Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/wPc7v-r8HN2WgTXXGZ1otoniuZk.roa
File: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (raw, json)
Hash identifier: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=
Subject key identifier: C0:F7:3B:BF:EA:FC:1C:DD:96:81:35:D7:19:9D:68:B6:89:E2:B9:99
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019427B5DD962FB9BC25E7CEFE7E778C252E
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/wPc7v-r8HN2WgTXXGZ1otoniuZk.roa
Signing time: Thu 02 Jan 2025 15:50:17 +0000
ROA not before: Thu 02 Jan 2025 15:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 5.182.86.0/24 maxlen: 24
5.182.87.0/24 maxlen: 24
77.232.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:dd:96:2f:b9:bc:25:e7:ce:fe:7e:77:8c:25:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 2 15:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f73bbfeafc1cdd968135d7199d68b689e2b999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:c8:0f:73:0d:35:45:8a:e5:27:44:9f:5c:
06:b4:2e:dc:2c:cb:c9:e3:7f:83:02:3e:07:22:04:
d9:59:60:6d:00:91:cc:24:39:3b:8b:7a:3a:ac:3d:
e0:6a:2c:44:7b:08:7d:ef:10:0a:b8:c1:22:e5:51:
2d:88:bb:15:3c:4b:aa:57:fe:27:5a:d1:e8:3d:42:
55:79:9a:80:be:53:59:a5:54:a2:74:37:52:d3:63:
80:1c:8c:68:ab:a0:b0:d4:26:77:16:66:df:6d:33:
02:f0:65:e8:a7:eb:6b:7a:85:a3:4e:33:ef:8b:fa:
7e:56:03:86:05:d2:36:9f:f6:82:da:c8:40:a3:53:
0e:81:87:ba:79:db:13:82:bf:b4:9a:17:2b:11:8d:
dd:73:62:05:36:9e:96:f4:35:48:3c:13:a5:95:a0:
ba:95:e4:2a:11:fc:b3:9b:6c:ba:43:aa:9f:41:25:
9c:60:d0:f7:27:4b:da:6a:e6:13:59:ad:86:b6:ba:
4d:d3:3a:e4:05:d1:58:3a:02:07:96:08:f0:92:bd:
9e:28:8a:a9:f9:2a:a9:b4:2e:47:cc:c6:75:3e:92:
63:76:ca:f9:9a:1f:80:c2:fc:1e:db:01:ba:e5:ba:
dc:38:cc:c9:e0:55:e0:91:70:51:de:9f:60:20:3d:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F7:3B:BF:EA:FC:1C:DD:96:81:35:D7:19:9D:68:B6:89:E2:B9:99
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/wPc7v-r8HN2WgTXXGZ1otoniuZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.86.0/23
77.232.142.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:c0:07:1a:78:b5:83:12:17:5a:32:78:d7:57:92:6d:91:9b:
35:2c:b7:82:f2:c0:7b:f0:f4:cf:14:29:f7:79:cd:84:df:58:
24:b4:99:34:41:d4:a7:35:5c:5d:6c:00:84:23:57:72:11:bb:
36:77:84:56:79:1f:78:b8:5f:e3:d6:65:89:58:07:3f:fe:42:
01:8f:01:71:ab:ea:9c:f4:86:92:7b:19:75:6a:0d:4e:19:83:
d8:e9:43:32:8b:00:97:42:e6:0f:ad:09:db:43:ae:31:fb:4d:
14:84:48:38:a0:6a:5a:d8:5a:04:09:d9:11:21:5a:8e:38:fc:
f3:eb:ee:0a:c4:27:9c:58:10:a8:b6:80:e9:42:89:89:76:dd:
c2:08:42:7e:28:cd:a1:dc:f5:85:eb:44:61:2b:ef:41:e6:a0:
bb:d3:b9:76:b5:61:5f:32:78:d9:aa:a2:6e:9e:4c:c5:ad:11:
3f:7a:0c:75:88:63:83:13:f3:b6:61:2b:00:e2:f3:27:a7:58:
01:03:3c:b5:d3:88:f6:dc:46:2b:1c:90:12:21:16:78:9d:21:
28:af:40:66:08:08:ec:b8:16:82:a7:78:9d:e4:8b:44:7f:ff:
3e:b7:64:b6:0f:26:44:c6:3e:6b:a2:75:33:64:34:55:b9:f7:
aa:b4:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:57 2025 by rpki-client