Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/w0j3028GTs0XxpRerIzPD_MNXeU.roa
File: w0j3028GTs0XxpRerIzPD_MNXeU.roa (raw, json)
Hash identifier: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=
Subject key identifier: C3:48:F7:D3:6F:06:4E:CD:17:C6:94:5E:AC:8C:CF:0F:F3:0D:5D:E5
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 019425220A9E664A4F156DD76FB1710444FD
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/w0j3028GTs0XxpRerIzPD_MNXeU.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 5.44.42.0/24 maxlen: 24
2a05:541:102::/48 maxlen: 48
2a05:541:103::/48 maxlen: 48
2a05:541:104::/48 maxlen: 48
2a05:541:105::/48 maxlen: 48
2a05:541:106::/48 maxlen: 48
2a05:541:107::/48 maxlen: 48
2a05:541:108::/48 maxlen: 48
2a05:541:109::/48 maxlen: 48
2a05:541:110::/48 maxlen: 48
2a05:541:111::/48 maxlen: 48
2a05:541:112::/48 maxlen: 48
2a05:541:113::/48 maxlen: 48
2a05:541:114::/48 maxlen: 48
2a05:541:115::/48 maxlen: 48
2a05:541:116::/48 maxlen: 48
2a05:541:117::/48 maxlen: 48
2a05:541:118::/48 maxlen: 48
2a05:541:119::/48 maxlen: 48
2a05:541:121::/48 maxlen: 48
2a05:541:122::/48 maxlen: 48
2a05:541:123::/48 maxlen: 48
2a05:541:124::/48 maxlen: 48
2a05:541:125::/48 maxlen: 48
2a05:541:126::/48 maxlen: 48
2a05:541:127::/48 maxlen: 48
2a05:541:129::/48 maxlen: 48
2a05:541:131::/48 maxlen: 48
2a05:541:132::/48 maxlen: 48
2a05:541:133::/48 maxlen: 48
2a05:541:134::/48 maxlen: 48
2a05:541:135::/48 maxlen: 48
2a05:541:136::/48 maxlen: 48
2a05:541:137::/48 maxlen: 48
2a05:541:138::/48 maxlen: 48
2a05:541:139::/48 maxlen: 48
2a05:541:140::/48 maxlen: 48
2a05:541:141::/48 maxlen: 48
2a05:544::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0a:9e:66:4a:4f:15:6d:d7:6f:b1:71:04:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c348f7d36f064ecd17c6945eac8ccf0ff30d5de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:49:d8:a5:26:45:1e:d0:c6:fd:a1:a0:18:
80:68:c3:ea:d5:23:12:96:8f:8d:98:bf:c2:43:03:
44:c9:9d:e5:fb:d6:4f:c9:e9:ab:65:f4:58:da:ba:
a9:06:ab:45:25:58:30:31:05:69:d8:c3:a1:99:40:
e2:62:a9:05:93:6e:fb:11:d6:42:3a:d4:a1:6c:35:
d8:3d:71:ee:34:08:f7:30:08:6c:ea:fc:32:c6:00:
9f:5a:ac:89:fe:66:e8:53:cd:70:fa:28:18:79:d1:
59:77:97:ec:35:bd:b0:00:31:6a:31:8c:25:a6:ed:
9f:c5:f9:ba:41:ce:12:77:b8:68:c7:10:14:68:ec:
c1:5d:18:03:84:f9:89:63:8a:bd:0b:2e:9e:c4:04:
bb:4c:5e:51:1a:37:fc:87:c7:6a:ef:ac:a7:bc:d1:
99:0b:9e:db:7a:e2:73:22:09:bc:2d:b2:0a:ed:7c:
58:66:82:55:e7:53:19:3e:93:1d:90:1e:8e:12:9c:
64:00:75:f6:82:cb:d6:6f:54:0d:c8:04:b6:df:06:
b7:49:9d:93:43:54:a7:c6:ac:75:54:9a:67:a2:74:
ad:39:0d:6a:03:70:be:f1:40:f1:88:61:c8:98:e0:
0d:b2:f3:15:b6:ef:72:5f:91:0b:62:d1:ca:66:f1:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:F7:D3:6F:06:4E:CD:17:C6:94:5E:AC:8C:CF:0F:F3:0D:5D:E5
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/w0j3028GTs0XxpRerIzPD_MNXeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
IPv6:
2a05:541:102::-2a05:541:109:ffff:ffff:ffff:ffff:ffff
2a05:541:110::-2a05:541:119:ffff:ffff:ffff:ffff:ffff
2a05:541:121::-2a05:541:127:ffff:ffff:ffff:ffff:ffff
2a05:541:129::/48
2a05:541:131::-2a05:541:139:ffff:ffff:ffff:ffff:ffff
2a05:541:140::/47
2a05:544::/32
Signature Algorithm: sha256WithRSAEncryption
17:6e:ae:0e:ec:46:9e:00:79:9e:e6:63:19:b0:a5:9d:58:3b:
31:7c:59:b8:16:ae:52:08:76:28:1f:51:cb:aa:b0:84:ed:52:
90:09:9b:71:89:96:5c:76:61:02:84:ad:b8:0a:27:d2:d1:c7:
b4:28:65:31:07:4d:06:c6:3d:ac:b6:74:52:b9:8f:9f:78:e8:
3e:92:bf:e9:c0:55:59:f3:f6:41:81:df:88:0c:9f:c2:e5:99:
31:4f:b6:41:8b:20:fc:cd:14:bb:6c:49:5b:8f:47:59:25:0d:
54:a8:f9:6f:e6:c7:10:d3:72:7f:57:14:c0:2f:24:a1:4c:e4:
9e:a5:d6:4b:a7:43:22:7b:e5:60:7b:b0:ed:f0:27:fe:78:5e:
a7:d5:bf:07:e8:c2:68:7e:6b:89:86:7e:dc:af:ff:62:9b:53:
06:f9:f7:f4:55:cc:48:e5:06:06:11:d2:c2:df:77:b8:01:94:
3b:0e:48:83:78:d2:1c:32:e6:c1:17:c2:0b:4f:6c:51:70:8a:
cd:ec:84:5d:a7:33:6d:b5:6f:57:4e:19:63:85:87:56:a3:ec:
1c:c6:a1:ba:8d:1a:7a:f4:f2:4b:94:ad:7b:fc:55:9b:a0:01:
20:d0:ae:41:0b:a3:fd:d7:08:f5:25:3a:78:ee:12:74:52:ef:
76:c3:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:45 2025 by rpki-client