Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/GgF2VUQVgZHdiRVSGdZfQ62lDlI.roa
File: GgF2VUQVgZHdiRVSGdZfQ62lDlI.roa (raw, json)
Hash identifier: pE2Dj5yrvDRhlXyXHQIl24tLKcXekRo8xAVslPDVPZ0=
Subject key identifier: 1A:01:76:55:44:15:81:91:DD:89:15:52:19:D6:5F:43:AD:A5:0E:52
Certificate issuer: /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial: 01941FFA1CF330CC0DAA7582EF6EB2D0F2CD
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/GgF2VUQVgZHdiRVSGdZfQ62lDlI.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213298
IP address blocks: 5.187.56.0/21 maxlen: 21
5.187.56.0/24 maxlen: 24
5.187.57.0/24 maxlen: 24
5.187.58.0/24 maxlen: 24
5.187.59.0/24 maxlen: 24
5.187.60.0/24 maxlen: 24
5.187.61.0/24 maxlen: 24
5.187.62.0/24 maxlen: 24
5.187.63.0/24 maxlen: 24
2a01:41c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1c:f3:30:cc:0d:aa:75:82:ef:6e:b2:d0:f2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a01765544158191dd89155219d65f43ada50e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:f4:09:9a:a0:fc:7b:01:79:57:f0:3c:03:
21:bb:a8:c6:c4:d4:c6:20:74:13:2d:01:d8:f6:ae:
1a:58:ff:97:b0:b9:d5:e1:e8:ef:7f:62:db:41:24:
17:3a:2f:c1:a4:3c:ce:29:9b:0f:90:d2:aa:70:c8:
1c:3a:5b:86:59:b5:dc:98:fb:5f:eb:b2:5b:14:12:
c2:dc:1e:a0:77:c7:a2:ac:73:b9:ac:2a:90:80:fe:
5a:08:ec:77:e8:ad:03:ea:27:13:a8:db:c8:f0:55:
46:f2:b9:9b:e7:92:19:fa:a7:1a:5c:5d:75:0a:f6:
8a:3e:d1:63:16:9e:03:03:ae:39:23:8f:cd:f8:e7:
39:58:f0:23:c8:0a:6d:ef:a8:a4:08:b2:a7:3a:c4:
9c:84:06:fb:df:ca:55:df:a2:e9:1b:1c:69:94:6c:
fc:0a:17:d0:76:c5:d2:f7:67:db:16:7b:3e:ee:ef:
1f:6c:51:d6:53:18:70:d9:0d:92:27:2e:07:e9:7e:
19:7b:60:1b:f5:af:17:12:10:e8:99:ce:bb:4e:0d:
e4:30:c1:ed:4c:f3:a8:00:df:fc:73:bf:ab:e3:17:
20:1f:8b:5f:e1:84:1d:a1:ba:f0:ab:da:cb:7a:11:
e1:26:46:4c:66:4d:2d:c7:45:7c:7d:e2:7d:95:3c:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:01:76:55:44:15:81:91:DD:89:15:52:19:D6:5F:43:AD:A5:0E:52
X509v3 Authority Key Identifier:
keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/GgF2VUQVgZHdiRVSGdZfQ62lDlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.56.0/21
IPv6:
2a01:41c0::/32
Signature Algorithm: sha256WithRSAEncryption
78:3b:b4:d7:d9:9c:5e:ec:ca:c4:f3:cb:a0:15:34:77:5d:27:
e9:d7:b8:e9:9f:e9:ea:4c:3c:32:d1:f7:f0:ab:64:a0:4a:82:
82:f8:cd:ed:14:45:d5:1a:09:eb:1d:6e:00:e7:e3:3e:34:12:
7d:c3:41:94:2a:f5:eb:80:3b:63:0d:cd:b3:e4:e2:71:b9:d9:
c5:f8:38:78:2d:65:5e:1b:96:c7:e6:62:23:46:08:b0:d2:98:
72:56:ae:ad:b7:ec:5f:25:19:88:ef:86:2a:61:42:6b:53:64:
30:78:58:ea:70:c0:ca:12:67:95:00:11:0e:28:f5:76:91:0b:
e8:f8:c4:ff:82:93:31:0b:be:74:01:cb:a7:0a:00:28:13:eb:
40:e5:2b:59:88:0b:1e:04:3f:7c:91:17:24:f5:84:45:63:a6:
d1:b8:d4:b6:9c:f3:50:5c:8b:55:27:28:d6:3d:4c:76:5b:b4:
f3:fe:0a:9f:d8:6a:02:9a:8e:5c:89:c8:a2:b6:ab:c6:8c:37:
30:45:91:bf:51:43:32:85:c2:9d:03:7f:66:9a:5f:a2:2e:da:
31:93:05:96:e5:53:53:39:ae:ec:b2:1d:56:c3:35:f3:c2:40:
1f:c7:23:a2:fd:24:e5:fc:b1:cf:64:c7:96:4e:79:6f:6e:50:
f1:2c:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:25 2025 by rpki-client