Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/8DoxxFomKD_zymJ7maQao4Dgi38.roa
File: 8DoxxFomKD_zymJ7maQao4Dgi38.roa (raw, json)
Hash identifier: AGu4l/EpDaIWVAApJov5+PsDhMXLA5NiuSkK6swCSP4=
Subject key identifier: F0:3A:31:C4:5A:26:28:3F:F3:CA:62:7B:99:A4:1A:A3:80:E0:8B:7F
Certificate issuer: /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial: 01941FFA1C18E5E4475A6ABC067E231E8F5B
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/8DoxxFomKD_zymJ7maQao4Dgi38.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199092
IP address blocks: 5.187.56.0/21 maxlen: 21
5.187.56.0/23 maxlen: 23
5.187.58.0/24 maxlen: 24
5.187.63.0/24 maxlen: 24
2a01:41c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1c:18:e5:e4:47:5a:6a:bc:06:7e:23:1e:8f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f03a31c45a26283ff3ca627b99a41aa380e08b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:3e:4c:27:5e:1c:8d:d4:d6:8f:ba:5f:db:
33:97:96:e0:61:1e:59:d5:19:54:83:b7:f6:5e:bf:
05:31:87:25:50:d3:88:77:3a:ba:05:fe:59:53:52:
bc:6c:65:99:7d:85:f7:78:de:69:8d:7a:98:5c:b3:
26:84:db:2f:07:9c:3e:42:50:1e:4a:b0:03:b9:a0:
b4:c2:8f:3e:62:84:9e:ba:3c:fc:52:69:96:58:d8:
61:11:b7:34:16:35:13:0f:8d:51:cd:7c:1f:84:1a:
95:ef:7e:fa:6a:2f:da:7f:ad:d1:eb:4f:e5:33:78:
09:4c:fe:47:07:54:e4:31:26:9c:f2:3d:ab:ea:7c:
86:76:01:a6:a3:e8:9a:aa:48:ab:ee:5f:0d:c5:ec:
e6:9f:11:4a:9a:18:eb:b5:6b:6a:19:4d:7d:98:8c:
96:83:a7:a4:c5:ad:34:c6:f3:fa:23:0a:c7:8b:f9:
39:05:6f:7c:a8:f4:40:1d:78:e7:9e:8f:8c:ff:25:
14:84:00:b2:09:40:53:b8:ff:31:57:a8:b6:11:21:
ed:19:b1:0f:5c:2e:d5:a5:d2:1a:27:1f:65:07:73:
4f:53:a7:dc:9b:9f:91:fb:28:e0:f5:4e:aa:ac:10:
0f:5f:78:83:41:09:bf:86:5d:09:df:6c:4e:02:32:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3A:31:C4:5A:26:28:3F:F3:CA:62:7B:99:A4:1A:A3:80:E0:8B:7F
X509v3 Authority Key Identifier:
keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/8DoxxFomKD_zymJ7maQao4Dgi38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.56.0/21
IPv6:
2a01:41c0::/32
Signature Algorithm: sha256WithRSAEncryption
94:91:e9:00:75:b3:73:9b:98:ff:89:a6:c7:94:73:6a:98:8d:
dd:ef:5f:77:0a:28:fe:85:07:47:63:ef:46:b5:72:30:f7:73:
36:c3:cd:42:3d:a2:c8:5a:76:87:ca:ae:55:a7:8d:b4:1f:e5:
9b:7d:89:12:9b:53:20:3a:39:6e:6b:0f:93:d5:c4:9f:a9:da:
ef:f8:7b:37:0b:93:d9:0b:fd:0b:d8:3f:7b:51:82:8f:b2:3c:
45:cf:3d:18:17:40:c7:ae:74:bf:e9:9e:d3:e5:7c:f2:d9:60:
48:ca:3d:98:86:79:32:d4:db:23:70:05:41:47:90:48:04:7b:
57:fd:4f:55:41:8f:88:5e:f5:76:70:f5:7f:0f:74:0b:f3:fe:
0f:75:19:d9:5e:46:1c:bf:d8:db:53:92:c0:f4:37:96:c5:7a:
76:3e:e5:79:06:ca:1a:a8:21:ce:1b:62:d9:86:5a:e8:c5:13:
28:8b:5a:3b:89:0d:4c:0f:e3:d5:95:90:50:bf:f4:5a:6c:98:
52:9b:5b:38:af:66:c6:5e:65:89:18:bd:d5:f5:cb:19:fb:b7:
a0:f5:f5:23:ea:fc:c4:84:0c:83:de:fc:a0:55:29:b7:88:42:
e3:e6:2c:1e:fe:ee:01:7d:79:6d:47:fe:e1:05:da:5e:d9:61:
92:f9:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:14 2025 by rpki-client