Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/_E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa
File: _E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa (raw, json)
Hash identifier: aAipIQ263NI9Nm3A47DXuzEpDsCQg6yANknUA1m80WY=
Subject key identifier: FC:4D:5C:C2:3C:DE:16:21:48:1F:B5:5E:1C:18:2A:D5:AF:C2:A7:1C
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 01947236DFED78D18F3DCAFF615AF0D022A5
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/_E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa
Signing time: Fri 17 Jan 2025 03:03:06 +0000
ROA not before: Fri 17 Jan 2025 03:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 138.124.5.0/24 maxlen: 24
138.124.6.0/24 maxlen: 24
138.124.7.0/24 maxlen: 24
138.124.36.0/24 maxlen: 24
138.124.37.0/24 maxlen: 24
138.124.40.0/24 maxlen: 24
138.124.43.0/24 maxlen: 24
138.124.44.0/24 maxlen: 24
138.124.79.0/24 maxlen: 24
138.124.80.0/24 maxlen: 24
138.124.81.0/24 maxlen: 24
138.124.82.0/24 maxlen: 24
138.124.83.0/24 maxlen: 24
138.124.84.0/24 maxlen: 24
138.124.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:72:36:df:ed:78:d1:8f:3d:ca:ff:61:5a:f0:d0:22:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jan 17 03:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc4d5cc23cde1621481fb55e1c182ad5afc2a71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:73:90:12:5b:83:db:f8:32:b5:58:25:47:
61:7d:f9:3c:a9:8b:97:3b:f8:6d:b2:10:75:8e:63:
d9:d2:73:56:41:62:ef:a9:ae:31:0b:22:37:57:57:
4a:92:a7:75:6b:6e:8d:56:a7:ad:35:cf:9e:e3:be:
77:e6:40:cd:2a:60:4f:ce:5e:75:20:41:f1:4f:a4:
95:f4:38:02:e3:29:9d:c1:fb:4c:61:ff:81:cf:a8:
c2:8b:c9:e3:73:67:f7:e8:e7:06:42:73:e5:b0:c6:
8c:cd:27:fc:cd:eb:58:43:3c:d7:46:a0:23:7f:bb:
6c:a0:f5:e5:3a:83:68:5c:7b:25:35:92:7e:19:58:
6d:fd:e5:86:b4:94:e0:a4:9f:9e:27:d6:6e:db:e4:
d8:d1:f2:e5:c4:f7:a0:6b:8c:c0:b4:1b:f9:9c:11:
cf:46:8e:0c:fd:10:35:d5:dc:5e:04:a4:21:19:b3:
47:a7:92:b8:08:6f:2a:bf:13:24:80:4e:92:88:68:
84:1a:7a:2a:70:40:64:f2:1a:cb:41:e2:4c:3b:6c:
aa:a8:7b:44:f4:ae:87:89:d9:2d:f2:9e:9d:55:c2:
74:3a:42:a6:54:26:54:9d:08:99:f0:d0:fb:bf:fb:
69:5f:10:3f:1d:18:d5:b5:77:d9:d4:74:c4:cd:83:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4D:5C:C2:3C:DE:16:21:48:1F:B5:5E:1C:18:2A:D5:AF:C2:A7:1C
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/_E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.5.0-138.124.7.255
138.124.36.0/23
138.124.40.0/24
138.124.43.0-138.124.44.255
138.124.79.0-138.124.85.255
Signature Algorithm: sha256WithRSAEncryption
7a:26:5e:57:31:54:4c:59:16:2b:89:d7:0c:97:97:6d:17:35:
6c:38:46:b7:50:9c:b5:39:15:09:1f:b8:ef:f0:4d:06:f2:2e:
e7:f5:03:42:f3:34:55:24:f6:8a:c5:05:b2:e8:71:b8:87:ae:
34:3a:7d:04:40:bf:74:dc:c1:df:41:b0:fe:c8:4d:46:4a:67:
65:19:0b:40:a1:f6:8f:8b:4c:dd:13:f6:70:32:7f:3a:f0:18:
75:78:ed:06:82:ab:3f:26:2e:2c:00:e9:f6:24:97:bd:91:c7:
9d:4a:8d:7f:8a:9e:c9:59:16:0e:17:9e:0c:9b:dc:d1:d3:e9:
66:51:99:f5:d4:2f:f0:b1:fe:09:73:ba:26:92:2e:a0:2a:4d:
bd:ff:28:60:41:50:df:7b:26:55:5a:40:cc:28:63:ae:48:14:
2c:b5:b5:a1:00:e9:7d:6c:3f:56:e7:4f:3b:ed:df:e5:64:12:
3f:19:3d:25:be:fb:00:0c:3b:1a:e1:b0:d3:16:ad:35:48:d3:
08:59:66:24:35:49:4c:4e:8a:ab:94:79:e7:d1:29:48:44:e1:
31:b8:53:6a:81:27:40:bd:d1:ef:12:8d:3a:06:9d:ce:76:29:
fa:91:3f:a8:07:61:84:26:fb:f4:d7:04:5d:36:f9:16:20:21:
66:d6:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:40:25 2025 by rpki-client