Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/Ogq2Lp1P7Q1AeCwL2AQLdK9KBzM.roa
File: Ogq2Lp1P7Q1AeCwL2AQLdK9KBzM.roa (raw, json)
Hash identifier: wCH8HPVc1f++ByfpIUeIUcWNys3iCfeb5u+E+Q/Dfgk=
Subject key identifier: 3A:0A:B6:2E:9D:4F:ED:0D:40:78:2C:0B:D8:04:0B:74:AF:4A:07:33
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019423691526187C89CC7CF9C4A34CD0B8D3
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/Ogq2Lp1P7Q1AeCwL2AQLdK9KBzM.roa
Signing time: Wed 01 Jan 2025 19:47:56 +0000
ROA not before: Wed 01 Jan 2025 19:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41564
IP address blocks: 5.153.236.0/24 maxlen: 24
5.153.239.0/24 maxlen: 24
5.157.8.0/24 maxlen: 24
5.157.13.0/24 maxlen: 24
5.157.14.0/24 maxlen: 24
5.157.17.0/24 maxlen: 24
5.157.22.0/24 maxlen: 24
5.157.27.0/24 maxlen: 24
5.157.41.0/24 maxlen: 24
5.157.42.0/24 maxlen: 24
5.157.45.0/24 maxlen: 24
5.157.56.0/24 maxlen: 24
5.157.58.0/24 maxlen: 24
5.157.59.0/24 maxlen: 24
5.157.60.0/24 maxlen: 24
5.157.61.0/24 maxlen: 24
5.157.62.0/24 maxlen: 24
5.157.63.0/24 maxlen: 24
23.92.127.0/24 maxlen: 24
104.160.2.0/24 maxlen: 24
104.160.6.0/24 maxlen: 24
151.237.186.0/24 maxlen: 24
2a02:5740::/48 maxlen: 48
2a02:5740:1::/48 maxlen: 48
2a02:5740:11::/48 maxlen: 48
2a02:5740:18::/48 maxlen: 48
2a02:5740:21::/48 maxlen: 48
2a02:5740:22::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:15:26:18:7c:89:cc:7c:f9:c4:a3:4c:d0:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jan 1 19:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a0ab62e9d4fed0d40782c0bd8040b74af4a0733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:a1:a9:84:06:a7:2e:40:f1:73:45:21:5d:
12:e7:62:0a:a8:86:e9:ea:16:f5:9a:fb:80:80:2e:
83:74:b7:5f:32:e6:fe:68:92:5f:2c:b0:77:8a:96:
57:58:f3:7e:cd:18:20:ce:28:76:f9:8b:77:ea:f8:
01:0d:fd:ee:18:a4:15:bd:fe:ee:f6:52:7a:3f:53:
61:ec:83:01:22:9f:8c:d1:25:5b:99:c9:fa:5e:8b:
61:b3:9a:1b:df:e1:85:65:c2:e5:42:61:ea:09:fd:
c6:cb:80:a6:27:17:f4:8b:b7:1c:59:89:7d:df:a1:
7d:6f:f4:73:ed:cc:9f:4e:25:be:4b:20:fa:f0:62:
51:e6:f8:9f:d3:4c:8e:53:df:d4:80:21:ab:ce:5d:
6b:59:e9:0e:db:8e:0f:85:cb:e7:16:b5:a2:e0:e2:
1f:bc:0f:2b:15:18:45:fd:6d:81:87:1b:cf:f2:3e:
af:54:6d:97:f6:8d:6d:14:96:73:14:68:66:34:cc:
f1:c0:43:39:57:a4:b3:01:9f:9c:3a:ff:bc:0e:05:
a1:43:1b:70:19:cc:a0:31:ad:2a:32:cf:0b:45:da:
99:00:ba:e9:b2:95:df:82:af:4d:0f:d0:0d:c1:39:
33:29:64:6a:c4:3a:21:71:81:49:61:36:81:f9:f0:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:B6:2E:9D:4F:ED:0D:40:78:2C:0B:D8:04:0B:74:AF:4A:07:33
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/Ogq2Lp1P7Q1AeCwL2AQLdK9KBzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.236.0/24
5.153.239.0/24
5.157.8.0/24
5.157.13.0-5.157.14.255
5.157.17.0/24
5.157.22.0/24
5.157.27.0/24
5.157.41.0-5.157.42.255
5.157.45.0/24
5.157.56.0/24
5.157.58.0-5.157.63.255
23.92.127.0/24
104.160.2.0/24
104.160.6.0/24
151.237.186.0/24
IPv6:
2a02:5740::/47
2a02:5740:11::/48
2a02:5740:18::/48
2a02:5740:21::-2a02:5740:22:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1f:6b:d6:8a:9c:d7:bc:18:01:67:5f:70:9a:f0:9e:35:56:ba:
5f:ac:79:d8:71:1a:89:f3:b3:3a:7e:d4:f6:26:e0:6a:a4:4a:
32:45:20:c2:8d:7d:e6:03:c3:a7:33:fe:ce:26:26:51:dd:42:
8c:29:71:46:4f:a1:2d:0a:d9:4c:14:97:17:a6:60:a9:95:62:
a0:b8:e3:ea:be:ab:d4:0b:e7:b9:74:61:6e:0a:cf:ef:91:99:
0d:bc:51:a1:da:b7:ab:84:a2:e1:ee:5c:81:3a:43:e8:9f:25:
e2:12:e2:8b:cb:cf:67:c8:31:78:e0:f0:dd:1b:9d:3e:71:4c:
42:d2:75:47:29:05:70:59:6f:29:ed:22:79:83:f0:2c:4c:ca:
33:45:c9:56:e8:4d:17:98:a6:b0:57:87:8c:dc:4e:82:fe:b0:
9a:1d:1e:94:b8:8e:20:2c:10:b0:eb:ee:ae:d1:3f:2c:00:c6:
fc:6c:c3:5c:31:db:4e:30:4a:42:92:ca:97:98:27:f3:c9:b3:
3c:de:1b:ea:f4:ea:07:0c:e6:7c:45:1a:f5:4d:af:c5:ee:45:
7a:32:78:fc:b0:09:73:ed:c2:b9:72:37:91:35:3e:93:8c:9d:
49:76:46:2d:1d:cc:cc:96:25:30:6a:b2:3b:3c:f7:0d:4e:44:
83:d8:f3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:16 2025 by rpki-client