Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/oLD0eFUFYxck4v3i6OymPCRtKqc.roa
File: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (raw, json)
Hash identifier: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=
Subject key identifier: A0:B0:F4:78:55:05:63:17:24:E2:FD:E2:E8:EC:A6:3C:24:6D:2A:A7
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 01941F8C419E08EDC77032CF5D80F134DC67
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/oLD0eFUFYxck4v3i6OymPCRtKqc.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44084
IP address blocks: 5.253.212.0/23 maxlen: 24
2a09:5dc0::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:41:9e:08:ed:c7:70:32:cf:5d:80:f1:34:dc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0b0f4785505631724e2fde2e8eca63c246d2aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:58:45:d7:f1:be:7e:29:a9:39:68:c2:25:da:
82:34:a5:f3:a0:32:f8:2c:fb:54:96:bb:2a:83:85:
48:3b:35:df:e6:66:6e:fc:e2:aa:93:c2:f3:d8:f1:
41:5b:7b:44:33:4a:df:4c:98:ba:4b:b6:21:98:b2:
42:af:e9:7c:0d:e7:54:f9:fd:43:1b:01:44:ad:e9:
27:56:1a:01:1e:30:38:fe:fa:7c:f3:c2:97:62:35:
ae:1f:3f:b3:ca:f8:dc:e9:bf:74:7d:47:9c:7d:49:
90:28:bd:af:44:64:9b:8d:2c:0e:7f:ad:a2:d6:2b:
6b:ce:4b:22:16:17:8e:99:52:5d:ea:a2:cf:f0:57:
c1:d9:8e:75:60:64:b6:c3:11:d2:54:9f:56:5e:89:
bd:67:b4:f7:b7:b9:9e:b8:7f:30:67:50:ad:23:68:
b1:e2:a3:fd:32:eb:f2:45:5f:00:17:86:2d:44:31:
08:2d:8f:98:ec:a3:50:57:47:14:55:8a:58:6c:9c:
5c:f5:15:17:b4:0d:e5:ee:41:f5:e7:98:9c:9b:7a:
02:47:a5:79:76:ae:06:f5:92:f6:4e:3b:55:3d:8f:
c5:0e:97:b2:e0:7e:fc:13:1b:85:f0:14:e1:2d:63:
41:94:92:1c:24:d8:e0:e7:1d:f5:04:45:61:7a:25:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:F4:78:55:05:63:17:24:E2:FD:E2:E8:EC:A6:3C:24:6D:2A:A7
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/oLD0eFUFYxck4v3i6OymPCRtKqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.212.0/23
IPv6:
2a09:5dc0::/30
Signature Algorithm: sha256WithRSAEncryption
02:2d:11:9d:c6:2f:62:72:01:51:a8:a4:6f:c6:ea:92:65:d0:
54:7e:0d:e6:3e:d9:0e:39:30:b8:50:51:cc:c5:21:08:7c:ec:
91:68:b0:9d:1c:b7:b6:1e:b9:f7:78:7f:44:13:33:a3:3b:16:
64:a1:3e:71:b8:e9:5c:88:5b:35:c2:21:ec:c8:d2:e6:91:ab:
b6:4b:b7:c8:87:9c:6e:f0:6c:6b:31:81:cf:93:25:40:14:4e:
50:ac:26:67:da:1d:32:2f:49:9a:7f:f9:ea:1d:1d:e9:1a:63:
06:1a:15:a0:48:b2:68:27:3f:4c:35:96:15:e8:03:00:13:0a:
8d:c3:ba:65:22:c2:32:86:a7:c6:c2:11:45:04:c1:e9:f3:37:
23:5c:11:0a:7d:99:49:53:57:06:20:50:6a:5e:5d:25:6a:65:
ef:d6:0b:d9:86:44:c3:c2:86:d9:3f:89:5b:35:41:71:e3:c0:
aa:bb:79:9b:71:01:05:14:98:d4:ca:a3:60:23:cf:19:21:c8:
e7:75:59:96:9c:e5:88:9c:8c:ba:fc:1b:f2:d4:6b:4a:9d:de:
f1:fb:31:92:f3:2e:8b:fc:8a:68:4d:23:ef:cc:c0:e7:07:5a:
3b:4d:e8:ec:55:f1:98:25:4c:9d:04:51:72:90:e4:57:19:69:
cd:97:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:39 2025 by rpki-client