Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa
File: G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa (raw, json)
Hash identifier: CuG2DStYKEKyAlh0IJta5/FjSh93nl0CeskY3cbZDZs=
Subject key identifier: 1B:B8:69:58:FC:97:B8:F0:9D:72:36:91:6C:2B:80:6F:23:FB:5C:D0
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 01942369552ED7CBBDD65BFABF9709432431
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa
Signing time: Wed 01 Jan 2025 19:48:13 +0000
ROA not before: Wed 01 Jan 2025 19:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 5.42.221.0/24 maxlen: 24
45.129.0.0/24 maxlen: 24
2a12:c740::/48 maxlen: 48
2a12:c740:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:55:2e:d7:cb:bd:d6:5b:fa:bf:97:09:43:24:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Jan 1 19:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bb86958fc97b8f09d7236916c2b806f23fb5cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b5:f8:d6:2a:68:86:7c:15:e8:85:20:c4:de:
86:1e:3d:68:b5:91:f8:bb:2e:b5:d4:bc:d6:69:16:
0c:dc:90:19:38:b0:fb:7c:05:0e:a0:97:a6:51:99:
af:66:2a:30:5a:5f:e9:3a:6b:23:44:7b:3d:23:34:
4f:46:9f:80:9a:03:ed:8d:3e:b8:93:04:c0:40:66:
5e:2d:b6:63:7f:48:5e:ab:33:6e:66:34:46:97:a6:
63:1b:88:02:9a:5f:9c:66:00:83:ab:73:74:bf:a9:
84:9a:64:f7:b5:77:5b:47:5d:95:0f:6c:10:1d:c2:
58:1f:0b:05:a5:58:08:6d:f7:6c:00:99:ef:e7:6e:
bb:a6:d2:49:ee:f8:f0:3a:c8:06:30:70:e1:c2:ae:
35:d7:d9:53:0d:66:35:19:9f:41:ae:8b:35:3c:10:
83:e2:9d:e1:36:6a:3e:89:fe:8d:87:99:42:b6:f4:
ef:53:16:97:a1:88:47:5e:a6:7a:77:2f:f2:c2:3a:
57:56:6f:5e:c6:6a:89:21:58:41:01:11:d9:9e:1b:
50:64:9d:5e:bd:be:e0:98:eb:e4:bc:de:b6:f8:8a:
c0:51:73:2a:99:81:71:b0:65:0e:6c:99:a1:16:78:
4e:ce:5c:68:89:a4:9c:ed:c0:0a:22:1e:f8:6a:0e:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:69:58:FC:97:B8:F0:9D:72:36:91:6C:2B:80:6F:23:FB:5C:D0
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.221.0/24
45.129.0.0/24
IPv6:
2a12:c740::/47
Signature Algorithm: sha256WithRSAEncryption
5f:07:f5:83:e7:19:24:8e:9b:f8:89:62:f1:fb:b0:58:bf:5f:
22:b1:17:3f:65:53:28:7c:6d:dd:4d:8b:c4:8e:96:db:27:e0:
e7:cf:1b:0c:bb:cd:2a:69:a2:24:d9:62:4c:cc:16:64:9a:e0:
e9:d5:31:c0:6c:d0:ca:80:21:ea:e5:c9:1c:c0:3f:9b:04:95:
73:b0:b3:d4:d5:cc:14:5d:62:de:a4:a8:c7:fe:88:f7:87:8b:
ca:25:a3:81:39:5c:9f:0b:e1:94:9d:65:e9:a6:7e:99:91:54:
aa:e6:36:fb:0a:bf:61:1c:2b:3e:df:b0:09:50:2f:27:43:3a:
d5:83:25:a2:12:f1:59:21:b5:37:b0:f3:1d:f4:af:b1:d8:a0:
05:7e:06:26:32:12:c2:1a:a5:44:40:79:63:a5:c7:60:b9:08:
dc:88:8d:2e:11:c1:0b:7f:63:c9:be:de:db:6e:ee:f6:dd:e5:
c5:3e:49:a7:40:ed:9f:2a:7c:d9:4e:60:ef:63:42:d4:ce:20:
68:51:04:c2:9f:d6:b6:b5:59:6d:5a:9b:03:6a:62:7f:8b:c9:
8c:ab:2d:08:f4:4f:43:86:3d:0c:1a:7b:48:72:5a:88:5b:7a:
e6:53:8f:70:5c:93:b5:6a:ee:f9:67:26:32:a8:91:8d:31:5d:
af:c4:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:12:38 2025 by rpki-client