Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/VoWAiidQkC0wOsxs6SYhNDkSBoI.roa
File: VoWAiidQkC0wOsxs6SYhNDkSBoI.roa (raw, json)
Hash identifier: cInEb2RwnxokLaHTOjBpEi49ILG2KnJqjnfBfhnT3ik=
Subject key identifier: 56:85:80:8A:27:50:90:2D:30:3A:CC:6C:E9:26:21:34:39:12:06:82
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748861010D3B2195D51F8738C3D3107
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/VoWAiidQkC0wOsxs6SYhNDkSBoI.roa
Signing time: Thu 02 Jan 2025 13:50:51 +0000
ROA not before: Thu 02 Jan 2025 13:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 5.253.246.0/24 maxlen: 24
45.13.227.0/24 maxlen: 24
185.117.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:86:10:10:d3:b2:19:5d:51:f8:73:8c:3d:31:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5685808a2750902d303acc6ce926213439120682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:30:30:e8:da:e3:76:c3:ad:b1:78:41:42:
93:d0:21:4c:7c:de:66:4e:86:f7:51:78:32:2a:48:
e8:eb:c0:4f:8a:e9:04:29:65:14:03:b2:5f:98:d0:
63:47:6b:8a:16:a2:01:99:f8:e2:fa:fc:a9:81:e2:
f5:d6:7e:a4:28:63:61:46:4f:5b:43:82:b2:e7:f4:
f6:ff:ac:66:79:b0:df:87:03:95:5b:cc:a8:b7:63:
d4:9a:90:3c:11:2c:07:bc:4a:e9:47:db:84:11:97:
81:cb:1f:40:bc:3f:8e:f9:fb:d8:fa:8d:60:80:4a:
c1:42:94:ec:59:71:39:20:64:a5:ef:ee:26:be:c0:
ef:61:ce:d4:19:2e:b4:1b:92:09:57:37:a6:d3:58:
88:ed:0d:0e:72:5f:5e:ff:da:87:e7:fd:84:d7:4c:
d1:79:5e:ba:d9:d3:97:51:c0:db:83:c0:47:58:55:
0c:09:d9:2c:61:55:68:b1:04:60:8a:0c:c4:0a:ce:
45:f2:a4:1d:91:8d:62:d3:d9:f2:97:1f:69:65:bf:
d4:4d:7f:94:96:a0:11:c5:0f:12:98:67:8b:2b:2f:
10:b6:76:12:64:79:bc:62:e1:f8:de:1f:03:12:6b:
d7:0c:28:cd:9f:fe:fa:b5:89:f8:02:3e:fc:f3:9a:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:80:8A:27:50:90:2D:30:3A:CC:6C:E9:26:21:34:39:12:06:82
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/VoWAiidQkC0wOsxs6SYhNDkSBoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.246.0/24
45.13.227.0/24
185.117.3.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b4:59:f8:e2:17:e3:63:0e:8a:4f:bd:6d:bb:ad:fc:fa:f6:
62:e3:d9:b4:46:53:17:42:27:88:f0:74:dd:b6:d6:86:55:f4:
46:8e:1f:73:6f:50:fe:37:ce:64:d2:e4:74:25:6c:fc:b7:84:
b0:4f:e1:26:ad:20:e1:d6:1e:91:ec:09:4e:16:cd:b5:eb:38:
0f:ad:99:bd:d1:1f:c7:df:cc:8a:b7:a6:fd:a5:ef:77:2f:56:
6e:22:d3:0f:f3:8c:f7:25:f1:57:3f:b3:cc:c5:25:2c:67:6c:
69:47:62:df:27:42:1a:2d:fd:c5:8a:e5:61:1c:66:b4:17:43:
f6:dd:b8:5b:0b:4c:34:60:56:89:b0:d8:9b:b6:25:4e:e8:36:
6d:6b:05:5d:11:5d:bc:c1:8c:a2:37:da:10:59:5f:6e:a0:18:
ae:87:22:b6:d3:d1:00:da:44:cc:2d:27:3d:1e:d6:3a:94:a2:
25:41:18:f7:25:91:44:5b:c7:db:e0:b4:46:01:0d:a2:09:75:
c4:43:a8:52:78:19:c4:0b:f1:27:73:6d:c0:2b:61:5e:fa:16:
d3:7d:6d:a7:77:15:b5:86:54:80:30:fc:e7:78:0b:06:18:77:
7b:a7:cc:e1:3e:27:87:32:8d:be:6b:ed:c9:d4:7e:ae:36:e4:
19:46:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:40 2025 by rpki-client