Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Se-UOADOCJXSnAJ37na__f_RLEY.roa
File: Se-UOADOCJXSnAJ37na__f_RLEY.roa (raw, json)
Hash identifier: P9UglKonsK0wIFeICJ9G+CM3Z9nd1Yma+2wsLsacA+I=
Subject key identifier: 49:EF:94:38:00:CE:08:95:D2:9C:02:77:EE:76:BF:FD:FF:D1:2C:46
Certificate issuer: /CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Certificate serial: 01942747BF148B0B1E9056334F5322CC3186
Authority key identifier: 12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Se-UOADOCJXSnAJ37na__f_RLEY.roa
Signing time: Thu 02 Jan 2025 13:50:00 +0000
ROA not before: Thu 02 Jan 2025 13:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199644
IP address blocks: 185.5.12.0/22 maxlen: 24
185.5.14.0/24 maxlen: 24
185.5.15.0/24 maxlen: 24
2a02:c740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bf:14:8b:0b:1e:90:56:33:4f:53:22:cc:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Validity
Not Before: Jan 2 13:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49ef943800ce0895d29c0277ee76bffdffd12c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:5b:82:80:83:11:37:c3:7e:b9:ff:ef:3b:
d5:b2:2a:3c:66:f8:ef:07:7a:79:ea:fd:ed:5a:89:
79:fa:a9:df:07:79:32:7f:ea:b2:3f:21:db:a2:63:
08:f0:19:21:9b:92:d1:3b:05:f7:2d:43:9e:f9:3a:
ea:3a:3a:80:82:76:08:9e:25:bf:a5:80:51:e8:13:
9c:cb:3e:92:0b:a0:1e:61:05:75:a5:05:4e:bc:66:
0c:66:56:f5:22:68:22:60:d6:4b:da:b0:9b:ed:55:
dd:2b:65:43:b5:e5:73:58:89:8e:cd:a7:e4:e8:1c:
e7:c1:eb:2d:0c:bd:63:0a:1a:5e:79:3f:01:77:ab:
a4:6d:c8:2c:e7:f9:8e:23:90:93:fe:f7:49:5c:79:
2b:ef:a0:b7:55:17:05:2e:36:8d:20:72:4a:77:b6:
09:e1:f0:69:91:6e:af:8a:e4:d8:eb:d2:98:58:c7:
f4:3c:0e:d3:11:5a:df:6f:cc:56:3e:12:52:76:92:
c3:52:ac:a7:f8:38:26:79:06:96:96:62:78:24:cb:
39:4b:4e:c1:ff:ba:24:18:bf:d6:5b:36:bc:47:ad:
2b:e9:58:11:ad:d7:2b:08:68:dd:aa:96:ba:3d:4a:
81:d5:1a:55:d5:97:d1:1e:c1:2b:23:da:df:5a:f5:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:94:38:00:CE:08:95:D2:9C:02:77:EE:76:BF:FD:FF:D1:2C:46
X509v3 Authority Key Identifier:
keyid:12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Se-UOADOCJXSnAJ37na__f_RLEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.12.0/22
IPv6:
2a02:c740::/29
Signature Algorithm: sha256WithRSAEncryption
21:c3:6c:69:bc:61:5b:31:62:74:ca:d2:02:63:f1:c2:83:f2:
22:16:9e:c5:78:0a:f6:85:a9:4e:4b:eb:8b:89:28:d7:02:24:
02:67:da:5c:10:e6:f1:1f:d2:cc:82:a2:c4:43:26:07:f7:3f:
71:ad:60:eb:4a:f0:d4:96:45:c5:a5:a7:5b:68:5f:76:81:de:
00:86:77:33:0f:65:6e:32:15:06:1b:3e:fa:f2:41:94:f1:9e:
d7:aa:ec:e3:01:41:f5:09:b2:a9:e6:7d:24:7f:f2:e2:7f:ec:
9f:23:84:b4:22:b0:e2:27:1c:7b:61:46:6d:49:86:b5:22:fc:
68:bb:ba:8c:5a:34:c9:e9:df:24:9a:e0:3a:34:1f:f3:64:5d:
0b:2f:1e:32:f8:64:d5:5e:33:f8:5b:2b:24:19:80:ab:65:c0:
6f:f5:96:c6:b2:64:50:63:65:d4:34:ff:1c:c3:45:c6:4f:d8:
ff:82:c5:73:b1:23:61:fb:1b:2d:4b:cb:5f:5a:f5:39:af:34:
d1:19:1f:e0:bd:2c:71:19:82:3b:91:b1:2a:ed:bb:60:cd:03:
9b:05:81:81:40:2c:4c:17:ca:3d:ae:9a:1e:2b:4e:71:1e:45:
c0:9a:b2:41:2c:9d:38:03:28:fe:f0:21:69:66:2f:4e:be:f7:
ec:80:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:25:17 2025 by rpki-client