Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/s3MszUL2Sssrqjezj_btDkPTmQg.roa
File: s3MszUL2Sssrqjezj_btDkPTmQg.roa (raw, json)
Hash identifier: rgkSdfEiUESbKFQA8EcHOyD2UnXv2kAlPQ3EqnLhSNk=
Subject key identifier: B3:73:2C:CD:42:F6:4A:CB:2B:AA:37:B3:8F:F6:ED:0E:43:D3:99:08
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019426D982AE6FA483A2D34756398B8C029A
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/s3MszUL2Sssrqjezj_btDkPTmQg.roa
Signing time: Thu 02 Jan 2025 11:49:36 +0000
ROA not before: Thu 02 Jan 2025 11:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212865
IP address blocks: 5.183.0.0/22 maxlen: 24
185.71.139.0/24 maxlen: 24
2a0d:d00::/29 maxlen: 29
2a0e:2400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:82:ae:6f:a4:83:a2:d3:47:56:39:8b:8c:02:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Jan 2 11:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3732ccd42f64acb2baa37b38ff6ed0e43d39908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:9b:b8:1a:a6:28:c0:3d:c6:c7:c9:8d:9f:
76:92:2c:70:aa:05:84:04:96:61:ae:6c:3d:96:74:
81:f8:33:2f:25:fa:99:34:5f:82:82:e3:9f:c9:bc:
dc:bc:2a:c0:64:f4:fe:4e:04:b5:ab:1c:92:13:7c:
99:1f:b1:f7:ae:4a:7c:3e:41:c8:39:63:3c:7a:f2:
05:a5:9c:d6:16:62:99:0a:61:e0:89:95:82:b1:0f:
4e:cc:8d:dd:da:e1:36:42:0d:1f:6d:9a:8a:ee:93:
a3:f7:e4:df:7a:a6:f9:72:38:da:18:5d:c5:86:a6:
df:c8:d1:94:61:04:7f:2f:d8:5a:44:db:ae:28:5a:
71:e0:05:4e:15:38:ba:8f:c6:64:b9:8a:0c:02:0f:
0c:de:25:29:1f:3f:31:f4:af:89:d3:a5:f1:70:b0:
f5:a9:a6:c4:50:9e:d4:3d:05:f7:b2:96:55:7b:19:
9c:da:ae:d5:4e:1f:a8:22:71:32:33:67:84:18:7b:
81:67:57:ad:ef:60:89:76:5e:4a:77:6c:dc:82:da:
9c:6a:ec:af:cf:ac:91:e0:4b:01:4f:e7:72:d1:8c:
1e:35:ca:41:c4:d9:c3:53:3d:93:8a:ed:76:c5:1d:
8c:10:1f:af:97:78:7b:ba:c0:15:a0:cc:2b:ba:9f:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:73:2C:CD:42:F6:4A:CB:2B:AA:37:B3:8F:F6:ED:0E:43:D3:99:08
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/s3MszUL2Sssrqjezj_btDkPTmQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.0.0/22
185.71.139.0/24
IPv6:
2a0d:d00::/29
2a0e:2400::/29
Signature Algorithm: sha256WithRSAEncryption
02:bf:6e:0a:fa:77:2e:bd:cf:06:26:07:63:06:90:f4:6b:31:
76:40:4c:7b:d8:1d:ad:89:91:ad:2d:b9:c2:ba:3b:a1:67:f9:
86:5b:7d:c6:68:0f:03:b3:cb:19:8e:a7:d1:20:b0:0b:b8:47:
9e:dc:b8:9a:82:5a:fc:c8:08:f0:86:a3:f8:86:f9:a3:62:79:
81:0f:ff:59:5d:d1:ae:61:8b:9f:ef:cd:06:eb:32:e9:c5:3b:
fe:bc:44:8e:03:1f:fd:08:62:5a:e9:02:0d:e5:43:1c:df:01:
2d:93:9e:ed:ed:5c:dd:46:b5:0e:21:71:ba:11:74:65:aa:36:
ce:a8:6f:86:ae:d2:cf:c8:f8:73:0e:08:87:98:20:8b:4c:35:
80:1e:9b:71:0a:8f:88:f6:cf:05:6d:19:9f:f1:f1:52:5d:c3:
91:24:17:f4:54:de:82:5f:34:10:d5:8f:b2:f6:88:d8:3e:f2:
7b:b6:6d:b3:8a:eb:ea:a5:47:6e:ad:ae:4d:80:63:28:77:98:
5e:63:5a:b8:21:06:e4:95:38:c6:ae:38:00:a1:2f:72:08:e8:
34:06:4a:7a:2b:9d:c6:2c:fb:b6:53:cc:ea:bf:5e:a2:40:5b:
c6:ba:cd:b7:36:7e:73:de:e3:1e:5f:34:8f:5c:74:5c:77:0d:
c2:42:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:53 2025 by rpki-client