Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa
File: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (raw, json)
Hash identifier: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=
Subject key identifier: 69:03:36:AC:F6:51:80:AA:CD:FB:BA:80:1D:75:31:32:FA:4B:3B:DB
Certificate issuer: /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Certificate serial: 01942827116BF531908697C8E0804850F8D4
Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa
Signing time: Thu 02 Jan 2025 17:53:56 +0000
ROA not before: Thu 02 Jan 2025 17:53:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203165
IP address blocks: 5.145.104.0/21 maxlen: 21
5.145.104.0/22 maxlen: 22
5.145.108.0/22 maxlen: 22
2a01:8b40::/32 maxlen: 32
2a01:8b40::/36 maxlen: 36
2a01:8b40:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:11:6b:f5:31:90:86:97:c8:e0:80:48:50:f8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Validity
Not Before: Jan 2 17:53:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=690336acf65180aacdfbba801d753132fa4b3bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:cb:c2:19:dc:7e:9e:16:19:a7:fa:b3:60:
5e:9b:4d:80:da:ed:89:35:bb:18:43:c5:df:3e:2f:
49:ed:09:d6:ae:2d:ff:bb:10:a5:7a:ec:e1:43:05:
8c:7d:e0:c6:fc:81:34:20:09:67:c8:f5:3b:dc:65:
42:d5:fa:dc:9b:c0:29:e4:82:1d:71:1b:f6:e8:8a:
54:c5:d4:69:5d:a0:90:47:36:4b:ae:ea:e7:0d:ed:
f8:04:84:b3:37:88:64:5c:96:8c:42:5e:c4:2a:91:
05:96:26:f9:22:7a:06:cb:dc:9a:48:72:50:1d:52:
34:ec:d3:5e:c0:e8:5d:ef:c3:83:ea:26:35:6f:59:
b8:dc:f4:6d:30:35:d9:ef:dd:c5:34:2c:a2:e6:c3:
19:ea:d1:da:63:35:43:76:a7:3e:be:e4:57:ea:40:
c3:3d:b2:06:c6:71:b1:7b:f1:08:48:38:29:5c:d0:
37:66:2b:f3:cd:1a:44:bc:12:7f:fd:69:87:c8:18:
4d:05:18:d7:3a:5e:aa:8b:a2:f2:b3:d5:05:2d:3d:
05:3a:0e:40:24:34:bd:2c:f4:3a:40:a5:2c:6a:fb:
01:85:7d:4b:9b:62:5d:78:f6:9d:31:ed:c2:ce:5e:
53:f8:a3:23:7c:33:c7:04:46:47:1e:2d:56:5a:4e:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:36:AC:F6:51:80:AA:CD:FB:BA:80:1D:75:31:32:FA:4B:3B:DB
X509v3 Authority Key Identifier:
keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.104.0/21
IPv6:
2a01:8b40::/32
Signature Algorithm: sha256WithRSAEncryption
45:5d:c9:64:9a:36:bd:40:97:6d:91:51:d4:06:0f:b2:9c:ac:
58:23:81:b8:c7:35:58:bb:5b:76:04:9c:d1:2f:7b:44:cd:89:
4e:8e:6b:e0:84:36:34:e5:1e:ea:7c:39:16:36:ba:6c:9a:5d:
ff:da:29:5b:8e:72:3e:7d:51:55:a4:e8:f1:a0:86:00:a3:eb:
7b:33:45:c4:1a:75:4f:a9:84:6a:ef:31:bc:0b:e7:c3:60:64:
1d:c0:71:dd:62:26:42:5f:d5:92:43:5f:8d:b1:6e:a3:54:86:
d8:03:ae:0c:7a:46:be:6c:85:c1:00:24:7c:a1:eb:36:11:33:
71:87:d4:e2:54:62:91:f1:4b:39:1d:0d:0f:d6:6a:07:9d:43:
e9:e1:34:10:4d:b0:70:7c:6f:df:a3:86:29:ac:b3:a5:b4:ef:
77:0e:d3:24:a3:02:d6:72:95:51:72:22:92:5f:dd:09:0b:9b:
f6:f9:4a:50:80:ad:a4:e7:48:56:7d:33:57:98:19:15:38:d6:
03:b4:30:74:af:39:f2:c7:11:bd:06:ad:08:4f:ee:f8:c6:7e:
d3:93:d0:8f:4e:62:fd:05:ad:04:92:dc:de:20:d9:94:b0:e8:
48:72:0f:5d:08:e6:37:c7:3d:88:3c:81:f1:90:0a:f2:d3:57:
45:84:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:48 2025 by rpki-client