Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/Mlkak6ims4h4TWMQCwS8mYtx_l0.roa
File: Mlkak6ims4h4TWMQCwS8mYtx_l0.roa (raw, json)
Hash identifier: 7g94TVP7Z8YTcoIQJn2/CFi7CnwZQ3CM+4Dj2k9ghXQ=
Subject key identifier: 32:59:1A:93:A8:A6:B3:88:78:4D:63:10:0B:04:BC:99:8B:71:FE:5D
Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial: 019560CAD323816D5517666266D44AC6899B
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/Mlkak6ims4h4TWMQCwS8mYtx_l0.roa
Signing time: Tue 04 Mar 2025 10:54:19 +0000
ROA not before: Tue 04 Mar 2025 10:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14061
IP address blocks: 5.101.96.0/20 maxlen: 24
37.139.0.0/19 maxlen: 22
46.101.0.0/16 maxlen: 22
80.240.128.0/20 maxlen: 22
82.196.0.0/20 maxlen: 22
95.85.0.0/18 maxlen: 22
146.185.128.0/19 maxlen: 22
146.185.160.0/19 maxlen: 22
167.172.0.0/16 maxlen: 22
178.62.0.0/16 maxlen: 22
178.128.0.0/17 maxlen: 22
178.128.128.0/17 maxlen: 22
185.14.184.0/22 maxlen: 22
188.166.0.0/16 maxlen: 22
188.226.128.0/17 maxlen: 22
2a03:b0c0::/32 maxlen: 48
2a12:1840::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:ca:d3:23:81:6d:55:17:66:62:66:d4:4a:c6:89:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Validity
Not Before: Mar 4 10:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32591a93a8a6b388784d63100b04bc998b71fe5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:5a:05:88:e8:75:82:65:c1:d6:2c:dd:f6:
16:77:b9:25:0d:10:73:56:bb:c5:a0:cd:66:94:a3:
6e:c6:e3:a4:72:17:9b:cd:2e:f5:84:9d:6d:c5:97:
d7:9d:3c:11:28:3e:ba:96:72:29:26:8b:42:3f:0a:
29:1e:5d:29:43:48:62:2d:b7:df:41:51:35:5c:1f:
c8:c2:13:00:77:20:d0:40:1e:d4:ab:a2:d2:e1:bc:
59:53:fd:19:5e:24:03:ed:10:a3:e8:89:63:2f:e4:
40:5f:bc:61:1f:af:98:82:9b:03:51:f2:bd:74:2a:
47:c9:9e:df:66:9d:39:b1:fe:a9:81:4f:82:59:9a:
a6:6d:8a:a8:0b:53:9e:76:c5:78:32:e0:68:b7:90:
34:46:f1:d7:f5:3d:a4:a2:2d:63:ac:c6:2b:4b:7a:
39:0c:ae:fd:56:f9:57:d1:6f:a5:11:cf:c8:2f:4b:
8f:71:4e:90:a4:6a:4f:c1:a0:1f:43:4b:15:7f:a0:
f9:82:36:b1:e3:90:f3:df:1d:77:3f:58:9d:1b:53:
04:04:3e:aa:f5:26:c9:69:e0:7b:10:bd:f2:e3:1f:
b8:d1:c0:70:31:61:1e:c3:fc:e0:9f:4e:3a:27:bc:
f7:61:37:26:5f:68:3b:16:3b:a2:30:5a:aa:ae:6c:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:59:1A:93:A8:A6:B3:88:78:4D:63:10:0B:04:BC:99:8B:71:FE:5D
X509v3 Authority Key Identifier:
keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/Mlkak6ims4h4TWMQCwS8mYtx_l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.96.0/20
37.139.0.0/19
46.101.0.0/16
80.240.128.0/20
82.196.0.0/20
95.85.0.0/18
146.185.128.0/18
167.172.0.0/16
178.62.0.0/16
178.128.0.0/16
185.14.184.0/22
188.166.0.0/16
188.226.128.0/17
IPv6:
2a03:b0c0::/32
2a12:1840::/29
Signature Algorithm: sha256WithRSAEncryption
91:ea:b9:9d:f7:f3:6f:b0:0b:e7:73:0e:f6:98:76:5d:e6:dd:
53:5a:03:7f:c5:80:69:e5:c5:db:75:4b:43:35:25:dd:6c:c9:
06:d1:9e:34:58:09:15:d1:da:ae:25:e8:38:c3:e4:81:b9:d8:
e2:ef:53:93:0f:23:36:f2:72:ad:54:ac:20:8d:a5:32:96:41:
7b:82:fd:e1:20:3c:13:f9:1e:30:52:73:65:75:61:19:db:e5:
6f:18:76:07:bc:c9:19:a5:3d:fb:4e:0a:01:85:b8:d8:aa:bc:
50:da:d4:78:54:7f:48:91:92:5f:26:69:d0:b2:e9:b7:50:2d:
3d:5e:c7:18:2d:e6:7e:57:e2:4b:b8:92:23:21:a2:c2:3c:b6:
9b:6e:e3:43:f2:8f:47:ea:a9:0f:c3:1c:77:39:1a:d0:ea:ab:
ff:f6:d6:a1:92:e0:8a:aa:8d:a4:cd:75:03:ba:6c:39:43:08:
77:89:09:d7:b8:0e:ac:1a:64:20:b3:bb:85:fe:c8:6e:81:b2:
a9:f4:b3:56:9f:f3:84:d8:b7:33:30:0c:1e:06:09:26:f6:5a:
7d:84:4f:62:6c:16:18:6b:d3:c9:a9:af:26:1c:a3:89:14:a1:
5a:ce:3a:36:5b:d6:52:bc:1c:6a:af:2e:8a:b2:0b:f9:e3:40:
0d:c9:4e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:59:18 2025 by rpki-client