Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/8rbhjKwQ2kBszsnWP0McBsbQSms.roa
File: 8rbhjKwQ2kBszsnWP0McBsbQSms.roa (raw, json)
Hash identifier: g2OYhig7rNh+Ra9w1DL6v7Butcc9et7X+VbDyI9Dorw=
Subject key identifier: F2:B6:E1:8C:AC:10:DA:40:6C:CE:C9:D6:3F:43:1C:06:C6:D0:4A:6B
Certificate issuer: /CN=b2ddd07ccd9da3ad3e80a2a7ac34ac9666d7d3dd
Certificate serial: 01AF7246
Authority key identifier: B2:DD:D0:7C:CD:9D:A3:AD:3E:80:A2:A7:AC:34:AC:96:66:D7:D3:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st3QfM2do60-gKKnrDSslmbX090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/8rbhjKwQ2kBszsnWP0McBsbQSms.roa
Signing time: Fri 06 May 2022 06:45:44 +0000
ROA not before: Fri 06 May 2022 06:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211261
IP address blocks: 5.253.158.0/24 maxlen: 24
5.253.157.0/24 maxlen: 24
5.253.156.0/24 maxlen: 24
5.253.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28275270 (0x1af7246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ddd07ccd9da3ad3e80a2a7ac34ac9666d7d3dd
Validity
Not Before: May 6 06:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2b6e18cac10da406ccec9d63f431c06c6d04a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:8e:85:10:f4:b0:8a:3a:a1:65:fe:0a:1a:
e1:a9:91:56:e9:8e:a3:8d:d9:7f:04:c3:29:dd:76:
bb:9f:8a:44:ab:5c:df:57:0f:c9:28:bf:4c:f0:2a:
b1:75:0b:90:c4:cd:14:93:af:9b:a7:2f:d3:c5:de:
2c:a1:de:f2:25:84:ec:42:f2:06:c7:80:9c:e9:42:
c8:f9:bf:da:15:6c:94:ec:5f:6a:fe:18:20:96:bd:
c5:62:d3:54:c7:85:63:d0:cf:89:25:fa:6a:60:d2:
3f:17:fb:eb:cf:f0:4e:b1:6a:58:82:a4:60:f9:c4:
fe:2b:2d:98:b2:74:ee:90:20:89:11:5e:0a:6e:03:
ff:11:67:b1:de:21:13:5b:43:9b:46:e7:88:90:6b:
b4:c0:ba:64:24:6a:20:37:9e:80:f0:a9:b2:ab:d1:
cc:ab:ca:d9:28:b6:46:5f:64:57:f3:75:a3:3a:47:
56:33:f2:17:2c:ad:1f:63:65:0d:c9:c4:66:6e:46:
e3:cb:10:1a:bd:7a:53:63:db:c6:41:9d:88:b2:53:
7d:88:5d:36:16:0f:5e:46:0c:85:87:3a:51:e2:11:
88:38:9f:ac:9d:52:36:4e:48:5c:d1:a0:c7:ac:63:
d4:33:4c:b8:4d:2d:0b:c8:33:08:91:b8:17:aa:8d:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B6:E1:8C:AC:10:DA:40:6C:CE:C9:D6:3F:43:1C:06:C6:D0:4A:6B
X509v3 Authority Key Identifier:
keyid:B2:DD:D0:7C:CD:9D:A3:AD:3E:80:A2:A7:AC:34:AC:96:66:D7:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st3QfM2do60-gKKnrDSslmbX090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/8rbhjKwQ2kBszsnWP0McBsbQSms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/st3QfM2do60-gKKnrDSslmbX090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.156.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:e6:9a:46:4e:0b:c8:cd:7a:23:b8:f8:dc:0a:bc:58:fa:9c:
a0:22:ca:3f:ed:98:4a:87:62:3c:78:0e:6a:b4:33:1b:67:a0:
9b:e5:a9:c6:b8:78:d3:8c:ca:b3:db:46:30:24:65:b5:10:ac:
85:f3:7d:10:43:35:f9:6f:85:ad:9a:12:e0:d3:2f:89:db:35:
fa:b1:9e:95:47:00:b0:28:4c:7b:9a:0c:26:1b:1b:c6:4c:3d:
29:5d:77:5e:06:be:bb:2e:25:47:ca:90:38:d1:eb:b4:35:6b:
e3:8e:63:55:28:2e:5a:5b:68:8f:cc:bc:c8:5b:fd:41:2b:d4:
9e:97:d1:52:38:7f:a6:57:9c:1e:37:e3:b3:1f:92:65:4c:dd:
0e:0e:a5:32:fd:fa:16:15:61:45:0e:5e:f0:04:d5:42:47:88:
a8:8f:4d:e3:13:43:83:57:b4:19:dd:b6:e3:ea:9a:77:02:11:
b2:c6:c4:77:ec:6e:ce:4b:d1:33:44:0c:1f:ba:6d:6c:9a:b4:
15:a2:99:c3:f0:1e:db:b2:4b:d5:96:2b:e0:dc:c2:a8:08:e3:
e4:9c:f4:ba:68:7e:b7:65:63:f1:20:02:48:d1:64:af:bb:16:
3d:7a:b3:22:db:4b:6b:1b:a9:7f:4f:1e:74:43:6b:36:4a:0a:
02:d6:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:17:39 2025 by rpki-client