:1a:8b:4a:bc:bc:75:5b:d8:ab:ae:7e:bc:e1:79:e6:d9:2e:
1c:30:64:22:1f:62:9d:7e:da:00:fd:61:d4:9f:36:f4:fb:11:
09:23:18:ae:74:29:c4:7b:1c:6a:63:5a:f1:f2:a2:04:e0:04:
14:8f:9d:48:05:3c:0a:f5:de:ce:ae:ff:ae:fc:4d:69:ae:22:
a1:e9:fe:22:b5:41:27:73:41:c8:f2:9e:0e:e4:7f:20:70:53:
b7:6b:25:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:41 2025 by rpki-client