Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/T1bwZT_-eex57Vj41Q7b66D1Trg.roa
File: T1bwZT_-eex57Vj41Q7b66D1Trg.roa (raw, json)
Hash identifier: XKOqY2A97h97fad11HTcXjTccdNMv2Xjm8CaKmlvlqo=
Subject key identifier: 4F:56:F0:65:3F:FE:79:EC:79:ED:58:F8:D5:0E:DB:EB:A0:F5:4E:B8
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5AB97AE76AA14CB4D547B76B9732F
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/T1bwZT_-eex57Vj41Q7b66D1Trg.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 5.8.66.0/23 maxlen: 23
5.101.92.0/22 maxlen: 22
5.188.10.0/23 maxlen: 23
5.188.48.0/23 maxlen: 23
5.188.60.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
46.161.28.0/22 maxlen: 22
46.161.41.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.44.0/22 maxlen: 22
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ab:97:ae:76:aa:14:cb:4d:54:7b:76:b9:73:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f56f0653ffe79ec79ed58f8d50edbeba0f54eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:75:02:3a:08:00:4b:ea:de:70:b3:07:17:db:
ff:3a:52:3e:d3:3f:20:7b:c8:1e:aa:f1:3e:ed:45:
6b:d4:e3:3e:c2:6d:40:b7:a6:d2:f2:ca:c8:ac:b8:
db:46:93:5a:b3:0e:df:93:65:6b:14:c9:b0:77:7d:
ff:58:f6:f0:6e:ed:eb:e2:9e:64:e2:98:b5:7e:b9:
93:2f:69:af:23:1d:b1:2c:b6:5b:b3:04:29:fe:99:
15:66:f5:fb:50:eb:d3:c4:0d:43:72:96:29:f1:8d:
92:4f:f6:b0:f3:9f:b7:42:54:fa:0a:5f:44:5e:40:
5a:10:e2:ad:37:49:69:4d:7d:6e:f7:87:fe:f6:c8:
8e:1e:8f:73:9c:87:47:85:21:35:c2:46:2b:41:c8:
bf:52:27:17:b8:04:cf:16:0c:2c:fe:fd:c4:e3:8d:
2e:30:00:c4:1e:07:da:8f:ea:43:c0:f3:88:64:87:
d8:c7:6d:e0:a7:ea:51:e3:92:fb:97:70:f9:25:d6:
25:98:2e:4b:f9:42:0f:a7:44:c8:d4:4c:7a:f7:75:
34:43:be:ac:83:a2:a5:dd:4d:78:a1:f3:60:73:15:
65:87:18:34:bd:30:69:e3:0d:01:b7:a5:d1:df:f5:
2b:63:ff:c5:e2:c0:e2:17:3d:b7:98:a2:76:44:29:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:F0:65:3F:FE:79:EC:79:ED:58:F8:D5:0E:DB:EB:A0:F5:4E:B8
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/T1bwZT_-eex57Vj41Q7b66D1Trg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.66.0/23
5.101.92.0/22
5.188.10.0/23
5.188.48.0/23
5.188.60.0/23
46.161.26.0/24
46.161.28.0/22
46.161.41.0/24
91.243.32.0/22
91.243.44.0/22
91.243.52.0-91.243.59.255
Signature Algorithm: sha256WithRSAEncryption
1d:1f:4d:e2:6d:fa:62:55:b5:34:b4:18:fe:8c:66:50:33:b0:
d6:cc:d4:7e:4a:ea:94:b8:40:ea:2a:f8:35:79:2d:8d:60:d7:
a7:59:1c:d0:29:5d:ec:dc:35:79:95:2a:97:c3:f7:34:64:15:
5f:22:a9:4b:38:12:8f:6d:37:b9:8a:23:97:ef:d4:7c:51:cf:
48:e8:96:2d:95:e5:9e:e8:e8:5a:14:00:c2:85:3a:e5:2f:92:
f0:4e:91:c0:99:d2:d8:fc:61:10:c8:4a:3d:a7:36:4d:36:3f:
ff:25:88:3d:12:52:87:ee:e9:f5:c5:33:d0:88:57:ab:46:bb:
cc:8f:35:0c:11:82:50:b3:a3:61:b3:a0:68:a1:19:20:cc:f1:
f3:8c:d9:21:29:0e:e0:86:52:6c:37:de:0b:94:4f:cb:58:13:
d4:b0:6a:d2:14:08:91:b5:7e:64:ed:04:89:ac:02:ce:41:d8:
2d:64:ff:37:26:c5:6c:ad:25:ac:b4:4c:50:6e:5b:39:b0:1b:
21:e6:7a:ed:0e:98:34:f6:12:fc:52:af:d4:b3:cb:f3:68:d6:
6f:4c:c0:4e:a3:1b:cf:2d:57:f4:3a:41:31:33:64:c2:9f:fe:
69:00:9d:67:fe:9e:16:a5:54:7c:76:af:b7:d0:a9:67:6a:fa:
a9:af:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:54:40 2025 by rpki-client