Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa
File: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (raw, json)
Hash identifier: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=
Subject key identifier: 53:AC:B1:62:C4:40:38:BC:75:AD:53:94:31:F9:75:6C:78:D0:4E:A1
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 019424B3D89559A80F7C8354E47457D2C357
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8304
IP address blocks: 5.144.136.0/21 maxlen: 24
46.227.80.0/21 maxlen: 24
81.91.64.0/20 maxlen: 24
91.188.64.0/19 maxlen: 24
128.204.208.0/21 maxlen: 24
185.91.36.0/22 maxlen: 24
195.200.96.0/19 maxlen: 24
213.182.32.0/19 maxlen: 24
213.218.128.0/19 maxlen: 24
2a00:e00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d8:95:59:a8:0f:7c:83:54:e4:74:57:d2:c3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53acb162c44038bc75ad539431f9756c78d04ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:fb:1e:04:80:7c:20:3c:3f:0a:95:a3:f1:
2d:28:72:b7:d1:22:65:00:29:13:6e:74:06:a6:5b:
7b:8c:c1:ef:62:44:42:6a:d8:e5:c2:1f:54:c1:5a:
02:e4:f1:c0:a5:16:53:2b:3f:bb:c1:b2:81:67:6d:
43:ce:bd:60:e7:80:4a:bd:0c:6f:8c:60:6f:f3:dc:
e8:ec:f5:c8:7b:2b:c6:8f:ff:91:f5:c1:b0:ec:a7:
7a:9a:6e:96:42:bd:74:c0:aa:10:4a:f9:46:7d:e4:
d7:93:46:93:2f:dd:89:a3:f0:aa:d7:b8:84:1c:a3:
30:d7:95:22:96:79:a2:b5:53:db:c8:63:cb:7c:d7:
73:05:d8:a3:8a:63:61:e7:f2:5e:32:ad:b6:89:f9:
48:37:96:04:ff:d1:e2:b4:f5:ab:64:86:7a:b1:3f:
44:08:63:82:e5:e7:4c:5f:de:55:31:98:7f:34:ca:
f7:46:0c:77:13:06:17:f0:d9:0d:df:8f:23:aa:20:
3a:a4:b9:9f:3e:1c:31:a2:4a:5a:89:2a:52:de:9c:
f0:c1:df:0d:80:51:a1:75:09:97:b8:2e:ce:81:cc:
2e:a7:8d:9c:0b:ab:6d:9a:a9:f1:52:77:71:4c:33:
e8:34:86:56:e0:b9:44:ef:b9:bd:54:3e:08:35:ab:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AC:B1:62:C4:40:38:BC:75:AD:53:94:31:F9:75:6C:78:D0:4E:A1
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.136.0/21
46.227.80.0/21
81.91.64.0/20
91.188.64.0/19
128.204.208.0/21
185.91.36.0/22
195.200.96.0/19
213.182.32.0/19
213.218.128.0/19
IPv6:
2a00:e00::/32
Signature Algorithm: sha256WithRSAEncryption
06:d9:13:ea:3c:40:a8:c8:c9:28:9e:a7:2c:54:a9:60:71:6a:
1f:3e:10:ac:a2:da:6e:a1:c4:57:e3:dc:bc:38:61:f1:9d:10:
19:5c:12:12:6a:75:35:d1:be:0f:69:3c:02:03:29:23:81:f1:
7d:a2:92:78:79:3f:01:12:6c:89:ec:56:c6:ad:a2:d0:33:b5:
cb:a7:b8:b8:65:ac:86:8b:3b:87:56:57:ce:3b:2f:37:58:35:
74:23:64:df:2e:e5:e0:cf:dc:c6:4d:58:fd:6a:0b:f3:58:d6:
26:f8:10:72:c8:c3:c0:6a:9d:93:96:8e:ed:2d:04:ba:b4:28:
57:29:69:f7:90:2d:38:f5:3c:2c:06:ca:eb:5b:85:c5:28:60:
a3:ba:5c:6b:13:3d:53:b2:84:08:4b:f0:63:09:a7:89:23:ad:
f8:fe:b0:d5:bc:80:0d:f9:87:06:81:84:eb:4d:a6:71:a3:8c:
6f:4d:76:22:13:a3:df:20:fa:e1:0e:45:16:1f:e2:cd:a3:fd:
d4:63:50:ca:ff:15:8b:46:e3:d6:1f:8b:66:52:87:35:df:6f:
fa:a0:5b:f4:88:2b:11:7a:3f:b5:d4:74:d5:78:42:c4:9b:0c:
cd:a9:1e:ca:ac:25:3a:f0:b6:4e:33:05:45:96:8f:0d:94:58:
ad:7c:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:00 2025 by rpki-client