Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/5BklaO2hUcgVp93-Axjt1xGSQEo.roa
File: 5BklaO2hUcgVp93-Axjt1xGSQEo.roa (raw, json)
Hash identifier: fyH7yc4cOofFpCw7MlsIYOfX4gcFv/d2Ygq5L4T2gvw=
Subject key identifier: E4:19:25:68:ED:A1:51:C8:15:A7:DD:FE:03:18:ED:D7:11:92:40:4A
Certificate issuer: /CN=84a3994c516cb85dee76e214045ef39b38f39cfc
Certificate serial: 018AC8A3DEFE40E2A625152C6B0F0785C76A
Authority key identifier: 84:A3:99:4C:51:6C:B8:5D:EE:76:E2:14:04:5E:F3:9B:38:F3:9C:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKOZTFFsuF3uduIUBF7zmzjznPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/5BklaO2hUcgVp93-Axjt1xGSQEo.roa
Signing time: Sun 24 Sep 2023 19:21:37 +0000
ROA not before: Sun 24 Sep 2023 19:21:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57705
IP address blocks: 5.32.132.0/24 maxlen: 24
5.32.132.0/23 maxlen: 23
5.32.133.0/24 maxlen: 24
5.32.134.0/24 maxlen: 24
5.32.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c8:a3:de:fe:40:e2:a6:25:15:2c:6b:0f:07:85:c7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a3994c516cb85dee76e214045ef39b38f39cfc
Validity
Not Before: Sep 24 19:21:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4192568eda151c815a7ddfe0318edd71192404a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:c0:5f:f9:cd:5e:89:73:8c:44:d1:16:f9:
39:de:b6:f1:84:70:1f:e6:11:6b:59:b7:79:9e:99:
05:41:69:09:ed:36:7d:8a:c5:f6:32:aa:11:2a:40:
89:9e:8b:52:75:5a:6e:10:d1:92:56:f8:df:7a:28:
ee:58:af:9b:fa:67:55:27:49:b2:f3:6e:73:a1:4a:
15:81:7d:fe:d4:5c:06:d8:15:ce:e4:14:a9:42:22:
b1:fe:6b:f5:e8:3b:d7:fd:0c:62:42:fd:5d:2b:69:
c3:1f:0f:ac:47:ab:64:da:f8:33:6d:98:8d:1d:52:
fd:c7:62:07:50:75:52:a0:28:c1:53:3a:e0:27:f1:
7d:03:cc:1d:6e:d4:79:d8:11:fc:44:01:36:e0:42:
ac:e7:e6:82:50:01:cc:db:df:56:43:b2:d5:23:03:
60:70:09:b4:5f:bc:13:65:89:c3:5b:bd:f4:c9:72:
b5:c0:25:88:93:7e:bf:1f:90:51:59:40:2f:fd:38:
16:b9:23:0a:90:72:3d:ab:92:2f:ff:6a:da:18:6d:
9b:2a:e4:85:a0:de:98:61:c0:6b:37:51:7d:a8:2b:
e8:64:40:29:c8:8b:39:b8:d5:8c:e8:72:c6:5d:45:
f3:d9:4a:ec:09:98:92:0a:65:f7:24:51:0b:4d:f0:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:19:25:68:ED:A1:51:C8:15:A7:DD:FE:03:18:ED:D7:11:92:40:4A
X509v3 Authority Key Identifier:
keyid:84:A3:99:4C:51:6C:B8:5D:EE:76:E2:14:04:5E:F3:9B:38:F3:9C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKOZTFFsuF3uduIUBF7zmzjznPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/5BklaO2hUcgVp93-Axjt1xGSQEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/hKOZTFFsuF3uduIUBF7zmzjznPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.132.0/22
Signature Algorithm: sha256WithRSAEncryption
64:0e:b9:81:68:8f:5d:12:1e:2e:15:d8:ea:0c:09:0b:ec:a7:
f8:1e:ab:63:a1:f7:1e:d4:35:53:19:30:e0:ab:bf:e0:13:de:
1e:c3:4f:62:fb:b4:30:c3:bd:e1:e1:ee:72:64:a0:ad:57:0b:
2c:cc:c3:12:e1:e5:a1:4a:23:cc:7a:a3:2b:be:64:03:67:22:
ff:a5:d6:34:b3:84:19:20:df:10:da:40:86:59:2e:62:82:90:
d4:ea:e6:eb:db:43:eb:b9:73:de:9c:4b:e1:97:1f:ec:2e:e0:
bc:2f:39:95:0a:ae:75:14:56:44:b0:90:ad:56:06:f6:40:c6:
9a:34:9c:28:b5:82:1d:4f:f4:51:be:5b:30:7e:ba:f0:03:fb:
0b:82:b8:1f:89:bf:2c:2c:8d:96:a6:58:69:93:b3:df:a0:73:
99:3f:19:53:8a:52:a4:d6:8c:5c:07:88:7e:aa:6d:5a:2c:87:
4d:11:56:db:6c:45:82:22:96:96:75:6c:a2:38:d1:e1:9c:e4:
c0:2a:44:97:06:27:7e:c3:9c:86:dd:e5:5a:ec:98:52:f9:80:
99:01:b6:ca:41:d8:8d:67:2a:24:75:96:c5:5c:a7:9c:f8:e4:
cd:68:48:ed:57:b8:e1:60:1d:47:38:0a:24:21:90:d2:8a:8a:
dd:1c:00:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:59 2025 by rpki-client