Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/prjkLwaZCczZnaWoNgP26uDN_Ls.roa
File: prjkLwaZCczZnaWoNgP26uDN_Ls.roa (raw, json)
Hash identifier: 3+Z/kVH+z5WVzD4BWaSvFy88GXI5lUEPnODdoVwbcrg=
Subject key identifier: A6:B8:E4:2F:06:99:09:CC:D9:9D:A5:A8:36:03:F6:EA:E0:CD:FC:BB
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A7BF62CAF31AD695B2A0EE65D4A7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/prjkLwaZCczZnaWoNgP26uDN_Ls.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50896
IP address blocks: 5.188.219.0/24 maxlen: 24
37.9.40.0/24 maxlen: 24
37.9.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a7:bf:62:ca:f3:1a:d6:95:b2:a0:ee:65:d4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6b8e42f069909ccd99da5a83603f6eae0cdfcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e3:6b:4d:8f:41:7a:a7:96:09:c6:2d:31:dc:
98:e1:39:d7:ea:4c:6b:89:e2:0f:f7:2c:5d:b7:16:
60:af:0a:4e:66:d5:3d:16:67:09:29:ba:05:ab:fa:
34:d3:d8:bd:42:17:e8:08:91:39:0e:d2:7e:54:c4:
14:19:37:c6:17:11:00:aa:03:b3:39:16:95:0a:7c:
ff:79:a2:6b:03:a6:84:d1:9a:86:df:91:35:2e:0a:
0b:77:26:6b:9b:5f:1e:ff:cd:a5:2a:61:aa:36:2b:
3a:be:4f:40:b4:b0:93:b1:62:d3:9c:69:ad:3d:3a:
05:83:12:24:30:ef:f8:5b:35:0e:52:bc:04:46:0f:
f9:d3:4a:51:b9:2b:70:63:93:4c:73:98:24:20:2e:
65:47:1c:37:33:7d:e8:65:6c:c6:f9:8b:03:ac:f2:
1d:77:19:79:0a:dd:52:d7:4f:90:46:ba:3b:bb:50:
44:b0:5d:7a:b8:a6:56:74:84:51:e2:18:aa:a7:5f:
f5:cd:b7:0d:7a:0e:1d:ad:9f:67:54:ae:cb:20:dc:
81:59:a2:a4:70:df:37:6b:21:19:6b:2c:3e:57:61:
85:44:5f:4e:cf:fb:40:ce:1e:73:c3:4e:62:f4:76:
a0:cc:31:ab:4c:dc:7a:8e:5d:9e:ff:74:a1:27:6d:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B8:E4:2F:06:99:09:CC:D9:9D:A5:A8:36:03:F6:EA:E0:CD:FC:BB
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/prjkLwaZCczZnaWoNgP26uDN_Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.219.0/24
37.9.40.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:5f:de:10:04:24:e1:c3:81:16:8f:0a:cd:48:a4:92:e3:fc:
ff:e0:9f:fa:1a:89:c0:89:de:dd:95:74:4f:68:68:1a:14:e7:
e8:46:55:68:1c:01:5d:10:cb:40:e2:4c:35:72:d7:09:c9:25:
f4:3b:a9:95:89:1d:29:de:0f:18:6a:f5:ff:5c:b2:79:68:6f:
74:e3:84:0c:90:2a:10:a6:2f:18:be:a7:95:06:02:4c:03:43:
d2:88:99:52:ad:a6:c9:71:0b:c4:03:2c:84:03:0d:e5:61:42:
61:b4:ca:c2:4f:64:12:7d:46:25:c0:23:76:53:36:ab:e7:dd:
72:ef:c4:55:19:20:c3:dd:02:e9:70:39:b7:b9:68:42:7e:06:
e3:80:79:46:8c:81:19:a6:f4:dd:d1:29:5e:d4:5c:b9:af:d5:
d5:bc:35:3d:fc:49:44:28:3d:c6:7b:73:5b:be:cd:f0:1b:57:
57:13:79:2b:16:1f:32:6e:a9:31:21:47:7b:2d:f9:93:8b:32:
29:b7:13:8f:d2:94:e0:b7:6b:96:bb:9e:eb:54:34:9e:42:90:
04:85:4f:5e:62:3e:91:71:bb:cc:fd:e0:2f:de:b9:15:86:06:
92:65:4c:ff:e7:81:6f:f1:19:27:db:ac:a8:a5:91:c4:b5:bf:
a9:3a:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:14 2025 by rpki-client