Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/ve2cUb4I36o88cUncaHeOHK5tGk.roa
File: ve2cUb4I36o88cUncaHeOHK5tGk.roa (raw, json)
Hash identifier: 6gTupRG97QR/JQvN8ay2tdbOI4Q3EMkpnACGQxjxniI=
Subject key identifier: BD:ED:9C:51:BE:08:DF:AA:3C:F1:C5:27:71:A1:DE:38:72:B9:B4:69
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01941FFA9A1E1B31EF0879AB4EAAA7AE8D88
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/ve2cUb4I36o88cUncaHeOHK5tGk.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11426
IP address blocks: 5.182.120.0/22 maxlen: 22
45.147.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9a:1e:1b:31:ef:08:79:ab:4e:aa:a7:ae:8d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bded9c51be08dfaa3cf1c52771a1de3872b9b469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:de:2d:d1:ed:48:4c:b4:78:c9:c9:43:a1:
6f:c6:e0:92:bd:7e:55:55:0b:8b:02:ed:b6:ad:ab:
c3:59:c1:f6:15:9c:01:3d:69:70:49:e8:ce:4f:7d:
b5:eb:ae:9f:22:5f:b5:08:ef:3c:59:f8:e3:e4:a3:
3e:96:1b:02:4a:48:6b:6c:e3:7c:dd:a8:ed:fd:b4:
ee:c5:a6:3a:23:33:cf:dc:3b:8f:9d:16:ab:4c:65:
45:2c:26:b0:91:b4:2b:77:b7:88:dd:1c:7d:c3:d3:
30:3a:7a:dd:6c:23:be:f2:b6:73:7b:bc:28:f2:97:
4f:51:c5:b5:65:9e:94:fd:4f:29:5a:09:be:38:f2:
95:c8:1a:cc:65:a2:ba:07:23:aa:dd:2d:50:88:73:
d7:8a:ef:88:ca:71:dd:c7:6b:bf:1e:f4:17:76:84:
42:07:95:29:14:3e:f1:fc:46:51:e5:75:39:c3:79:
06:6e:a1:6f:d7:47:6d:76:70:79:45:bc:c8:fc:c9:
0d:eb:70:f2:b0:f9:98:f9:5b:ef:11:12:5d:57:e4:
be:7e:c9:41:3e:c4:e7:09:95:71:2d:8d:2b:6b:77:
60:96:a0:22:4d:6e:76:54:69:5c:0d:1f:46:94:38:
9e:a4:65:06:b7:b9:f0:ed:40:b7:43:49:78:21:07:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:9C:51:BE:08:DF:AA:3C:F1:C5:27:71:A1:DE:38:72:B9:B4:69
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/ve2cUb4I36o88cUncaHeOHK5tGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.120.0/22
45.147.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:43:90:09:94:cf:2d:c9:1f:1a:2e:d0:d6:5c:18:a5:ae:d1:
1a:63:64:4c:3e:40:f7:08:e7:ed:63:b0:54:4e:76:65:ba:15:
24:e6:29:e1:b0:fa:e6:dc:d9:f6:64:3a:1a:01:f3:9e:b5:d0:
81:90:84:c6:dd:6c:c6:72:80:1e:6d:4d:38:fc:7d:c9:0c:d0:
16:7a:2f:94:2e:b1:14:0a:c1:ec:62:79:f1:2a:20:d6:53:8a:
68:e4:85:3e:57:4a:91:0c:14:7b:0d:1e:7e:77:96:32:e2:b2:
a5:9e:f4:46:9a:26:80:ce:cf:d8:2b:07:07:d0:c3:39:6b:6f:
32:76:bc:81:9a:fc:44:df:00:3f:75:5e:93:34:e4:50:05:50:
ab:a6:1d:d2:23:11:b5:65:ea:11:09:88:cc:a3:e4:d6:41:eb:
20:56:15:4c:29:0c:6c:0f:b3:7f:0d:9e:6d:3d:d0:e5:24:81:
05:04:06:79:02:da:30:a8:c2:4e:9a:90:37:50:94:cc:23:5f:
3e:48:03:a4:79:cc:4e:c6:3b:11:e9:1f:80:f8:e5:9e:ad:54:
6f:5b:5f:eb:ef:8e:72:05:14:cc:69:4e:81:ed:53:50:4b:07:
2d:16:b0:06:81:53:45:f4:66:05:70:cb:bf:c6:5d:61:b9:e3:
37:77:ee:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:40 2025 by rpki-client