Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/tNVymaqEMA53YlfZDB8JJ8aafJI.roa
File: tNVymaqEMA53YlfZDB8JJ8aafJI.roa (raw, json)
Hash identifier: dVF8IWQWb1ioPcMe+UkAzFVliOSu7mCkktpnx4UARn0=
Subject key identifier: B4:D5:72:99:AA:84:30:0E:77:62:57:D9:0C:1F:09:27:C6:9A:7C:92
Certificate issuer: /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial: 019424B393B7AFE87FD2ED81E117900109DF
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/tNVymaqEMA53YlfZDB8JJ8aafJI.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 5.22.145.0/24 maxlen: 24
2a00:18e0:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:93:b7:af:e8:7f:d2:ed:81:e1:17:90:01:09:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4d57299aa84300e776257d90c1f0927c69a7c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:80:22:84:3c:8b:6e:95:3b:d9:88:1d:6e:
5a:9a:49:b6:01:c8:bb:d6:f6:6c:f6:e3:83:ee:65:
45:72:d6:80:aa:0f:2b:4d:1f:82:f5:76:76:66:2d:
6a:4d:85:fa:68:93:db:50:3f:6a:24:d3:e0:b6:12:
67:55:93:e7:70:2e:ad:9f:12:0f:82:74:b0:66:c3:
88:d1:7d:96:5a:d6:7e:96:e6:cb:95:79:ed:fd:dc:
be:50:42:50:04:99:96:35:d3:c4:e1:bb:cc:da:9c:
5c:6e:83:9b:56:70:e5:ee:0b:12:93:48:bf:a2:b6:
ad:d4:5f:39:48:91:dc:1a:94:94:de:2b:84:d3:7e:
c8:d0:30:58:1c:99:e1:2f:d9:b9:19:a7:d5:0b:40:
ed:4c:80:49:b0:f2:09:b0:18:da:1c:c7:b6:ff:02:
f3:b5:79:0c:ff:83:76:5f:5f:d6:df:52:0e:e8:ff:
9f:0e:11:0c:1f:f1:c0:f8:e0:33:ec:44:98:a9:cd:
7d:bc:1b:71:01:ec:fb:ad:12:f8:e9:fe:11:da:44:
20:35:d7:2b:a6:9b:ef:f5:d1:66:a0:7e:9b:ae:e8:
8d:6b:e8:c2:59:16:7a:91:a8:d6:d9:15:12:6d:a7:
ae:a3:e6:ce:6f:21:0c:b9:8b:d5:11:cc:7b:22:50:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D5:72:99:AA:84:30:0E:77:62:57:D9:0C:1F:09:27:C6:9A:7C:92
X509v3 Authority Key Identifier:
keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/tNVymaqEMA53YlfZDB8JJ8aafJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.145.0/24
IPv6:
2a00:18e0:5::/48
Signature Algorithm: sha256WithRSAEncryption
03:67:29:36:4f:39:e2:b5:61:68:97:8e:ee:78:f5:9f:33:8e:
e6:51:da:cf:5c:12:5c:44:38:73:ab:b4:f0:e4:bc:55:81:d5:
cd:89:6b:9e:50:2a:c8:38:9d:38:65:75:b9:b7:ec:88:9b:3c:
a9:a3:10:3a:db:fd:73:de:1a:95:a0:be:84:db:e8:97:4e:b6:
5d:b0:78:6e:48:41:cb:dd:39:cf:c8:c4:d5:67:83:93:8e:fd:
1f:ad:d2:84:92:f0:88:83:b0:30:39:71:58:67:42:70:27:9e:
f1:27:a5:24:00:3d:5e:30:d2:69:cc:2c:0d:3a:91:9d:60:66:
0d:2e:6d:37:75:c7:49:93:37:00:5c:4d:26:cf:ed:13:26:33:
f4:63:fc:e4:73:7e:25:ef:66:7c:e2:40:3d:05:2f:55:06:a1:
da:c3:01:7f:66:8d:05:43:41:60:90:6e:06:3a:d4:7e:06:57:
e1:09:26:a1:17:fa:a4:dd:ae:3a:fc:9e:00:4c:b7:8d:69:27:
8f:f5:47:ad:ca:e5:e5:f1:2a:48:c2:61:34:0d:8c:c5:d2:cd:
39:1e:31:5f:86:06:58:9f:10:92:8f:d6:f1:db:d2:43:77:89:
95:bb:f4:5b:e3:f1:33:30:d2:8a:cb:bf:60:50:96:88:12:c0:
c4:0d:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:34 2025 by rpki-client