Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/xMtiBvCdtWdpBztykMPhn-kY_9s.roa
File: xMtiBvCdtWdpBztykMPhn-kY_9s.roa (raw, json)
Hash identifier: GpBtwdAknau8bMjJICf5aFSnmGTM0dxBI9Qhq4iCudQ=
Subject key identifier: C4:CB:62:06:F0:9D:B5:67:69:07:3B:72:90:C3:E1:9F:E9:18:FF:DB
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 0194221F98B9838D2C853F4603E81BB13476
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/xMtiBvCdtWdpBztykMPhn-kY_9s.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50923
IP address blocks: 5.129.0.0/16 maxlen: 16
5.129.192.0/19 maxlen: 19
5.129.192.0/20 maxlen: 20
5.129.192.0/21 maxlen: 21
5.129.200.0/21 maxlen: 21
5.129.208.0/20 maxlen: 20
5.129.208.0/21 maxlen: 21
5.129.216.0/21 maxlen: 21
5.129.224.0/19 maxlen: 19
5.129.224.0/20 maxlen: 20
5.129.224.0/21 maxlen: 21
5.129.232.0/21 maxlen: 21
5.129.240.0/20 maxlen: 20
5.129.240.0/21 maxlen: 21
5.129.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:98:b9:83:8d:2c:85:3f:46:03:e8:1b:b1:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4cb6206f09db56769073b7290c3e19fe918ffdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:87:f6:86:d3:81:65:6b:08:62:5b:7b:12:
66:aa:5a:87:d9:44:0d:a7:ad:a4:76:de:c8:1e:5d:
b5:6a:a9:fc:8c:fc:b0:1a:34:a9:90:76:32:6d:39:
0a:04:dc:4c:55:26:e2:4b:29:18:c0:87:ad:15:46:
e5:5b:04:29:75:36:b1:f7:cf:7b:5b:5a:48:e2:51:
4c:43:22:1f:5b:c4:d7:47:88:66:b3:13:fc:f7:60:
a2:fa:1f:6e:54:b7:17:25:66:ef:79:81:10:90:e3:
df:b6:e2:8a:09:c7:d7:fe:dc:18:eb:7a:20:f2:30:
8a:a5:05:4f:f6:79:8d:12:03:88:92:03:9f:b1:f4:
03:01:71:11:72:6c:94:48:f8:28:68:49:82:84:9e:
f7:9f:a2:5c:04:64:fa:e9:8d:05:5a:fd:0c:51:a7:
a9:0c:38:79:d7:85:c4:47:1c:2f:14:8e:c1:3c:66:
2b:78:b5:55:20:1a:38:e9:f2:2d:fb:f6:0a:7f:6e:
53:b4:6e:5d:45:86:98:d4:71:9f:2d:c5:4c:65:a0:
be:36:5f:82:ec:78:d1:75:7d:09:0a:0b:69:97:8a:
6b:a3:24:88:1f:9e:f9:4d:7a:9d:73:c0:13:a5:0a:
9e:f3:bb:19:2d:c0:91:5e:b5:62:a4:e8:50:39:c2:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CB:62:06:F0:9D:B5:67:69:07:3B:72:90:C3:E1:9F:E9:18:FF:DB
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/xMtiBvCdtWdpBztykMPhn-kY_9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:04:47:23:96:0b:2b:26:52:49:b4:73:69:73:d5:8a:97:6d:
dd:d3:31:f8:4f:93:34:a8:98:de:48:4f:4b:e5:f8:26:e2:79:
40:c7:55:bb:88:25:23:e8:57:3f:fa:7a:56:e6:c4:c8:34:ff:
d7:b6:d8:80:26:36:09:e4:cb:a1:c6:6f:7d:ab:57:b8:90:24:
74:a2:2e:07:2f:28:b6:91:ee:11:19:36:02:76:36:b8:72:a4:
d4:74:de:11:de:d5:69:62:cf:21:a8:12:7f:7a:98:41:ad:49:
cf:72:fa:12:e6:1b:ed:97:7a:01:4f:d2:8f:9c:ab:bf:f5:ac:
dd:8d:76:d9:39:f8:65:ef:f2:5e:75:7b:aa:42:47:1d:af:54:
eb:41:a5:6b:29:4b:34:98:0e:a8:39:0d:91:8b:4b:c2:f6:ba:
17:71:ca:3b:6c:04:b6:87:ab:78:3c:02:01:83:1c:45:c6:7e:
2c:a3:06:5a:51:72:14:a2:a3:1f:cd:03:e3:55:58:d4:6f:ff:
3b:20:05:94:46:4f:ec:d5:f3:2b:61:4d:77:bb:d4:20:06:7a:
03:71:0f:db:62:f0:06:8d:8e:78:f4:56:97:4b:75:ab:dc:2c:
dc:78:b5:8f:e6:15:f0:26:c2:04:64:80:49:a1:5b:63:48:40:
62:da:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:19 2025 by rpki-client