Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/uA_cK5_9bcy0ksBej8JGN0Bdh0I.roa
File: uA_cK5_9bcy0ksBej8JGN0Bdh0I.roa (raw, json)
Hash identifier: Cc9q5DXl2JIh9WrYyuQ9UP5TYwtuMvcgoa8vktoefiw=
Subject key identifier: B8:0F:DC:2B:9F:FD:6D:CC:B4:92:C0:5E:8F:C2:46:37:40:5D:87:42
Certificate issuer: /CN=c5a001a86d14ad717bf924719690d917c5a7f952
Certificate serial: 26A73F
Authority key identifier: C5:A0:01:A8:6D:14:AD:71:7B:F9:24:71:96:90:D9:17:C5:A7:F9:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaABqG0UrXF7-SRxlpDZF8Wn-VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/uA_cK5_9bcy0ksBej8JGN0Bdh0I.roa
Signing time: Sat 01 Jan 2022 00:51:39 +0000
ROA not before: Sat 01 Jan 2022 00:51:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 176.32.54.0/24 maxlen: 24
185.48.84.0/24 maxlen: 24
185.48.85.0/24 maxlen: 24
185.48.87.0/24 maxlen: 24
185.48.86.0/24 maxlen: 24
176.32.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2533183 (0x26a73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a001a86d14ad717bf924719690d917c5a7f952
Validity
Not Before: Jan 1 00:51:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b80fdc2b9ffd6dccb492c05e8fc24637405d8742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:ff:92:29:70:7d:e7:52:67:e6:f8:2d:87:
9a:c5:89:1f:1a:8f:cb:c2:43:69:c4:57:90:ee:66:
e5:61:09:cb:dd:63:e4:e7:47:57:cd:c5:71:a9:b2:
a1:39:78:0e:7f:93:c6:f0:f3:27:57:19:54:0b:43:
fa:a2:fc:85:8e:a4:a6:d1:48:f9:0d:26:fc:82:c3:
27:82:5a:37:d3:42:be:ad:e8:16:7e:e1:a0:b6:a0:
d0:5f:c1:89:e6:59:8e:02:73:fd:bd:60:0e:e7:59:
d9:ed:b3:31:c9:b3:5a:75:c8:3e:1e:8e:c2:4f:2f:
43:4d:3c:30:2b:65:22:6b:51:33:d6:48:33:3b:06:
7b:fe:8f:66:ce:25:dd:87:5f:15:a7:e3:66:52:66:
7a:3e:c0:cb:fc:81:b9:37:f5:75:1b:b4:ba:0f:d0:
96:8f:3b:cd:1f:09:93:b8:25:e0:12:22:9f:c5:68:
f4:b1:c1:21:d1:00:94:a3:ae:ae:97:82:12:81:76:
0f:96:ea:c4:00:cf:b1:eb:41:c3:9f:5d:03:b2:23:
d7:87:6e:74:af:49:b4:f3:68:a4:05:81:06:9b:e2:
41:ec:36:01:08:31:1e:cc:f8:22:b7:be:64:1b:b1:
55:c4:67:1a:00:96:8d:46:6d:8c:be:5d:c4:8d:49:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:DC:2B:9F:FD:6D:CC:B4:92:C0:5E:8F:C2:46:37:40:5D:87:42
X509v3 Authority Key Identifier:
keyid:C5:A0:01:A8:6D:14:AD:71:7B:F9:24:71:96:90:D9:17:C5:A7:F9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaABqG0UrXF7-SRxlpDZF8Wn-VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/uA_cK5_9bcy0ksBej8JGN0Bdh0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/xaABqG0UrXF7-SRxlpDZF8Wn-VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.50.0/24
176.32.54.0/24
185.48.84.0/22
Signature Algorithm: sha256WithRSAEncryption
63:da:1d:ad:44:58:83:0c:f0:c7:68:15:1f:32:c9:5e:eb:9b:
72:5d:35:3d:46:74:93:bb:7d:51:8d:83:4b:c4:7a:d0:8b:f3:
b2:9f:12:53:92:c6:5b:69:90:b5:84:56:1c:a0:96:7c:45:1b:
5b:87:64:d0:97:3f:d9:fc:30:e3:54:f1:60:92:69:f9:d6:e9:
58:43:d3:9c:23:1e:9f:22:6d:9a:f0:c1:f2:79:67:bc:8e:c9:
b9:82:3e:aa:f0:f2:6c:12:e2:37:e4:06:aa:98:46:cd:b4:07:
eb:e5:7e:42:9d:57:0a:6e:bc:54:34:f8:6d:06:3f:1d:98:2c:
f4:da:63:19:60:48:9b:f1:00:4a:cd:46:0d:dd:d6:9a:cd:7b:
df:97:53:ce:b8:99:dd:3c:fe:cd:e6:ca:35:5a:1a:14:ef:82:
a0:4e:07:81:82:b2:15:5e:07:f7:d1:d3:96:67:70:1e:af:52:
73:2d:0d:b1:67:82:fc:e5:8f:83:0c:f5:71:54:bd:63:1b:d6:
80:40:00:cf:30:6f:d7:6e:19:d7:3b:64:21:91:04:a4:54:05:
ac:32:13:6d:d1:14:ef:b6:dc:3b:7c:9b:df:f3:58:a3:7d:23:
21:e6:33:ca:9a:47:a0:14:36:d0:91:91:52:13:cd:3d:73:3a:
2b:6b:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:56 2025 by rpki-client