Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa
File: 5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa (raw, json)
Hash identifier: r01XfwbxbtnFEz4LgMmHMoPfMeBX2hjKhEb9/b2NI+4=
Subject key identifier: E5:EC:34:00:7B:E5:55:92:A4:F9:71:8C:43:EE:FF:55:00:B2:3E:4A
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 019424449AF41A208D7C1284C70ACF70C097
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197907
IP address blocks: 46.254.144.0/21 maxlen: 21
185.73.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9a:f4:1a:20:8d:7c:12:84:c7:0a:cf:70:c0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5ec34007be55592a4f9718c43eeff5500b23e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:5c:bc:6a:0f:5c:e7:69:5f:f5:14:0e:b4:
70:cd:c2:ac:ec:40:4f:f0:3f:05:c5:c7:54:95:6e:
b9:0f:22:1a:cc:5e:64:ef:2c:1f:54:0e:a9:ad:a6:
69:45:d1:af:99:be:3e:dd:78:41:db:ec:3d:51:e3:
28:54:7e:46:e9:2b:ed:e7:23:f2:f1:1d:56:29:8b:
38:41:95:45:bd:70:c5:f0:76:89:a8:8f:08:a5:e8:
b3:16:53:88:08:2d:83:67:1d:3c:2a:1f:ba:de:bb:
52:e5:3f:48:f9:a2:75:c5:fe:1b:4b:ee:97:30:cb:
3e:3e:b7:e6:d0:69:2a:91:e1:a5:d7:4a:3d:46:6c:
13:22:08:76:2e:cd:ab:a3:e8:79:bb:15:56:b5:5d:
c7:9c:79:e7:79:60:54:42:a1:97:83:24:f2:4c:c9:
4b:cb:45:ea:96:77:7f:25:bc:bf:7b:19:6e:d7:f9:
dd:95:40:e4:87:90:6f:cb:95:6b:d4:44:cb:5c:f9:
dd:c2:09:0c:65:e7:82:b0:29:c3:17:ec:01:aa:43:
e9:ed:54:c3:7c:c5:b3:c7:a2:94:62:ef:cf:65:fd:
0c:bc:b6:64:4d:30:49:5c:92:76:e5:81:19:77:1a:
77:cc:8d:f7:01:80:a6:c2:bf:9d:93:80:c2:d0:80:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EC:34:00:7B:E5:55:92:A4:F9:71:8C:43:EE:FF:55:00:B2:3E:4A
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.144.0/21
185.73.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:5d:c6:2a:74:a9:78:0d:46:c9:f5:63:92:6b:f4:4e:27:7e:
d1:22:45:17:1c:a9:d0:d3:bb:cc:45:6c:d7:d8:50:cc:69:f1:
d6:e9:b4:3b:5a:8a:2c:d9:fa:34:55:3f:9d:d6:67:21:49:8f:
2d:ae:0a:76:67:3a:67:3b:43:2b:d4:a0:b2:b6:7e:73:bb:65:
be:90:fd:6b:33:97:94:4c:e9:f1:0f:3b:e3:b3:5a:1b:ce:62:
10:15:36:fb:9d:95:6f:fe:be:cb:34:16:73:17:43:63:f5:40:
e5:1f:29:dd:9a:fb:3d:d8:67:8b:08:c9:51:e3:91:1c:bf:18:
70:7f:3e:4d:13:74:6e:53:a2:0b:b8:ca:0a:76:4d:71:2d:95:
7b:b9:88:03:4b:57:e6:b1:fd:59:79:f7:f1:b5:db:78:e7:87:
33:2c:55:17:f4:b2:a7:c6:9d:80:83:99:af:19:0b:8b:64:bf:
41:1a:22:a4:32:8e:7a:53:98:74:4a:ac:07:6e:98:b1:f6:65:
0b:35:25:cd:c8:08:a1:d6:f0:07:c0:b4:b5:59:66:81:36:d6:
da:91:42:65:f1:85:5c:b5:58:79:a3:5e:a9:3f:28:45:69:43:
52:d0:e6:ff:8e:13:1d:54:59:f2:e2:b6:be:84:75:e4:d0:ea:
44:cf:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:39 2025 by rpki-client