Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/aRNIY9aPisPsPJEyhtJc_m061Zk.roa
File: aRNIY9aPisPsPJEyhtJc_m061Zk.roa (raw, json)
Hash identifier: ah5G0cArNKCIsOUw2/tpkDwad97MIaUDok+u/s4pKjw=
Subject key identifier: 69:13:48:63:D6:8F:8A:C3:EC:3C:91:32:86:D2:5C:FE:6D:3A:D5:99
Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial: 019422FB650BCF9B690D96689261825B9CA9
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/aRNIY9aPisPsPJEyhtJc_m061Zk.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 5.149.32.0/19 maxlen: 24
185.74.132.0/22 maxlen: 24
2a00:d360::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:65:0b:cf:9b:69:0d:96:68:92:61:82:5b:9c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69134863d68f8ac3ec3c913286d25cfe6d3ad599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:34:58:80:07:aa:65:2d:9d:94:82:35:25:
5f:06:f0:a4:4c:39:4b:66:c6:d7:0b:24:95:c4:da:
b4:bd:63:ab:9d:87:a1:8c:08:e8:58:75:a5:3a:24:
50:17:00:2e:f4:fa:4d:3b:ef:9f:10:8b:6e:1a:5f:
ff:ea:6d:df:1a:c6:56:24:50:45:e7:4f:bf:f8:f2:
48:5f:84:1b:a6:e2:57:f9:6d:d9:33:89:62:be:b9:
fa:b5:17:b7:f8:38:53:3e:ce:ea:c6:d5:62:3b:8a:
77:80:67:22:66:bf:28:26:0c:65:10:ad:be:73:36:
81:9e:21:98:f8:9b:7e:d5:f9:cb:15:ba:c7:72:1c:
53:8c:82:ee:0d:21:1a:33:51:18:2d:61:50:01:4a:
03:0d:c5:7a:48:5c:f1:2a:46:03:c6:1a:27:b3:44:
ef:7e:33:ea:ca:35:29:f4:e0:58:46:be:6e:94:a1:
32:50:c8:9c:f5:e5:0b:f6:b9:95:6d:9c:e3:68:ff:
55:44:44:29:d5:10:85:87:f9:81:6d:07:16:c6:39:
b1:b8:73:5e:d5:bd:a9:7c:7f:44:48:9b:b9:58:59:
2f:29:e1:ac:87:f2:d6:b8:6b:60:39:a9:33:d7:1a:
46:69:de:b9:e7:aa:b4:cf:ed:88:8e:8c:ec:41:0d:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:48:63:D6:8F:8A:C3:EC:3C:91:32:86:D2:5C:FE:6D:3A:D5:99
X509v3 Authority Key Identifier:
keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/aRNIY9aPisPsPJEyhtJc_m061Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.32.0/19
185.74.132.0/22
IPv6:
2a00:d360::/29
Signature Algorithm: sha256WithRSAEncryption
32:8e:51:c3:fe:8a:22:dc:e2:d5:0f:38:ab:6a:de:6c:04:ee:
2e:63:c9:ab:ad:04:1b:59:e6:50:3d:0e:7c:f6:a7:91:78:01:
59:72:6f:9d:12:02:94:92:5a:0e:ba:74:42:18:a3:10:74:f4:
0d:a7:33:ce:d0:4f:a6:c6:fe:8a:a3:63:a5:a2:cc:71:a5:2b:
e3:d4:ec:c9:ee:40:c2:bd:f2:98:2c:9b:3d:a2:3d:2f:16:36:
cb:42:92:c6:a0:69:4e:06:23:b6:fe:ad:ef:2a:99:ea:e4:7c:
b5:81:74:f8:c0:82:df:db:68:5d:ff:11:2b:6b:94:4b:8a:d4:
bf:29:bf:57:7a:51:81:af:b8:1d:ab:77:b6:88:64:26:28:79:
9b:ff:d2:67:1a:0a:25:80:e9:2e:26:7d:81:d4:c2:7e:1d:9f:
32:04:9c:23:bf:62:7e:11:56:cf:92:c9:12:4a:1c:df:6c:58:
df:96:84:eb:e1:ec:84:78:e7:6f:a3:70:b7:9b:9e:3f:1d:3f:
70:09:04:67:76:c3:12:8e:59:a3:85:ca:fb:9c:dc:f3:a9:65:
7b:94:cb:e6:47:91:17:7f:44:96:5e:aa:eb:82:c3:11:a5:56:
87:56:32:75:e7:a6:c9:8d:6a:38:10:06:81:56:cc:bb:09:2f:
83:4b:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:08 2025 by rpki-client