Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/42qqgHgmQUAB4nXs03OO98EWLkE.roa
File: 42qqgHgmQUAB4nXs03OO98EWLkE.roa (raw, json)
Hash identifier: P+XaQGiz/phBmFrCnQNEBmnEMLRMIf07BNfsOwM4nJU=
Subject key identifier: E3:6A:AA:80:78:26:41:40:01:E2:75:EC:D3:73:8E:F7:C1:16:2E:41
Certificate issuer: /CN=b2ddd07ccd9da3ad3e80a2a7ac34ac9666d7d3dd
Certificate serial: 0181F64955CDD02B7CD9844964896F5403B7
Authority key identifier: B2:DD:D0:7C:CD:9D:A3:AD:3E:80:A2:A7:AC:34:AC:96:66:D7:D3:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st3QfM2do60-gKKnrDSslmbX090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/42qqgHgmQUAB4nXs03OO98EWLkE.roa
Signing time: Wed 13 Jul 2022 06:40:10 +0000
ROA not before: Wed 13 Jul 2022 06:40:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211261
IP address blocks: 5.253.157.0/24 maxlen: 24
5.253.156.0/24 maxlen: 24
5.253.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f6:49:55:cd:d0:2b:7c:d9:84:49:64:89:6f:54:03:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ddd07ccd9da3ad3e80a2a7ac34ac9666d7d3dd
Validity
Not Before: Jul 13 06:40:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e36aaa807826414001e275ecd3738ef7c1162e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:be:ef:37:98:78:db:6d:df:3c:4b:af:1a:
ca:5d:71:cb:ac:35:f8:10:7a:a9:56:3a:a3:ac:d9:
29:7c:69:b9:75:aa:2f:24:b4:1c:cf:40:fb:1b:09:
ff:c1:33:9a:6e:19:85:c8:bc:aa:21:33:56:c1:1a:
2c:92:8a:33:d0:a1:96:90:ed:2a:fe:09:a7:7a:75:
78:82:8d:9f:2d:5e:f5:ff:fc:78:a3:19:ca:f6:70:
b7:0c:ca:b4:40:0f:79:98:a3:1f:22:30:d6:bc:2f:
2f:8b:7f:f2:35:90:e4:a9:d6:f8:c4:a4:f4:ed:a4:
99:bf:da:04:72:c0:d5:86:30:8b:fd:2d:f6:bf:21:
20:7a:83:f2:f7:8b:24:4e:bc:b4:08:f7:42:25:10:
40:30:6a:e5:bc:36:0e:5d:39:a2:49:a9:f3:53:b6:
0c:6b:bb:24:5b:e6:10:06:ef:c6:fa:f8:b6:be:2d:
84:b7:2a:5f:6e:80:4c:53:68:b3:e0:e5:ca:1e:7b:
9a:c1:c2:bc:53:a1:31:47:ef:76:bc:e6:b7:b6:5a:
62:1f:ea:dd:4b:25:7b:2c:53:58:73:dd:7a:5d:f8:
57:94:b2:cf:12:0a:4c:a0:25:73:27:d5:ad:e3:c6:
e5:23:c9:28:82:11:66:e4:b2:57:e2:13:28:8a:5a:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6A:AA:80:78:26:41:40:01:E2:75:EC:D3:73:8E:F7:C1:16:2E:41
X509v3 Authority Key Identifier:
keyid:B2:DD:D0:7C:CD:9D:A3:AD:3E:80:A2:A7:AC:34:AC:96:66:D7:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st3QfM2do60-gKKnrDSslmbX090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/42qqgHgmQUAB4nXs03OO98EWLkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/st3QfM2do60-gKKnrDSslmbX090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.156.0/23
5.253.159.0/24
Signature Algorithm: sha256WithRSAEncryption
75:bd:1b:8b:33:d7:8e:58:c0:22:41:33:23:9d:a5:52:7a:fc:
37:06:bc:87:e0:b1:6c:a8:ee:28:d1:ef:bf:fd:03:61:38:3f:
4e:59:65:8d:9d:d9:91:9f:4e:e7:f5:66:3f:f4:40:e8:df:20:
59:94:54:31:ad:3c:16:f8:0b:58:f8:50:65:9a:8c:62:82:a7:
eb:18:9f:2a:44:e4:be:e5:e1:cc:48:b1:0e:8b:69:06:08:f9:
3c:5e:4b:16:eb:ee:11:04:5a:ab:bf:76:12:c5:87:9c:61:f3:
ad:52:9a:69:0c:79:3c:1f:62:74:2a:3d:96:a5:f6:d6:a5:42:
08:0a:a5:75:f3:94:87:73:10:ad:eb:22:06:9d:8d:51:45:27:
12:4a:35:5d:15:65:a6:fb:75:7a:9d:c0:20:e8:9c:45:ff:a6:
51:81:46:c5:66:6c:8b:c2:a8:d9:10:14:2d:d2:df:20:d9:69:
ad:ea:11:09:76:14:a9:b3:32:85:29:59:1b:05:d2:5c:78:e3:
cb:2b:00:47:d6:cb:2e:81:5f:08:36:6b:47:a6:24:7d:b8:cc:
15:80:63:88:ad:f7:73:4b:79:66:c0:78:bc:ba:d8:b3:3a:71:
4f:77:dc:e8:63:34:18:0a:f8:22:5e:b6:06:9c:2b:d4:97:ba:
45:75:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:25:27 2025 by rpki-client