Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/bp1oEKvy0k4AWur_R9trAhI-EY0.roa
File: bp1oEKvy0k4AWur_R9trAhI-EY0.roa (raw, json)
Hash identifier: 1L++/xzP2iQbZgWJOfAhv8wOoNcuV9GiE8g7Q92+ZBo=
Subject key identifier: 6E:9D:68:10:AB:F2:D2:4E:00:5A:EA:FF:47:DB:6B:02:12:3E:11:8D
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 01941FFA4C8E3B9D9698B31168519FC895DD
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/bp1oEKvy0k4AWur_R9trAhI-EY0.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212954
IP address blocks: 5.253.128.0/24 maxlen: 24
5.253.129.0/24 maxlen: 24
5.253.130.0/24 maxlen: 24
5.253.131.0/24 maxlen: 24
80.244.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4c:8e:3b:9d:96:98:b3:11:68:51:9f:c8:95:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e9d6810abf2d24e005aeaff47db6b02123e118d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5c:87:d3:0c:94:6c:95:65:b5:01:47:bb:b1:
86:03:da:06:1b:65:b6:35:8e:81:a0:04:3b:e0:8a:
9b:65:75:c0:f7:82:98:a1:4b:b4:bb:94:7f:b3:1b:
71:d3:23:c2:94:7a:1b:5c:14:aa:a8:b5:85:12:f8:
0b:2c:a9:29:53:cf:5f:cd:43:3c:a1:03:13:82:f6:
bd:4c:99:e0:0c:cc:0c:f2:0d:85:cd:93:3d:c5:27:
ee:78:bd:1e:c1:c9:70:69:46:95:be:1f:01:c1:26:
a6:6b:09:e1:ce:8d:6c:31:12:4e:2f:cd:5d:e8:e3:
d4:06:b2:15:f3:10:67:d5:f3:05:44:6d:ae:fc:91:
df:c1:65:47:f1:35:e8:6d:74:72:cd:58:6d:81:15:
d4:6f:2b:29:54:25:e3:5b:55:42:9d:ba:36:53:ae:
89:73:fb:ee:07:f8:33:b2:a8:d6:b6:47:9a:60:ce:
66:9c:13:0e:b1:1b:db:ab:94:32:e4:2d:48:2f:01:
e9:c2:19:87:7c:74:f2:1f:ef:b8:a0:89:95:d6:dd:
7d:32:6a:f1:66:9e:8b:33:24:93:7d:6c:a2:75:24:
11:f1:f3:29:01:3d:72:bd:e8:f0:97:cd:da:28:39:
ce:b3:5a:fc:dc:77:bf:84:fe:6e:62:70:03:85:0f:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9D:68:10:AB:F2:D2:4E:00:5A:EA:FF:47:DB:6B:02:12:3E:11:8D
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/bp1oEKvy0k4AWur_R9trAhI-EY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.128.0/22
80.244.10.0/24
Signature Algorithm: sha256WithRSAEncryption
69:65:d5:69:60:82:0c:38:bc:0f:a5:0a:cd:7d:03:5b:c8:a4:
55:b5:0f:aa:f1:55:61:00:3e:c3:34:d9:0f:19:30:7b:d2:f3:
a6:a3:96:d5:50:7b:fd:9d:c7:ed:06:28:01:b2:9e:6c:4f:a4:
36:7a:18:58:73:b8:dc:83:1e:4c:6c:dd:73:91:cd:77:61:68:
7c:fe:40:60:eb:2b:3d:72:8a:0f:4a:87:80:b5:7e:6b:33:bd:
b3:e4:e9:94:61:32:a4:30:18:8a:b7:84:2c:55:95:10:b1:17:
9a:25:66:19:24:25:30:8f:b4:fb:c8:f8:6d:13:75:31:e1:99:
1a:38:ca:de:3d:18:66:af:7b:cc:02:1d:34:d9:8e:82:21:b6:
f2:b6:e5:1f:55:26:b5:1e:dd:0b:cc:31:34:b8:93:b4:8a:eb:
54:22:0e:4b:9f:33:97:fd:97:db:84:68:bd:13:01:8d:c9:48:
85:84:1f:fc:6f:8a:be:58:ba:93:74:e6:f6:15:b6:e1:50:c7:
12:03:6a:b9:98:c5:e7:76:9a:5f:4f:f2:84:ae:1a:07:89:70:
82:ee:d9:fa:18:50:91:23:1e:3d:67:32:53:03:a2:00:06:44:
04:75:09:94:88:92:74:ea:fb:1f:26:12:1b:7b:01:0c:59:10:
3d:1f:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:36 2025 by rpki-client