Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/IEdCISk6eirBM8aMw0v8o1VNUNg.roa
File: IEdCISk6eirBM8aMw0v8o1VNUNg.roa (raw, json)
Hash identifier: ryq15VuUpElvtSOJ/WnrzZ4mAZmk9+4a2Lk3Qzxj4lc=
Subject key identifier: 20:47:42:21:29:3A:7A:2A:C1:33:C6:8C:C3:4B:FC:A3:55:4D:50:D8
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A95F38CFCEBF7F9A35970370468A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/IEdCISk6eirBM8aMw0v8o1VNUNg.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56534
IP address blocks: 5.188.85.0/24 maxlen: 24
37.139.36.0/22 maxlen: 22
37.139.36.0/24 maxlen: 24
37.139.37.0/24 maxlen: 24
37.139.39.0/24 maxlen: 24
37.139.44.0/22 maxlen: 22
37.139.44.0/24 maxlen: 24
37.139.45.0/24 maxlen: 24
37.139.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a9:5f:38:cf:ce:bf:7f:9a:35:97:03:70:46:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20474221293a7a2ac133c68cc34bfca3554d50d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:ee:de:84:f0:7e:52:8b:48:97:77:2e:34:
dd:f1:d3:72:30:14:e6:62:e8:64:5e:2d:9c:37:b2:
96:a1:f6:ce:f3:08:48:45:f7:d9:b1:f2:7d:f7:36:
dc:fa:b6:b5:df:b7:c8:4a:73:f2:34:5c:ea:a7:87:
54:8b:f3:a5:f2:3a:22:c2:a3:82:d8:dd:a4:43:d4:
21:a3:94:23:ba:45:8b:09:f8:b3:ad:58:bf:f0:eb:
eb:2a:15:4f:8b:8d:d1:a6:58:51:22:ec:4c:84:f9:
1e:1c:3b:39:07:96:56:54:b6:77:87:ee:58:40:ff:
d7:41:86:6c:d6:be:fa:3a:a6:df:b2:03:52:75:74:
63:03:b2:a4:c0:e4:ef:6f:72:5b:92:dc:b6:b0:e8:
3e:03:f8:aa:b4:69:b2:69:a4:d7:aa:95:e7:3d:ad:
14:b1:fc:a0:c4:db:ce:26:a2:55:d1:92:74:e9:95:
ff:57:66:f9:7b:45:6d:57:5a:ae:c7:3e:44:dc:7a:
f8:ae:85:1f:d7:3e:02:a6:5e:d5:ea:f9:91:2c:8c:
d3:d4:2b:74:05:52:65:a4:96:8e:d4:df:d3:e4:fc:
5b:ba:66:d6:a4:bc:bb:b2:fd:03:bd:9d:00:eb:d1:
9e:4f:74:d3:2d:31:27:98:40:22:21:be:60:6e:a5:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:47:42:21:29:3A:7A:2A:C1:33:C6:8C:C3:4B:FC:A3:55:4D:50:D8
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/IEdCISk6eirBM8aMw0v8o1VNUNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.85.0/24
37.139.36.0/22
37.139.44.0/22
Signature Algorithm: sha256WithRSAEncryption
70:be:1f:76:dd:e0:5e:41:71:7d:d3:2d:37:07:72:eb:11:eb:
71:ea:ea:c9:0c:88:2b:3e:dc:00:f9:9a:c6:5c:d8:77:2d:31:
f6:81:b0:1f:a9:69:05:d6:90:aa:70:47:4d:84:2c:2c:e8:60:
eb:6a:e6:8a:9e:e5:13:2b:2f:fc:b2:77:47:5e:19:39:f2:62:
80:a5:6d:3d:1f:72:7b:ec:da:61:36:85:0d:2c:87:bd:8f:af:
8e:de:af:31:68:9f:0e:ec:d2:8c:be:0d:6d:9c:96:ca:9b:30:
f9:17:b3:99:5e:43:85:76:c5:15:54:92:19:54:8c:c7:1b:c1:
17:3c:ee:6b:be:13:70:94:76:bd:8b:9e:9b:04:d8:ca:11:d3:
5d:b7:8f:ce:3a:cf:73:a5:54:0d:dc:ea:72:7f:f8:98:37:9c:
7a:84:37:e4:f1:6f:99:9e:cd:1a:8d:19:7e:ae:6c:37:9c:45:
9d:c1:65:85:35:1a:4a:b6:59:cd:dc:3e:80:18:7a:0d:2b:f2:
55:1e:a7:33:62:3d:27:e6:40:38:31:8e:2d:ed:13:70:ea:69:
ec:6e:c5:bf:cf:b0:a5:05:0b:da:c3:e9:28:e5:dd:e5:30:3f:
6f:4c:81:12:05:76:fc:93:ad:70:6e:8d:53:3d:bf:8a:d5:bf:
7b:c5:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:06 2025 by rpki-client