Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/Yzpl7dcbDV1oc45l6H78VWlDWek.roa
File: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (raw, json)
Hash identifier: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=
Subject key identifier: 63:3A:65:ED:D7:1B:0D:5D:68:73:8E:65:E8:7E:FC:55:69:43:59:E9
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 0194274810808DB8AA21CDD4C8F91D28F5F5
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/Yzpl7dcbDV1oc45l6H78VWlDWek.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 5.182.22.0/24 maxlen: 24
2a0e:b800:aaaa::/48 maxlen: 48
2a0e:b800:abcd::/48 maxlen: 48
2a0e:b800:bbbb::/48 maxlen: 48
2a0e:b800:cccc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:10:80:8d:b8:aa:21:cd:d4:c8:f9:1d:28:f5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=633a65edd71b0d5d68738e65e87efc55694359e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:26:6c:22:a3:20:d3:ab:23:e1:2e:83:37:
66:ff:1b:87:14:a7:81:dd:8f:b9:b8:55:21:b6:12:
e6:0c:0d:47:67:8e:58:1f:ae:61:d5:0a:b4:a2:c5:
19:e1:e7:3a:06:fd:d8:58:98:62:4a:11:0b:04:a2:
e1:a9:9e:08:a1:e5:b3:38:54:23:cd:b4:c7:55:2d:
97:7a:ac:dc:e7:f7:65:f4:b8:6e:07:4f:24:a9:bc:
9a:69:c2:13:4b:5a:a6:ca:97:b4:17:47:62:fb:39:
ea:ab:f9:e3:6b:fd:1f:61:d8:bc:06:74:86:c8:3e:
1a:f9:12:be:cc:2e:72:d2:c1:eb:b1:97:91:c4:ea:
58:e5:c4:43:db:2e:90:5d:da:21:13:3f:7a:89:75:
2f:2b:5e:cf:3a:70:58:1f:1d:bf:0c:18:95:8f:8d:
db:97:53:45:f7:e8:fe:73:c6:05:87:1b:21:ef:dc:
0e:18:01:65:33:d0:19:f1:d6:85:f1:48:25:40:e2:
61:10:4d:10:dc:44:09:ed:5e:5a:69:31:cb:99:98:
b2:90:a5:e2:f2:90:4c:c4:91:19:f2:18:89:52:e9:
a9:67:db:60:89:7c:77:76:9b:56:08:d1:73:1d:9c:
7c:77:a2:2a:6b:d0:98:ff:f6:65:8a:4e:78:0a:f0:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:65:ED:D7:1B:0D:5D:68:73:8E:65:E8:7E:FC:55:69:43:59:E9
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/Yzpl7dcbDV1oc45l6H78VWlDWek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.22.0/24
IPv6:
2a0e:b800:aaaa::/48
2a0e:b800:abcd::/48
2a0e:b800:bbbb::/48
2a0e:b800:cccc::/48
Signature Algorithm: sha256WithRSAEncryption
7f:05:93:93:b0:a0:dd:b4:2a:1c:1c:47:b7:91:4f:e2:de:53:
21:44:09:f9:3e:9b:ab:81:e7:27:4b:13:85:c4:36:00:58:44:
c6:bb:93:a8:91:ac:53:14:16:f6:6d:54:e6:2a:36:60:f0:32:
94:c1:93:46:cc:c6:ee:07:71:50:65:4d:ef:0e:92:08:ca:ee:
c9:3f:7a:b2:14:d0:c2:3c:a1:c7:ac:07:6a:27:7e:29:9e:d5:
15:85:79:0b:1f:bc:81:59:16:29:ea:4b:7e:3f:7f:25:6f:08:
21:be:6a:06:40:9d:a2:c8:61:06:37:69:d8:a4:2e:c5:b5:b1:
7b:4d:2d:bc:d2:42:b2:19:29:61:06:11:27:3c:c1:f3:d2:ae:
6a:8d:ad:e8:c2:be:e0:c1:23:30:33:76:32:b9:6d:41:51:da:
0b:3b:93:2a:29:b1:96:99:64:cd:be:a2:bb:5c:86:d2:39:3f:
40:b7:2b:5b:3a:1f:54:d7:d8:53:6c:0d:d7:54:dc:a1:dd:98:
19:29:84:0c:a1:40:25:a5:ed:bc:60:27:85:5d:67:e3:17:81:
b1:42:86:e1:62:50:e8:6f:fe:c0:5f:7f:10:70:19:4d:10:e7:
3e:37:a2:80:00:af:f5:8a:0d:dd:6d:68:9b:92:bd:87:c0:a8:
fb:49:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:33:53 2025 by rpki-client