Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/7KA5CgNkdr1ih8Qy3AvCuBfEzN0.roa
File: 7KA5CgNkdr1ih8Qy3AvCuBfEzN0.roa (raw, json)
Hash identifier: mR7T3WuKSbdAtTzSYp0E3OKslQutZqhI3l0DzsTdKEc=
Subject key identifier: EC:A0:39:0A:03:64:76:BD:62:87:C4:32:DC:0B:C2:B8:17:C4:CC:DD
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01941F8C88764170E5673190FB976257CB95
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/7KA5CgNkdr1ih8Qy3AvCuBfEzN0.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 5.181.13.0/24 maxlen: 24
5.181.14.0/24 maxlen: 24
5.181.15.0/24 maxlen: 24
45.150.48.0/24 maxlen: 24
45.150.49.0/24 maxlen: 24
45.150.50.0/24 maxlen: 24
45.150.51.0/24 maxlen: 24
45.159.180.0/24 maxlen: 24
45.159.182.0/24 maxlen: 24
45.159.183.0/24 maxlen: 24
94.199.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:88:76:41:70:e5:67:31:90:fb:97:62:57:cb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eca0390a036476bd6287c432dc0bc2b817c4ccdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:0f:3b:6e:14:ff:d0:be:70:28:75:3e:9c:
0b:be:cb:fe:53:b1:2e:86:06:c1:65:b4:45:e5:04:
62:05:02:23:fa:6d:15:d0:9a:5e:88:85:1d:e3:6f:
66:8e:ec:2e:ac:c3:29:ab:29:b0:86:f2:36:36:e7:
fe:46:6e:80:5f:63:f6:26:cf:4a:ee:3d:04:6a:a9:
33:49:97:bd:30:ee:d1:e9:19:0c:03:7f:38:0f:eb:
44:d2:63:69:f3:3f:16:e6:e0:dc:80:18:31:e0:f6:
de:ec:05:82:84:b7:e9:d0:53:49:dc:5c:7a:85:09:
5f:97:c9:c9:57:da:65:97:2e:65:57:88:ac:0c:d1:
45:c2:db:67:04:14:a5:7b:97:f5:44:a6:e9:1e:71:
d2:b8:2a:cc:5a:1a:b5:8f:12:ce:bf:86:d7:b7:6c:
3c:d9:0a:9a:3f:97:36:9b:7c:9e:9f:b5:5f:19:b5:
d6:b4:3d:ef:26:c5:53:c8:84:eb:28:f6:e4:93:b7:
23:a4:49:0f:2f:8c:0c:5d:ad:e4:0e:3f:d5:23:ba:
9e:b9:93:71:e3:38:ae:3b:c1:20:0b:e7:5c:ce:ef:
16:53:22:f4:2b:ab:b7:90:1e:fa:85:69:18:21:a1:
25:4d:6e:d0:ae:65:23:0b:75:50:e3:15:4e:03:9e:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A0:39:0A:03:64:76:BD:62:87:C4:32:DC:0B:C2:B8:17:C4:CC:DD
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/7KA5CgNkdr1ih8Qy3AvCuBfEzN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.13.0-5.181.15.255
45.150.48.0/22
45.159.180.0/24
45.159.182.0/23
94.199.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e1:68:11:77:f8:be:1c:20:1a:05:d1:a3:30:99:60:66:87:
0b:1f:81:8a:39:42:ac:49:01:2c:a3:6f:9a:78:da:3e:83:37:
95:19:96:8a:01:aa:9f:fc:c8:f0:24:e4:fd:c3:4b:c9:a3:7f:
d9:68:d4:6d:51:94:d2:8e:1f:3c:f4:42:de:2f:41:11:11:0c:
ea:49:6e:ee:9d:d1:6a:2c:03:35:7f:6d:83:fc:1e:2d:36:f6:
a0:27:fc:bd:76:d3:b7:e3:e7:16:1e:55:41:d5:ae:bd:cf:85:
09:85:3c:31:70:58:94:b2:4f:66:20:db:19:df:26:ee:03:93:
49:6b:d0:59:d7:97:78:02:07:b9:3e:91:0d:23:5b:a9:71:5e:
18:da:bb:da:03:c1:58:67:e9:85:b2:72:a9:39:03:6d:a0:97:
0c:9e:ca:1f:5f:5b:fb:e3:44:34:81:83:92:7d:a5:b9:44:15:
80:a8:04:81:a7:28:54:37:a7:1c:0f:a5:db:4a:84:39:9d:4f:
3a:55:81:80:09:3b:78:7f:ab:72:c1:49:fc:60:8c:9b:ca:38:
61:f4:53:d4:16:bb:96:82:1d:15:5a:5d:ed:f7:c4:c7:1e:6b:
dc:79:3e:51:65:81:6c:db:9d:b7:a4:e5:fd:ad:da:51:7a:18:
cd:25:5d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:12:22 2025 by rpki-client