Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa
File: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (raw, json)
Hash identifier: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=
Subject key identifier: A0:45:96:57:5C:13:46:DB:F8:4C:F0:E1:F0:A9:D2:6F:1A:94:30:EA
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 019420D5BA0B7520168AC24145BC0ECA68B1
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa
Signing time: Wed 01 Jan 2025 07:47:45 +0000
ROA not before: Wed 01 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213155
IP address blocks: 5.204.0.0/16 maxlen: 16
37.234.0.0/16 maxlen: 16
84.224.0.0/16 maxlen: 16
84.225.0.0/17 maxlen: 17
84.225.128.0/18 maxlen: 18
91.104.0.0/16 maxlen: 16
176.77.128.0/17 maxlen: 17
176.226.0.0/17 maxlen: 17
2a0a:f640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ba:0b:75:20:16:8a:c2:41:45:bc:0e:ca:68:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a04596575c1346dbf84cf0e1f0a9d26f1a9430ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:79:b2:24:65:fd:fe:04:02:8c:4d:47:7f:
62:e3:77:ee:c4:af:e0:f0:d7:6e:03:86:ff:c9:57:
23:25:4a:1c:fc:28:d1:42:2f:7e:6e:a2:77:cc:66:
d3:d8:48:5b:15:9a:44:10:1c:02:57:1d:97:d3:bd:
3a:10:a0:8c:54:c8:b3:94:2c:14:d9:9d:9e:b0:6c:
fb:64:22:4d:32:c3:9c:62:9c:5e:bf:51:b4:01:7c:
75:17:c8:26:7f:0f:7d:1b:5f:45:59:18:5b:6e:02:
da:09:8f:fc:79:dd:97:0c:b9:18:89:08:0a:03:34:
97:73:2b:ac:a6:5e:4b:98:46:cd:d6:cf:b7:60:2e:
4f:80:a4:33:27:33:ad:54:e0:86:dc:d5:ce:d2:08:
9d:ff:20:11:84:f2:b5:61:f1:bf:27:e2:f1:48:32:
d7:0c:88:2c:f1:ea:b3:99:e7:42:d0:aa:ef:39:6e:
c3:cd:ae:ab:5a:56:7a:00:e9:3e:9b:78:f5:14:c8:
ea:a7:10:ae:a4:68:64:22:01:0e:24:30:12:2b:a2:
cc:1a:ce:f8:0e:6a:07:66:6c:4c:d8:91:50:d5:55:
13:a2:60:9a:9f:83:f4:c1:cb:57:09:38:c2:d5:03:
1b:8d:c2:66:b8:70:85:65:d4:cc:91:a6:ce:d6:59:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:96:57:5C:13:46:DB:F8:4C:F0:E1:F0:A9:D2:6F:1A:94:30:EA
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.204.0.0/16
37.234.0.0/16
84.224.0.0-84.225.191.255
91.104.0.0/16
176.77.128.0/17
176.226.0.0/17
IPv6:
2a0a:f640::/32
Signature Algorithm: sha256WithRSAEncryption
2d:ff:72:21:6a:9a:ec:88:0c:5b:b7:8c:04:54:0b:0b:c5:5f:
64:53:c9:b6:4c:53:ee:29:52:65:f5:a8:64:27:f6:7a:db:40:
49:3e:a7:33:b0:34:82:23:02:f1:99:6f:42:14:3e:ff:03:07:
98:35:b8:28:16:8d:a1:11:e4:1d:be:89:09:c1:a3:26:7f:d6:
77:11:aa:88:b6:dc:42:8d:83:74:e8:a3:82:21:96:75:a0:3c:
9f:05:90:61:bf:a0:09:81:5f:1a:c9:7c:55:60:e7:ea:23:c2:
63:8b:49:64:f0:3f:4a:2c:3f:1c:a8:35:c5:9b:6f:26:f9:5b:
79:ac:7a:1c:82:67:a2:f1:dc:2d:41:ca:08:5a:27:2c:25:bf:
f0:22:f9:6f:3c:ed:4c:2e:10:42:d6:4f:57:51:10:66:83:0c:
6c:18:58:04:d8:9d:a8:6b:12:b8:2e:38:f7:00:a8:d7:6c:b0:
78:c7:3c:0c:c5:1d:12:09:80:c1:3a:c0:11:5f:83:02:59:01:
38:92:ac:1a:fc:7f:c8:47:05:ee:c9:d0:19:25:3b:6b:37:2c:
bd:15:e3:64:ed:4c:6f:c4:45:29:22:51:27:96:9c:08:12:da:
75:c6:e6:2a:37:bd:2d:7b:0d:6a:e8:31:1e:99:0f:4f:b3:58:
ab:0e:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:54 2025 by rpki-client