Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/xdj8segZXoYSOVijtSVOE4qht7w.roa
File: xdj8segZXoYSOVijtSVOE4qht7w.roa (raw, json)
Hash identifier: 5eHZe22OVB3I0C6Qc/P2mEKiDtOXLMok0XKzDQuouvU=
Subject key identifier: C5:D8:FC:B1:E8:19:5E:86:12:39:58:A3:B5:25:4E:13:8A:A1:B7:BC
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019423691961F8BAE6A641108A1E94F47E6B
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/xdj8segZXoYSOVijtSVOE4qht7w.roa
Signing time: Wed 01 Jan 2025 19:47:57 +0000
ROA not before: Wed 01 Jan 2025 19:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60485
IP address blocks: 5.157.38.0/24 maxlen: 24
5.157.57.0/24 maxlen: 24
37.72.187.0/24 maxlen: 24
37.203.209.0/24 maxlen: 24
91.108.183.0/24 maxlen: 24
176.61.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:19:61:f8:ba:e6:a6:41:10:8a:1e:94:f4:7e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jan 1 19:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5d8fcb1e8195e86123958a3b5254e138aa1b7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:08:a3:98:cb:8b:d8:ae:fa:23:14:1e:6b:
5e:a1:1a:fb:65:11:af:f2:8e:72:d2:8f:11:ff:24:
5c:6a:1d:60:35:06:32:78:21:73:8b:00:9c:76:ff:
db:41:ba:bc:3f:1c:21:3c:6b:d2:7c:25:3c:f1:4d:
49:24:0e:58:79:7a:87:75:2e:77:ab:f9:64:56:0c:
1e:7e:da:d7:1e:a5:48:f8:db:9d:f6:11:e3:67:1e:
8f:fc:4f:2f:72:ef:19:90:b5:a3:cc:24:24:ee:2d:
8f:5f:35:fd:80:39:1e:3a:0c:e9:30:51:b0:08:a4:
2a:05:0d:49:86:24:dc:47:54:30:74:f0:db:5f:32:
c0:ee:05:a0:8a:bd:f3:33:5a:9c:49:3a:8f:e9:b1:
ba:11:e8:5c:f7:44:e1:5e:76:b5:c0:2b:f5:ec:a7:
e3:08:e7:3e:56:cd:44:11:10:d7:f2:e4:46:a8:c0:
3f:5b:a1:4d:0b:5f:49:43:bf:d6:20:29:6d:f6:b3:
11:51:32:ed:dd:1c:43:ea:42:15:bd:c5:89:11:6d:
7e:d8:cb:a5:5f:4f:4e:fa:a5:10:1e:6f:80:21:58:
85:1f:69:cf:7b:7b:13:be:e7:5c:91:b2:1d:2f:1b:
a4:cd:a3:1d:5b:53:94:7f:9d:ba:2f:2e:34:63:69:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:FC:B1:E8:19:5E:86:12:39:58:A3:B5:25:4E:13:8A:A1:B7:BC
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/xdj8segZXoYSOVijtSVOE4qht7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.38.0/24
5.157.57.0/24
37.72.187.0/24
37.203.209.0/24
91.108.183.0/24
176.61.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ba:78:1c:a5:5c:7b:4c:85:7d:7f:95:7e:d0:21:44:d2:95:
2d:9c:3d:bb:06:54:34:b6:09:84:a3:fb:a5:20:b4:fd:78:c5:
b3:a0:6f:cc:ee:c5:d5:f1:ae:82:28:a8:2f:84:bc:40:9f:66:
e5:e9:71:f0:95:02:25:fc:0b:a3:11:ef:6a:9d:f4:3f:c4:0b:
4d:6b:86:e0:64:29:d5:23:5c:7e:02:00:b7:4e:5a:0c:4c:b7:
63:d1:98:60:29:20:38:56:64:41:73:55:85:ca:5b:35:25:c9:
68:0f:e7:18:2b:6e:3c:17:a8:03:fd:52:0e:59:ca:3b:ab:75:
75:17:2a:73:1a:ca:f7:62:f5:c9:84:ba:b6:a2:d4:f4:cd:d6:
6e:d8:79:13:04:fe:35:68:51:52:68:33:8b:4a:66:21:91:70:
29:1a:ac:ec:19:97:2e:19:fa:54:f6:9f:b0:a9:5a:2e:9a:9f:
89:74:f3:97:d6:83:19:5d:9c:36:ad:21:2b:19:e9:ca:06:1a:
c0:fd:cc:ab:b3:ce:23:b8:c1:b0:ab:f3:22:51:01:10:41:81:
c4:17:3f:02:44:1c:6d:38:2c:2e:b4:7f:bf:92:f1:58:cd:e6:
50:37:f8:41:40:16:c5:df:9d:f3:47:c2:d0:f6:03:72:8b:4b:
30:be:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:57 2025 by rpki-client