Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PK5W_H3U9PZKrMWFlReAWPszOgs.roa
File: PK5W_H3U9PZKrMWFlReAWPszOgs.roa (raw, json)
Hash identifier: rywL8dIEcRP/mcstN5OzalSI7UGTngO/4ywzKc5AY88=
Subject key identifier: 3C:AE:56:FC:7D:D4:F4:F6:4A:AC:C5:85:95:17:80:58:FB:33:3A:0B
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067CE8E7F1DE7163BE939E98FDA9C62
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PK5W_H3U9PZKrMWFlReAWPszOgs.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51820
IP address blocks: 138.188.136.0/24 maxlen: 24
138.188.138.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
194.209.67.0/24 maxlen: 24
195.65.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ce:8e:7f:1d:e7:16:3b:e9:39:e9:8f:da:9c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cae56fc7dd4f4f64aacc58595178058fb333a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:fd:d6:b9:9d:4f:7e:03:ad:61:51:c2:83:
5a:06:5e:7f:dd:fa:f9:4c:c5:f9:1d:e5:3e:80:5f:
35:57:4b:3c:0f:4c:d4:51:7e:36:38:54:f3:0c:8a:
2c:76:09:20:5d:c6:06:b2:4f:44:80:34:44:64:e6:
7a:bd:aa:5d:b4:d4:52:9b:0e:71:20:be:35:bd:81:
e7:26:fb:52:20:cd:a0:02:d9:76:84:6c:48:66:29:
22:59:3c:7a:46:d2:56:42:9f:ce:c9:94:5f:d1:f0:
03:bc:64:9e:ea:a8:c1:4a:4d:23:4f:51:f2:7f:ac:
32:76:20:07:55:59:03:d6:f8:74:8c:7e:92:4d:bf:
1f:1d:35:f7:90:db:ec:05:d2:87:f1:11:53:db:7b:
92:9f:48:03:a7:1f:4f:21:ef:94:fa:3b:c1:24:80:
66:9d:29:67:06:c0:af:4f:48:b3:be:a7:41:c4:2d:
90:27:36:9f:c0:1e:22:28:0b:3f:8f:dc:0e:e0:8e:
1d:fd:74:8c:6b:55:09:23:2c:af:eb:b4:fd:50:3d:
2e:9e:75:19:e7:28:ed:3d:08:2d:02:16:f3:8c:aa:
36:c5:ab:cd:b3:1a:28:11:a9:33:ce:3e:df:95:27:
04:36:c9:f2:a6:da:c3:63:3b:f8:a4:35:6e:11:b1:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AE:56:FC:7D:D4:F4:F6:4A:AC:C5:85:95:17:80:58:FB:33:3A:0B
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PK5W_H3U9PZKrMWFlReAWPszOgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.188.136.0/24
138.188.138.0/24
193.5.63.0/24
193.247.90.0/24
194.209.67.0/24
195.65.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:23:ad:9b:b7:50:40:3b:7c:22:77:e1:51:cd:24:3c:18:50:
15:9a:c5:24:ae:6d:b4:e3:2c:52:74:c1:27:1e:63:4b:34:26:
70:59:1a:ce:f8:42:dd:f4:ca:ff:36:f2:c3:0e:63:53:33:b5:
f1:5b:c8:dd:03:f1:cf:ea:a3:90:9d:ad:60:85:6c:d8:e7:62:
b0:6f:32:28:c6:b4:aa:c9:20:be:0e:4b:4a:16:1a:44:68:c1:
f2:9c:1a:a7:ec:7b:c6:56:8c:17:6b:0a:89:4c:81:e1:d8:c8:
b9:3a:ec:02:39:d9:a6:35:f1:45:61:32:58:77:f1:d8:04:4c:
48:22:54:fc:52:3a:e3:b1:58:50:20:d7:c7:8e:04:13:e7:1a:
db:8a:ab:23:21:77:aa:7b:c6:02:fc:5d:df:cf:d6:b5:46:36:
9d:b6:be:3d:3a:56:7d:d5:47:59:be:c6:72:88:12:8a:3c:b9:
af:81:16:3b:14:a3:1e:d4:b3:21:76:7b:27:e3:84:07:4b:e9:
c2:90:bc:d2:2b:31:79:2f:d9:c5:68:f2:99:4a:4a:eb:95:78:
1a:be:8a:27:b6:5d:05:9c:6e:c5:4b:4a:f9:bb:aa:96:52:39:
9e:83:89:e2:fc:d5:45:d5:e9:e1:1b:29:f8:92:e7:24:5d:9c:
b7:82:60:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:45:44 2025 by rpki-client