Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/iP514Grfm7HoMaMSlriqRZUp57w.roa
File: iP514Grfm7HoMaMSlriqRZUp57w.roa (raw, json)
Hash identifier: uxTzsQkoKG+2gHXofBTy3Sd+QDMMkyYiw3WNGMp0rf8=
Subject key identifier: 88:FE:75:E0:6A:DF:9B:B1:E8:31:A3:12:96:B8:AA:45:95:29:E7:BC
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 01941FFA68260E8733C26D815BE1692B95D4
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/iP514Grfm7HoMaMSlriqRZUp57w.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202709
IP address blocks: 5.61.216.0/21 maxlen: 21
45.82.132.0/22 maxlen: 22
185.58.132.0/22 maxlen: 22
185.119.228.0/22 maxlen: 22
193.25.255.0/24 maxlen: 24
193.26.0.0/24 maxlen: 24
193.26.2.0/24 maxlen: 24
193.26.12.0/24 maxlen: 24
194.48.180.0/22 maxlen: 22
2a02:63e0::/32 maxlen: 32
2a0e:6b80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:68:26:0e:87:33:c2:6d:81:5b:e1:69:2b:95:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88fe75e06adf9bb1e831a31296b8aa459529e7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:42:db:0c:f6:69:89:6f:9e:fd:a7:7d:a2:
2e:56:27:27:b3:70:dc:58:93:03:8c:c3:fa:bd:d3:
87:77:c2:35:2c:35:ad:8c:cb:3c:53:0d:11:26:44:
27:98:d1:27:73:d6:32:63:69:e9:a9:20:f2:ee:b2:
6f:a7:05:a5:fc:0c:93:50:04:70:e7:8b:87:64:ca:
dc:d5:3e:0b:ec:53:c5:9c:6b:80:ef:73:e2:47:d4:
47:1b:ac:49:a2:f7:d4:c8:2e:29:8a:7b:87:d2:45:
be:cd:82:e8:b7:66:59:b3:b4:6c:2a:88:d3:41:6c:
1e:12:95:0d:bc:53:71:48:a9:a1:47:37:19:9e:26:
5c:8f:51:f2:9b:ce:b1:f7:60:7b:cc:9c:47:3a:26:
c6:bc:a8:d8:60:91:fa:45:f2:97:d6:97:bc:9e:db:
48:de:ca:e1:12:34:ef:84:20:3a:12:c5:4c:81:69:
bb:59:9c:19:a8:b8:64:89:f4:ca:e3:52:8f:b5:9d:
05:89:24:e6:5c:ab:9a:a6:ba:12:3d:60:92:fd:e1:
89:26:b4:14:1a:0d:ed:59:48:43:00:3c:52:f1:74:
5b:7e:d7:a8:e0:6d:39:67:c1:ac:22:9d:d2:3c:fa:
a5:55:8a:a7:9e:a2:ba:24:42:f5:70:ba:28:76:02:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:75:E0:6A:DF:9B:B1:E8:31:A3:12:96:B8:AA:45:95:29:E7:BC
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/iP514Grfm7HoMaMSlriqRZUp57w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.216.0/21
45.82.132.0/22
185.58.132.0/22
185.119.228.0/22
193.25.255.0-193.26.0.255
193.26.2.0/24
193.26.12.0/24
194.48.180.0/22
IPv6:
2a02:63e0::/32
2a0e:6b80::/29
Signature Algorithm: sha256WithRSAEncryption
a4:2b:39:f4:f3:08:40:33:fb:a5:45:de:c2:a9:83:47:b6:85:
5b:2c:e6:ae:8c:a1:9c:14:32:28:26:af:5c:92:5b:d1:5e:30:
b0:a6:9a:f8:11:7d:56:98:87:53:39:af:33:b4:57:aa:2d:72:
23:3e:22:34:37:f6:96:70:26:7b:52:05:53:fa:8c:2b:1f:26:
a1:02:50:9d:60:e2:c1:0e:ea:bd:ca:1e:a9:04:b6:93:4e:95:
bd:75:b1:5a:23:9a:b2:76:3b:75:03:56:54:3a:c5:de:a0:c5:
47:8a:17:b8:8d:bb:61:94:51:9c:6b:68:80:f2:6a:38:2c:d6:
41:a9:fb:42:ea:97:8a:de:54:98:d3:eb:a5:cd:03:ff:62:60:
62:10:5d:17:ba:d4:c1:11:3b:ab:c1:d3:2e:b0:ea:8a:ad:6d:
f8:39:87:e3:fd:85:08:db:91:a0:31:22:01:50:89:85:ab:d1:
cf:ca:21:dd:f0:7e:e6:8f:8e:4c:f3:fa:5d:ac:8f:8d:e2:24:
b5:c8:27:e4:6d:6f:f6:39:b5:41:26:af:7c:46:45:9a:19:3e:
a0:93:25:47:d0:e2:32:29:46:17:b8:7e:15:e9:a6:b6:95:b1:
36:8b:b9:44:6e:19:b4:7b:91:f7:6a:8f:fb:ca:90:9a:f2:31:
a2:c6:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:16:29 2025 by rpki-client