Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5rnYyxhwBw8AROEQmkeAEzxafWw.roa
File: 5rnYyxhwBw8AROEQmkeAEzxafWw.roa (raw, json)
Hash identifier: IwtsHWgFIbRrrH4F7EACNw91VbTKrHxJb3ArVqfVMGA=
Subject key identifier: E6:B9:D8:CB:18:70:07:0F:00:44:E1:10:9A:47:80:13:3C:5A:7D:6C
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194B0E9E6D9B0CD2AD5EE51DBB5AD64DF64
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5rnYyxhwBw8AROEQmkeAEzxafWw.roa
Signing time: Wed 29 Jan 2025 07:15:06 +0000
ROA not before: Wed 29 Jan 2025 07:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 5.102.116.0/22 maxlen: 24
37.34.88.0/21 maxlen: 24
46.20.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:e9:e6:d9:b0:cd:2a:d5:ee:51:db:b5:ad:64:df:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 29 07:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6b9d8cb1870070f0044e1109a4780133c5a7d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:c7:57:86:7a:dd:c1:27:6c:c6:61:7f:03:
09:cb:45:e1:9d:70:21:69:02:58:5d:61:60:23:66:
73:27:11:ec:b7:3e:80:57:85:96:c2:42:b4:da:39:
9b:7d:8a:8f:c7:54:5a:97:2d:57:ba:ed:e5:59:3b:
29:71:ad:3d:0e:f6:d1:b2:73:50:69:85:bb:e9:fb:
de:ce:fa:89:1b:4e:ac:86:c3:25:a6:9f:41:6c:49:
17:63:65:a0:32:6d:75:ec:59:92:9b:bc:76:b7:ec:
86:6f:92:c9:83:d9:e0:f3:7d:c3:ef:8a:09:cf:a2:
6f:b4:4a:38:ef:2f:29:d2:bc:9f:fe:c7:05:59:6a:
fa:e4:e0:69:7a:8e:1d:c2:1a:05:d5:f8:83:04:1d:
07:10:33:3c:73:d3:84:6d:48:7d:31:b8:57:af:17:
85:b4:8b:ae:8e:6e:88:9f:ce:d8:67:31:66:d6:a6:
14:89:21:25:ae:5f:2a:6a:3f:1a:c8:e7:a7:56:bb:
aa:90:d3:7f:0e:b0:1a:2e:06:c1:de:a3:e4:bd:8e:
04:76:78:5e:0b:8a:b5:e3:51:4b:ac:48:55:2e:1d:
36:f9:d8:01:13:93:25:90:29:f2:bf:e9:13:0a:67:
76:5b:71:93:37:cd:91:af:29:a5:4f:53:da:4a:ad:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B9:D8:CB:18:70:07:0F:00:44:E1:10:9A:47:80:13:3C:5A:7D:6C
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5rnYyxhwBw8AROEQmkeAEzxafWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.116.0/22
37.34.88.0/21
46.20.210.0/23
Signature Algorithm: sha256WithRSAEncryption
03:91:1b:6e:d8:47:1d:83:a0:39:80:be:70:9b:db:61:ad:19:
7a:cd:94:ae:b1:90:9c:4e:01:7a:3d:f5:71:f9:9e:b4:49:f0:
8f:62:b7:5e:1a:86:6d:18:92:74:8f:2c:1d:78:4b:a9:b0:8c:
5f:33:29:b5:92:2b:4b:1f:a2:10:cb:a5:71:0c:23:94:dd:2c:
13:d0:33:8e:3b:be:86:37:00:b6:e9:66:f1:3d:ba:14:5c:c0:
f7:04:69:79:bb:fb:0b:a6:fc:cc:11:63:e3:4a:e1:50:2f:14:
7f:05:a1:03:c1:f0:4d:7a:5b:4d:c9:6d:9e:be:fb:80:36:6b:
18:ad:59:d7:cb:3d:42:b9:32:29:9b:8c:6f:cf:6e:27:49:ef:
dd:c4:26:f8:f8:af:bc:1e:98:b8:35:e0:6c:6d:a4:65:44:c7:
da:8b:77:7e:ac:83:a6:62:db:c5:be:db:cc:29:3c:e9:b4:d2:
c5:36:15:f1:14:e7:87:9c:93:b5:87:77:f6:ff:66:6b:d1:83:
0d:c1:4a:14:7f:65:ea:c1:0c:4d:0e:8e:ce:7b:bb:bb:46:cd:
bf:9c:33:a3:21:2d:c1:4c:e2:b0:9f:5a:4e:d8:4b:53:c0:fc:
9a:86:29:7e:1e:eb:4b:8f:21:02:87:c6:9e:fb:e3:b0:cd:c4:
c4:04:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:36 2025 by rpki-client