Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/LK4TWd3KSu93MW0gFtmcBWt8flw.roa
File: LK4TWd3KSu93MW0gFtmcBWt8flw.roa (raw, json)
Hash identifier: nqDel+YdRE6L57XNCBc1XqYVOxjyDCGN0EdIBVWAyjg=
Subject key identifier: 2C:AE:13:59:DD:CA:4A:EF:77:31:6D:20:16:D9:9C:05:6B:7C:7E:5C
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 0194509BBD99920D838797B8311F05EC59CF
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/LK4TWd3KSu93MW0gFtmcBWt8flw.roa
Signing time: Fri 10 Jan 2025 14:26:11 +0000
ROA not before: Fri 10 Jan 2025 14:26:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43160
IP address blocks: 5.158.80.0/24 maxlen: 24
5.158.81.0/24 maxlen: 24
5.158.83.0/24 maxlen: 24
37.235.32.0/21 maxlen: 21
37.235.32.0/24 maxlen: 24
37.235.33.0/24 maxlen: 24
37.235.34.0/24 maxlen: 24
37.235.35.0/24 maxlen: 24
37.235.36.0/24 maxlen: 24
37.235.37.0/24 maxlen: 24
37.235.39.0/24 maxlen: 24
149.62.176.0/21 maxlen: 21
149.62.181.0/24 maxlen: 24
2a01:b5c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:50:9b:bd:99:92:0d:83:87:97:b8:31:1f:05:ec:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Jan 10 14:26:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cae1359ddca4aef77316d2016d99c056b7c7e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:7d:50:77:6c:fe:d9:6e:f5:5b:10:db:e6:
64:7a:3b:03:1f:10:23:c8:e9:dd:96:ed:5f:fc:30:
b9:cc:38:f9:a3:1d:d6:31:d3:74:a0:01:81:f9:ec:
0c:4c:aa:17:1a:3e:22:44:aa:51:15:b4:09:fa:11:
23:c3:e1:bb:90:0a:3c:2b:d5:84:d4:6d:2a:11:b1:
e4:6f:96:b5:60:87:5f:72:4e:b4:c0:96:f9:74:b7:
95:a3:f8:9f:4c:89:9c:c6:5e:8b:ab:53:d6:8c:fa:
2b:2b:f0:1f:f8:21:1c:e6:0a:7c:57:b4:0c:bf:ea:
77:bc:5a:26:86:93:d4:8f:d0:3d:6f:f3:d3:17:b4:
57:26:b4:8f:4c:d8:c4:c1:91:d9:72:06:1a:73:e7:
c3:f0:8e:da:a3:35:cf:83:70:96:2a:9f:2c:0b:5d:
45:23:f5:e3:45:76:ff:a8:39:35:b6:9d:aa:f8:cf:
34:6d:9f:86:3a:79:b7:95:12:72:c8:fd:19:12:7d:
66:5f:50:ab:6d:9d:83:ec:b5:03:42:df:c6:23:de:
29:7b:9f:be:7b:cd:25:a3:b8:be:04:be:cf:04:0b:
4a:24:b2:7a:c3:36:1d:a4:f0:ea:b2:bc:7d:c6:25:
b7:60:03:71:92:87:88:38:68:91:4e:c0:23:9a:3a:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AE:13:59:DD:CA:4A:EF:77:31:6D:20:16:D9:9C:05:6B:7C:7E:5C
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/LK4TWd3KSu93MW0gFtmcBWt8flw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.80.0/23
5.158.83.0/24
37.235.32.0/21
149.62.176.0/21
IPv6:
2a01:b5c0::/32
Signature Algorithm: sha256WithRSAEncryption
08:1a:47:0a:3c:ee:ad:1d:9c:74:37:c0:5f:4c:36:01:0f:9c:
cd:73:d4:08:f4:0b:a6:05:4c:d7:02:c7:ad:21:32:47:c6:5b:
cf:b1:1f:f4:37:86:d9:f8:a8:ba:df:bf:8f:15:cf:f2:ee:fc:
64:f6:1a:a4:df:8b:c1:ba:8e:f0:f4:83:1b:c5:36:fe:20:78:
23:42:a8:db:c1:a1:d0:c4:d9:6b:93:a1:0e:fe:62:fa:9c:5c:
3a:7a:5c:61:7c:9f:de:2d:e2:ef:3b:db:a9:81:fe:4d:6f:5f:
28:0b:e2:32:48:78:d4:aa:1d:f1:a8:7b:d5:85:e7:e7:13:4d:
8a:8f:1f:a3:46:4b:50:64:03:c7:54:e5:89:9e:d3:ff:1e:f6:
53:de:4e:d4:cf:17:57:3f:f2:84:55:da:04:a7:9d:ca:41:1b:
eb:3a:6d:aa:c3:40:60:2a:06:88:64:25:05:01:7a:4b:5a:a3:
55:07:07:b7:59:c7:10:59:35:ad:d3:d5:36:14:f3:ce:c5:6f:
b6:b0:13:63:d4:d6:ac:83:c3:ac:2a:b1:47:94:e8:38:e6:44:
6f:33:d6:34:97:1f:4b:d8:81:40:58:58:82:e7:c3:b9:2d:1f:
9b:b3:77:92:34:94:c5:e5:b4:aa:45:71:56:87:d1:10:10:15:
6c:f9:75:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:02 2025 by rpki-client