Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa
File: 02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa (raw, json)
Hash identifier: 1lC1lblUpRwTVQ+Ge49BDR+GJQFgOVsafNXG64hb/XY=
Subject key identifier: D3:67:80:DB:35:4D:D8:D1:80:74:5F:8F:D8:B3:1E:01:85:5B:67:C1
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 0194266B537E7816756CAEDB79881ABC2D85
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21412
IP address blocks: 5.20.0.0/20 maxlen: 21
5.20.0.0/21 maxlen: 32
5.20.8.0/21 maxlen: 21
5.20.16.0/20 maxlen: 20
5.20.32.0/19 maxlen: 19
5.20.64.0/19 maxlen: 19
5.20.96.0/21 maxlen: 21
5.20.104.0/21 maxlen: 21
5.20.112.0/21 maxlen: 21
5.20.120.0/21 maxlen: 21
5.20.128.0/19 maxlen: 19
5.20.160.0/19 maxlen: 19
5.20.192.0/19 maxlen: 19
5.20.224.0/21 maxlen: 21
5.20.232.0/21 maxlen: 21
5.20.240.0/20 maxlen: 20
37.157.144.0/21 maxlen: 21
46.251.32.0/19 maxlen: 19
77.87.8.0/21 maxlen: 21
77.221.64.0/19 maxlen: 19
79.133.224.0/19 maxlen: 19
80.240.0.0/20 maxlen: 20
81.29.16.0/20 maxlen: 20
87.239.112.0/21 maxlen: 21
87.247.64.0/18 maxlen: 18
91.187.160.0/19 maxlen: 19
178.16.32.0/20 maxlen: 20
178.250.32.0/21 maxlen: 21
185.26.132.0/22 maxlen: 22
185.198.32.0/22 maxlen: 22
212.52.32.0/19 maxlen: 19
212.117.0.0/19 maxlen: 19
217.17.80.0/20 maxlen: 20
2a00:7600::/32 maxlen: 32
2a01:a1c0::/32 maxlen: 32
2a04:ce00::/29 maxlen: 29
2a04:eb00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:53:7e:78:16:75:6c:ae:db:79:88:1a:bc:2d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d36780db354dd8d180745f8fd8b31e01855b67c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:70:e8:80:bb:c8:03:4c:02:98:3e:96:28:
84:8f:90:a9:58:8a:25:0e:92:d1:b0:29:3e:21:69:
4c:77:64:35:f9:6d:33:8f:1f:c3:0d:a2:12:79:56:
5c:4c:e4:17:64:06:2f:06:9d:4d:ed:3a:80:05:40:
54:36:c5:e6:54:e5:72:f4:a6:9b:06:96:9f:3e:32:
95:52:2d:71:b3:2b:6e:1b:0a:02:82:c2:15:e0:9c:
f5:f4:13:a1:5b:5c:63:d0:20:80:e8:ca:70:46:29:
d2:5f:a6:6c:05:5d:53:9e:65:30:b6:0b:65:55:97:
3d:b2:6c:01:2e:1f:fe:47:d6:41:01:47:1b:1b:29:
62:d3:a8:63:ed:a4:93:c5:6a:6b:a1:2c:ac:71:b5:
65:21:d5:69:c8:e1:b5:13:78:05:a4:30:5a:17:b8:
44:d7:75:2b:09:25:dc:fc:bd:44:32:07:27:e9:63:
09:46:50:58:18:c3:aa:ab:db:17:38:53:9a:3d:ac:
f8:d0:ae:49:b6:ff:26:24:f1:77:4e:7a:be:08:cb:
2f:4e:af:0b:e6:6d:15:da:67:f3:b8:ed:b9:25:27:
66:fd:8b:a0:f1:13:74:bb:cf:cb:dc:5b:fc:f1:90:
6f:60:21:3c:3b:ac:2d:3a:06:7a:e3:7e:35:7d:a8:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:80:DB:35:4D:D8:D1:80:74:5F:8F:D8:B3:1E:01:85:5B:67:C1
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.20.0.0/16
37.157.144.0/21
46.251.32.0/19
77.87.8.0/21
77.221.64.0/19
79.133.224.0/19
80.240.0.0/20
81.29.16.0/20
87.239.112.0/21
87.247.64.0/18
91.187.160.0/19
178.16.32.0/20
178.250.32.0/21
185.26.132.0/22
185.198.32.0/22
212.52.32.0/19
212.117.0.0/19
217.17.80.0/20
IPv6:
2a00:7600::/32
2a01:a1c0::/32
2a04:ce00::/29
2a04:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
b1:53:b4:eb:5f:0a:43:e5:c5:56:81:b7:20:18:cf:b0:08:39:
a6:b6:24:a9:be:96:b0:36:d9:43:2c:02:58:3f:6c:18:c1:9b:
f1:7e:a1:6d:21:25:b7:cd:94:78:02:94:2e:e7:5a:ac:1c:37:
e6:83:37:1c:75:19:7c:7a:25:41:7e:8c:35:6d:1a:4c:73:c1:
2c:71:10:ae:ca:47:13:41:f2:6a:5f:08:3a:f5:79:c0:cd:09:
d8:45:87:e6:24:d3:86:03:e7:2e:cd:86:30:53:1e:26:9d:d5:
cc:4c:98:d9:a2:d8:73:20:35:4d:36:e6:96:00:73:e8:b4:b4:
5a:ea:c6:b2:15:e4:cb:77:52:49:68:28:d7:7f:7d:83:50:e7:
4d:f4:2e:8a:0d:0c:29:21:4a:4e:4a:a2:20:9d:04:d0:4d:bd:
23:77:6e:c2:93:27:ba:20:4a:ba:8c:a3:38:f7:ad:3e:27:f0:
45:46:e5:0c:f6:15:a4:52:31:fc:57:8a:56:b0:5e:d0:db:a8:
23:16:7e:74:90:48:60:5d:9a:d9:f9:e9:1b:19:be:ac:52:40:
a3:19:7f:a1:f0:3b:09:5f:d8:2a:88:a5:53:bc:de:d6:61:7b:
92:1b:3e:c3:09:cf:3e:eb:ae:d4:a7:17:e1:5f:61:e9:93:26:
eb:82:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:05 2025 by rpki-client