Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/8aQ8UlqT-sV9kx_sevx2P90mHvk.roa
File: 8aQ8UlqT-sV9kx_sevx2P90mHvk.roa (raw, json)
Hash identifier: cuhH8BuwOkF5mU3oSNC6TXFlQV8nL5/7oeUyaDIgJO4=
Subject key identifier: F1:A4:3C:52:5A:93:FA:C5:7D:93:1F:EC:7A:FC:76:3F:DD:26:1E:F9
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01935F6ABAA97BE369A2090B70278BB66232
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/8aQ8UlqT-sV9kx_sevx2P90mHvk.roa
Signing time: Sun 24 Nov 2024 18:24:10 +0000
ROA not before: Sun 24 Nov 2024 18:24:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 5.39.252.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.144.178.0/24 maxlen: 24
31.192.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5f:6a:ba:a9:7b:e3:69:a2:09:0b:70:27:8b:b6:62:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Nov 24 18:24:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1a43c525a93fac57d931fec7afc763fdd261ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:2d:f2:36:aa:a2:c1:2b:ed:66:2a:7d:4a:
ae:7a:75:bd:d9:77:b4:07:91:67:7d:61:10:0e:f1:
83:bc:c6:43:2e:96:82:10:a3:fa:3e:28:80:82:c6:
72:54:cf:d4:b6:70:94:62:cb:47:50:7f:cc:f4:00:
b0:fb:38:96:fa:e0:bd:a7:e2:80:c4:57:ed:f0:79:
14:7e:6a:ee:cb:97:05:01:3d:49:88:47:91:ad:aa:
a7:c8:25:e7:e4:f4:85:da:fb:71:5d:66:05:9c:6f:
23:e2:04:3d:e7:f5:8b:1d:81:72:ba:51:6c:90:cb:
cf:55:12:c6:a0:66:20:96:42:b9:95:8b:78:8e:db:
26:aa:1e:ca:6b:68:0f:9e:6e:6b:1a:72:b4:df:be:
1a:e1:21:a8:87:5e:ec:70:1f:eb:8e:a2:7a:55:86:
57:5f:6f:c0:08:94:81:3c:52:a1:b1:17:8e:06:b8:
34:6f:2f:37:8d:78:b3:06:2e:06:aa:e9:6a:ef:1f:
33:45:e1:ed:ee:26:32:ed:5f:11:f5:4d:4b:2e:5b:
a1:b9:46:21:8c:8f:bb:2b:de:1e:a4:bc:89:05:40:
e6:49:6a:7f:43:1c:74:9a:e8:11:55:80:7d:10:76:
fe:49:f5:fd:a2:40:9f:86:71:b7:2b:de:18:55:b5:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A4:3C:52:5A:93:FA:C5:7D:93:1F:EC:7A:FC:76:3F:DD:26:1E:F9
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/8aQ8UlqT-sV9kx_sevx2P90mHvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.252.0/24
5.39.254.0/24
5.144.178.0/24
31.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:bb:d6:68:da:e8:e0:02:11:8e:7e:94:e4:e2:f5:3c:3c:13:
fa:eb:be:0e:af:ab:62:d2:84:6d:4f:1d:bd:c1:ba:80:7c:e6:
c7:b3:21:bb:39:e0:44:af:1a:bb:1d:0f:fb:d7:03:ab:d8:84:
6a:bd:04:a9:18:a8:62:56:4e:25:aa:9a:b8:9a:33:20:c6:03:
ef:52:7b:99:27:5c:62:4e:68:44:59:ee:72:d9:21:2b:18:c1:
ea:60:4d:76:15:f3:bb:33:b3:82:ea:23:77:6f:47:91:ba:d7:
ba:eb:7e:b9:a0:67:56:dc:11:be:1e:ba:02:05:4d:0b:ea:c7:
13:d2:de:14:49:84:da:b1:ce:8e:35:48:32:05:64:a5:ee:64:
64:0f:86:7b:75:0a:11:c3:87:09:95:9c:ae:3c:ff:11:d3:db:
f7:30:26:62:0d:a9:26:7e:c6:20:96:6d:ac:1f:de:d3:2e:79:
fa:07:d8:39:5d:4b:ef:1c:8d:53:e9:36:18:1a:20:1b:13:70:
46:f2:b9:23:d6:eb:db:b3:64:a2:5d:49:29:48:dc:cc:b8:b9:
a8:e2:66:82:90:96:8d:16:34:3f:e1:ea:8f:f3:de:53:7e:eb:
29:d8:19:75:6e:7b:30:d5:e7:30:4c:17:18:80:8f:7b:d1:bf:
4e:38:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:17:33 2025 by rpki-client