Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/_F5MVfF5fNE4gJHS7bTOuaP33x0.roa
File: _F5MVfF5fNE4gJHS7bTOuaP33x0.roa (raw, json)
Hash identifier: glFPm7n2DIuS97xAP2QYuEIRa9RXcbN9tpa+7lEYHOU=
Subject key identifier: FC:5E:4C:55:F1:79:7C:D1:38:80:91:D2:ED:B4:CE:B9:A3:F7:DF:1D
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01946A239D67C51A2BB006C2CD6E136ED8A1
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/_F5MVfF5fNE4gJHS7bTOuaP33x0.roa
Signing time: Wed 15 Jan 2025 13:25:06 +0000
ROA not before: Wed 15 Jan 2025 13:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64425
IP address blocks: 5.182.210.0/23 maxlen: 24
45.148.121.0/24 maxlen: 24
45.148.122.0/24 maxlen: 24
185.244.39.0/24 maxlen: 24
2a0d:2406:200::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:23:9d:67:c5:1a:2b:b0:06:c2:cd:6e:13:6e:d8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 15 13:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc5e4c55f1797cd1388091d2edb4ceb9a3f7df1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:30:b4:d7:fd:b1:96:72:3e:76:9f:ad:9e:
0f:63:93:eb:88:76:7c:f1:6f:e1:55:3d:b3:70:b3:
47:71:45:70:7c:ba:a3:a8:0f:14:b5:ea:e7:d9:47:
0f:2a:96:39:bb:ab:f5:76:e4:ea:56:5a:60:4c:07:
08:ef:51:26:db:8d:22:7a:e3:5f:99:5c:b3:40:12:
94:73:46:cc:06:29:43:91:57:9e:d3:22:bd:0b:54:
97:0a:ed:05:78:44:88:5c:51:a6:d2:23:23:1d:e5:
6f:f0:dc:63:e2:d2:a8:3b:d8:7b:b2:d7:d4:38:2d:
a8:bb:1f:a1:13:66:af:95:0e:0b:1e:2e:f9:6d:d0:
09:df:38:70:47:06:42:cc:ca:da:63:36:1e:13:29:
df:b7:7f:e6:d4:4b:0b:da:b0:d0:cb:92:b8:59:85:
86:87:5e:52:ed:83:9e:41:09:75:33:76:14:8c:0a:
8c:36:d7:ad:e1:a6:26:fc:6b:84:59:72:54:4b:ca:
ba:73:96:5b:03:33:46:5e:c1:c2:56:98:c6:51:f4:
b8:68:9f:35:7e:7f:7b:03:66:07:9e:a5:d6:76:2f:
0e:b2:49:87:ea:6c:4f:01:1e:26:74:1b:79:96:e4:
e5:3a:17:d6:5a:24:d0:f7:ea:d4:f5:0f:c1:98:9a:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:4C:55:F1:79:7C:D1:38:80:91:D2:ED:B4:CE:B9:A3:F7:DF:1D
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/_F5MVfF5fNE4gJHS7bTOuaP33x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.210.0/23
45.148.121.0-45.148.122.255
185.244.39.0/24
IPv6:
2a0d:2406:200::/39
Signature Algorithm: sha256WithRSAEncryption
29:73:e2:83:7c:94:20:c8:b0:20:f5:ce:c9:70:d2:a0:8e:26:
80:0c:8f:f6:6e:8d:20:ce:df:15:e2:dd:57:0f:b0:6b:ce:37:
72:24:ab:e2:f3:56:1a:33:75:a8:8e:9c:42:6f:a1:5e:ea:39:
50:45:24:ab:9a:d6:3d:82:34:9c:ca:89:7e:4e:3a:8c:bf:8c:
12:aa:e6:ae:f5:5d:9b:ef:10:32:39:ea:61:3e:a4:ff:90:b0:
35:2d:81:99:df:70:19:51:8a:ef:21:9e:ca:8a:37:8d:e9:f9:
0e:90:11:3d:32:bf:ae:fa:cb:b2:47:c3:e8:6d:9e:13:ce:5a:
2e:be:cd:df:46:5a:12:8d:d6:bb:3d:a9:63:e3:b4:d9:54:03:
4f:35:5c:2c:d5:b8:f7:ac:ee:67:6b:07:7e:a4:fa:4e:f9:2b:
2b:c0:19:a9:1a:6a:bd:0b:cc:08:3a:36:4e:29:b4:46:64:bb:
e2:4f:8f:22:0e:cc:c4:ee:58:c0:88:81:d5:ce:96:94:35:f6:
b5:dc:44:d8:fa:f5:0e:e0:d6:d3:5c:d2:38:35:da:2e:f5:15:
85:1a:1e:c5:4f:8b:4b:19:e2:95:37:ac:4e:89:f1:31:59:6c:
46:48:96:3e:7a:19:5f:40:99:a3:02:5a:4b:83:91:21:34:08:
1a:a0:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:39:51 2025 by rpki-client