Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/7_Cb5oVa7vUEGtaqDcNB-stVk-M.roa
File: 7_Cb5oVa7vUEGtaqDcNB-stVk-M.roa (raw, json)
Hash identifier: 44B34ND3aqYzsfNvbkKUjKYKbcuFBL7buWyI2Sq1wfE=
Subject key identifier: EF:F0:9B:E6:85:5A:EE:F5:04:1A:D6:AA:0D:C3:41:FA:CB:55:93:E3
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 01896CB91856FB73643383AD1A8FFC7CB499
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/7_Cb5oVa7vUEGtaqDcNB-stVk-M.roa
Signing time: Wed 19 Jul 2023 05:56:56 +0000
ROA not before: Wed 19 Jul 2023 05:56:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 5.158.85.0/24 maxlen: 24
185.178.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6c:b9:18:56:fb:73:64:33:83:ad:1a:8f:fc:7c:b4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Jul 19 05:56:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eff09be6855aeef5041ad6aa0dc341facb5593e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:57:8c:c4:e0:0c:40:46:31:40:91:27:f7:
8a:10:38:26:8c:8f:81:09:86:4d:f7:4c:1b:16:de:
c6:a6:47:bd:cc:b0:b5:aa:f0:e0:6d:66:37:9f:3d:
0e:db:4d:a9:fc:3e:d2:d6:8c:5c:d4:98:9d:da:51:
b1:aa:5b:f8:6d:a2:64:4f:cd:b8:ee:22:1e:e7:4f:
34:b2:11:92:93:df:ba:f1:8f:b9:8b:03:a4:ab:39:
12:62:30:45:c5:67:8e:0e:12:60:97:2b:ea:c7:c7:
77:2a:93:c5:b0:85:07:54:f7:1e:59:96:c9:a6:de:
84:61:d2:45:0b:3d:b8:d6:ba:64:e9:40:67:2b:84:
eb:e7:a2:20:95:0f:20:e2:21:a2:84:48:0c:e0:ef:
37:f5:e7:29:b2:8b:ee:96:73:fa:49:b7:96:e5:0d:
f3:2a:40:c4:a7:3b:00:3a:32:8f:2b:b8:ca:6a:53:
a2:ec:90:ff:81:2a:62:3b:ee:17:d7:40:a0:53:b9:
61:a8:5b:12:a6:44:dc:f0:d6:7e:71:7c:1f:ff:d3:
ea:41:59:c9:d9:a6:75:3b:e0:1e:03:c1:e1:65:2c:
b3:73:ce:a6:38:56:74:e4:fb:7d:86:3d:08:e2:94:
2f:ed:bc:37:2f:29:c8:91:34:24:fa:bb:b2:56:af:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F0:9B:E6:85:5A:EE:F5:04:1A:D6:AA:0D:C3:41:FA:CB:55:93:E3
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/7_Cb5oVa7vUEGtaqDcNB-stVk-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.85.0/24
185.178.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:fb:04:d5:94:2a:69:2f:92:1a:6f:77:b8:1f:25:23:36:3e:
c3:bb:dd:3e:a8:8b:26:9d:71:60:eb:bd:0a:50:d4:67:56:7c:
6c:43:22:f0:73:4f:bc:1f:4c:d5:73:88:3c:7e:7d:59:e9:ff:
77:45:ed:1f:a9:e4:7b:5b:39:88:28:60:fc:16:74:85:68:af:
9b:1a:6d:c0:2a:0c:69:aa:c9:0d:3e:bb:9e:b4:bc:38:47:f4:
09:9e:50:1f:ea:4f:29:6c:06:7f:0b:bd:bf:e3:32:22:d6:27:
02:a9:50:10:71:ff:b8:32:ce:17:97:19:16:65:80:72:e8:28:
34:a9:1d:0d:77:00:39:d5:51:ee:f9:59:52:18:95:22:59:9a:
57:56:9e:74:c2:24:13:45:54:fe:36:8b:df:89:e5:60:5f:a8:
f8:f4:35:a3:0c:b4:09:f5:7c:c3:87:3d:02:4e:db:87:f6:8a:
19:99:12:80:33:32:2a:49:3d:85:27:bd:f3:25:f2:d3:80:a4:
60:df:20:a5:e9:f1:c3:4c:62:c1:ca:6b:47:95:62:32:26:12:
9b:9b:f1:ba:35:a7:a4:fd:2e:fd:46:ea:16:81:55:6b:90:df:
b5:ee:f0:15:cf:5b:ff:8e:e5:8a:66:30:00:4f:c0:a2:95:c2:
0e:5f:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:58 2025 by rpki-client