Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/i0nThbwdezW0AO7pmekkEJjld0U.roa
File: i0nThbwdezW0AO7pmekkEJjld0U.roa (raw, json)
Hash identifier: A1bHJVolhok5D0oj17VJpul41EQExCRaiyi6t8ZnkFw=
Subject key identifier: 8B:49:D3:85:BC:1D:7B:35:B4:00:EE:E9:99:E9:24:10:98:E5:77:45
Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial: 01942444A3CC8EBF4DEB8E5A729859105094
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/i0nThbwdezW0AO7pmekkEJjld0U.roa
Signing time: Wed 01 Jan 2025 23:47:45 +0000
ROA not before: Wed 01 Jan 2025 23:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39603
IP address blocks: 5.173.0.0/17 maxlen: 17
5.173.128.0/18 maxlen: 18
5.173.192.0/19 maxlen: 19
31.174.0.0/15 maxlen: 15
46.112.0.0/16 maxlen: 16
46.113.0.0/16 maxlen: 16
89.108.192.0/18 maxlen: 18
89.108.200.0/21 maxlen: 21
89.108.208.0/21 maxlen: 21
94.254.128.0/17 maxlen: 17
94.254.128.0/19 maxlen: 19
94.254.128.0/20 maxlen: 20
94.254.144.0/20 maxlen: 20
94.254.160.0/19 maxlen: 19
94.254.160.0/20 maxlen: 20
94.254.192.0/19 maxlen: 19
94.254.192.0/20 maxlen: 20
94.254.208.0/20 maxlen: 20
94.254.224.0/19 maxlen: 19
94.254.224.0/20 maxlen: 20
109.243.0.0/16 maxlen: 16
109.243.128.0/17 maxlen: 17
164.126.0.0/15 maxlen: 15
2a00:1981::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a3:cc:8e:bf:4d:eb:8e:5a:72:98:59:10:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Validity
Not Before: Jan 1 23:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b49d385bc1d7b35b400eee999e9241098e57745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:51:fd:44:95:29:bb:b6:a0:20:8d:95:99:
21:6f:30:a0:87:d6:c2:b4:76:a8:08:bb:d3:2c:1e:
e3:f2:68:05:2d:60:68:1d:8c:3b:68:28:42:53:01:
40:64:80:00:27:b5:e1:69:7b:6a:44:f2:ea:58:95:
2d:c0:b9:c8:11:24:a9:4f:23:3b:95:d9:71:b3:27:
40:7f:82:e4:dd:88:24:82:bb:d4:c6:77:4f:88:84:
a2:35:e5:28:07:d4:94:ec:3c:46:0c:44:41:4f:26:
80:7b:e2:f5:a6:37:42:a0:e7:dd:35:fa:7d:2a:42:
53:11:83:d8:42:df:80:8b:10:24:ed:e9:ba:79:b1:
62:36:a3:bd:c2:60:f9:3c:14:2a:cc:f9:c7:52:a1:
1a:11:cf:e8:c4:96:b9:32:c5:f1:1b:c9:26:e3:eb:
d8:ac:02:f3:6d:a9:8a:39:8c:3f:67:94:e3:fa:a1:
37:f6:c3:69:48:f2:82:18:b3:8a:84:3b:2b:59:34:
d8:92:99:61:fb:73:98:06:f9:c1:75:24:28:a9:6a:
3b:63:be:57:96:25:80:52:74:40:0f:9f:d4:21:4e:
77:fa:06:50:20:1a:c1:81:c1:1a:55:0a:dd:8f:00:
67:70:87:7f:4a:3b:c8:00:37:97:98:58:e0:6f:49:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:49:D3:85:BC:1D:7B:35:B4:00:EE:E9:99:E9:24:10:98:E5:77:45
X509v3 Authority Key Identifier:
keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/i0nThbwdezW0AO7pmekkEJjld0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.173.0.0-5.173.223.255
31.174.0.0/15
46.112.0.0/15
89.108.192.0/18
94.254.128.0/17
109.243.0.0/16
164.126.0.0/15
IPv6:
2a00:1981::/32
Signature Algorithm: sha256WithRSAEncryption
ae:48:9a:76:95:3f:24:92:7a:69:6d:7b:14:a6:7d:c4:c6:7b:
b3:54:79:44:e0:1e:35:9f:cc:f5:93:22:46:96:5b:96:56:f3:
bc:11:24:c1:43:bd:34:79:64:ee:16:93:36:a7:10:c4:fa:09:
ee:cf:a1:49:ea:d1:3b:ff:37:00:95:27:ea:e8:8b:0f:e1:01:
d5:e0:c9:a1:8d:0c:d5:6c:c7:27:25:bf:d1:5f:c6:b7:f8:6c:
44:93:8b:0e:30:ba:74:64:e7:57:1f:73:33:3d:fd:98:d1:aa:
be:c4:66:b8:ac:8b:b4:11:ce:3f:20:bf:56:c3:46:13:37:b8:
4e:04:cb:70:a4:0c:06:c7:0e:21:1f:a7:30:bb:cc:1f:17:9f:
fa:fb:f2:85:c8:9b:97:35:ec:ff:4e:44:f0:70:43:9f:e1:95:
ed:33:34:3d:9c:31:d5:9a:97:1c:6b:3a:b0:7e:4e:e5:08:70:
79:17:a8:86:61:34:33:08:01:bd:2c:49:e0:32:15:7f:77:1e:
17:d1:6b:8c:35:ee:18:f5:d6:15:05:76:22:b7:79:f2:fe:1c:
df:80:6f:0c:36:ff:48:9a:ed:95:f0:91:ad:5e:af:30:92:a7:
88:f5:9c:ff:4c:04:8f:7c:de:75:24:69:d6:64:5c:37:c0:92:
fa:9f:31:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:03 2025 by rpki-client