Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/1-5YXoQ_CE06_plRC7KkAFH3feTY.roa
File: 1-5YXoQ_CE06_plRC7KkAFH3feTY.roa (raw, json)
Hash identifier: 4mAgyAgYH1ibluv+mAy/03jDuU1hFKQMez2CGr4qkz4=
Subject key identifier: FB:96:17:A1:0F:C2:13:4E:BF:A6:54:42:EC:A9:00:14:7D:DF:79:36
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 019427B64FB6E22BEBFB498567B30D451D4D
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/1-5YXoQ_CE06_plRC7KkAFH3feTY.roa
Signing time: Thu 02 Jan 2025 15:50:46 +0000
ROA not before: Thu 02 Jan 2025 15:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43160
IP address blocks: 5.158.80.0/24 maxlen: 24
5.158.81.0/24 maxlen: 24
5.158.83.0/24 maxlen: 24
37.235.32.0/21 maxlen: 21
37.235.33.0/24 maxlen: 24
37.235.37.0/24 maxlen: 24
149.62.176.0/21 maxlen: 21
149.62.181.0/24 maxlen: 24
2a01:b5c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:4f:b6:e2:2b:eb:fb:49:85:67:b3:0d:45:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Jan 2 15:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb9617a10fc2134ebfa65442eca900147ddf7936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:36:3e:7d:70:5d:1f:b3:ff:06:e6:53:73:
70:5a:90:01:38:7d:3c:00:6e:45:58:07:fe:3f:f9:
22:e7:fe:29:e8:65:5e:5f:d7:b4:b6:11:d9:5c:2b:
7b:b7:75:b2:b4:9c:fb:22:55:4c:51:ff:c0:c1:93:
fe:04:da:de:c5:29:e9:8c:fd:78:94:82:b8:37:2b:
41:c6:0b:fd:89:cd:ae:e6:df:92:61:a7:f6:65:97:
c3:ca:b5:fc:dd:19:d4:5e:a1:d7:7e:35:f9:a0:51:
a5:a0:d3:12:b3:bd:54:38:f8:e1:46:96:b1:0e:49:
96:2c:ec:88:54:ab:79:25:6b:b7:46:77:07:0e:5d:
77:35:34:a5:04:57:5b:94:79:8e:f8:f0:d6:5c:1d:
8a:20:32:3b:11:0e:a2:4d:0c:96:bf:db:07:4b:c1:
0b:31:28:53:a5:31:42:38:a2:ce:26:97:01:df:f6:
e5:0d:37:e8:4e:63:f9:8a:9e:06:e7:c8:af:5d:59:
2d:32:a4:29:c4:e0:70:82:3f:39:e3:ff:3f:0e:36:
65:3f:b0:7b:8b:bd:2c:c6:ec:6b:8f:2e:d8:37:e2:
de:6e:c0:d4:f8:a9:99:18:3c:1f:2a:cc:97:3f:48:
97:ea:7b:76:4b:f0:c6:ac:a1:47:52:86:ea:e7:b2:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:96:17:A1:0F:C2:13:4E:BF:A6:54:42:EC:A9:00:14:7D:DF:79:36
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/1-5YXoQ_CE06_plRC7KkAFH3feTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.80.0/23
5.158.83.0/24
37.235.32.0/21
149.62.176.0/21
IPv6:
2a01:b5c0::/32
Signature Algorithm: sha256WithRSAEncryption
35:c1:09:c6:e2:df:18:ab:34:9b:ab:a8:45:a7:f9:f2:8c:67:
d2:f2:1c:86:2c:4b:58:71:7c:b6:9b:3b:f3:5e:c5:b4:1d:5f:
af:44:e4:c8:7b:16:8a:ca:39:d2:97:ff:25:42:26:77:23:f1:
5c:da:13:c8:92:7d:ba:4d:50:57:8a:a3:bf:94:12:44:6b:c5:
c6:8a:f2:7e:73:03:46:aa:b8:be:46:b9:6e:67:3f:b8:d6:2d:
e2:74:5b:85:e5:39:1b:f0:8e:34:da:fb:e1:63:a8:2d:a6:f4:
4a:83:48:37:ae:1b:61:e1:00:25:52:d4:df:ca:98:46:c1:4c:
b3:68:91:3b:21:ee:b7:71:9e:d5:56:d4:f5:46:7e:88:50:82:
ec:9f:1a:6f:98:b0:5a:9e:6f:24:c8:b8:75:38:cc:c0:76:23:
ad:9e:98:8f:f8:59:05:69:af:96:83:ee:77:fa:24:d0:38:13:
e8:a8:7f:f3:c6:3a:ac:77:69:dc:b8:22:de:3f:d8:c7:d9:2b:
0c:ce:a6:b0:bc:5c:0d:99:33:8d:2e:19:af:5f:fb:06:79:63:
b5:28:01:fd:61:cf:b0:1c:36:cd:71:8b:5c:1a:bf:2e:96:91:
47:29:3a:90:91:12:39:79:a2:55:6f:17:5d:e1:ef:05:0e:00:
70:b7:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:08 2025 by rpki-client