Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/AUWnKCughTUHbSmmjTVn8vVnF6E.roa
File: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (raw, json)
Hash identifier: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=
Subject key identifier: 01:45:A7:28:2B:A0:85:35:07:6D:29:A6:8D:35:67:F2:F5:67:17:A1
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 019424B3F8D984269EEA501E933F4BEE32AF
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/AUWnKCughTUHbSmmjTVn8vVnF6E.roa
Signing time: Thu 02 Jan 2025 01:49:21 +0000
ROA not before: Thu 02 Jan 2025 01:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47123
IP address blocks: 5.253.248.0/24 maxlen: 24
5.253.249.0/24 maxlen: 24
5.253.250.0/24 maxlen: 24
5.253.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f8:d9:84:26:9e:ea:50:1e:93:3f:4b:ee:32:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0145a7282ba08535076d29a68d3567f2f56717a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:73:06:02:fc:98:5b:e1:13:70:a1:cf:5e:
af:05:dc:94:93:6f:93:df:b0:6e:63:cb:34:ff:1a:
26:ce:af:9e:90:95:a8:f7:cf:77:28:88:30:48:71:
02:7c:13:94:61:cf:04:d2:2b:25:40:1c:22:6f:b1:
91:39:e2:c0:ec:18:f2:9b:58:ee:77:2e:3e:12:c2:
4c:d3:bb:65:30:37:a0:b9:34:fa:88:e4:8d:07:19:
3c:e3:32:91:eb:b4:e5:d1:b4:05:e1:61:0e:88:65:
a2:be:7c:3a:4d:9a:5d:2f:eb:e7:a2:a4:67:20:0f:
4e:92:aa:df:97:eb:6e:ac:c8:48:6c:91:81:44:ee:
f6:24:f9:eb:e2:53:62:f4:66:47:77:8c:8a:5d:3e:
3b:22:7c:68:0f:75:4e:06:ba:10:0a:a9:0f:a4:a8:
51:b0:3c:ee:79:06:95:fd:24:bf:56:09:84:a0:c1:
04:bd:77:be:a2:2f:83:cb:65:bd:73:4a:02:f0:c5:
b6:c6:84:02:18:cf:21:d8:e3:14:ef:2b:72:e3:a2:
bf:31:c7:22:5c:7b:e0:6a:b2:fd:e7:0c:7d:d7:02:
70:9a:ad:23:93:95:2b:91:96:da:18:7c:d8:36:24:
ee:5a:72:1f:4f:a5:3b:69:60:36:bc:bf:5e:68:8c:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:45:A7:28:2B:A0:85:35:07:6D:29:A6:8D:35:67:F2:F5:67:17:A1
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/AUWnKCughTUHbSmmjTVn8vVnF6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.248.0/22
Signature Algorithm: sha256WithRSAEncryption
15:ea:f7:bd:81:eb:8d:5b:78:35:28:c5:92:63:15:56:ea:5c:
56:19:2b:fa:04:28:39:ce:46:a4:76:7f:46:ef:1e:4f:a9:ed:
9d:3e:6d:ca:67:34:25:92:18:25:bd:0f:bb:e1:11:d2:2f:78:
a3:27:65:4f:6a:53:5d:7e:95:6f:27:80:e6:40:12:f2:1c:35:
57:d7:60:18:64:85:25:18:fa:68:c0:6c:64:30:7a:fa:8b:8e:
74:62:c7:82:f7:dd:8d:04:a8:95:e7:c0:1a:88:0c:c7:23:ab:
c2:12:87:5d:95:4b:d5:e4:51:69:e7:30:60:cd:a8:12:fa:21:
39:7e:3b:aa:78:fa:9e:49:39:d3:27:b8:47:7c:44:11:89:8c:
7e:74:42:f2:03:1c:eb:b0:f5:cc:5f:dd:ee:2f:2b:7f:f2:23:
c3:62:af:74:8d:a0:a3:6c:da:bb:91:d0:35:e1:bc:8a:33:34:
8a:de:0b:5c:95:50:28:21:d6:5f:84:38:b2:89:23:dd:09:09:
7d:55:f2:30:95:05:ca:33:46:8a:79:97:08:29:17:d5:84:dd:
15:a4:85:5f:5c:2d:ec:fd:b0:a1:56:eb:d1:8a:78:77:46:fa:
35:4d:aa:07:70:c6:20:7a:81:8f:b3:79:e0:be:8c:dc:05:09:
15:f4:2d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:12:48 2025 by rpki-client