Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/SjDGqMtyA_tOZOFH9qEhztndPDA.roa
File: SjDGqMtyA_tOZOFH9qEhztndPDA.roa (raw, json)
Hash identifier: SYm04LsgP1kHh1UhWwOlwBd3q7mezHyPYrt9bFb03b4=
Subject key identifier: 4A:30:C6:A8:CB:72:03:FB:4E:64:E1:47:F6:A1:21:CE:D9:DD:3C:30
Certificate issuer: /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial: 0194221F8E6C48CB878BD3062001F6CB4CC5
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/SjDGqMtyA_tOZOFH9qEhztndPDA.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58299
IP address blocks: 5.226.144.0/21 maxlen: 24
5.226.151.0/24 maxlen: 24
195.138.203.0/24 maxlen: 24
2a00:6340::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8e:6c:48:cb:87:8b:d3:06:20:01:f6:cb:4c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a30c6a8cb7203fb4e64e147f6a121ced9dd3c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:f4:30:9f:23:ac:5b:83:21:31:30:c3:35:
80:c0:5a:52:14:11:f8:00:d4:1f:57:29:73:e6:61:
37:59:97:25:d0:f7:a8:28:4a:bb:ba:21:d5:e5:a4:
da:62:51:70:21:60:c2:a5:02:44:e2:5a:76:16:13:
d9:3b:1d:f7:27:e4:f1:6a:81:34:a2:2f:a7:8c:f2:
5e:3e:1e:8c:12:ac:0c:0c:8a:a9:64:78:c2:41:61:
3f:fc:ea:2b:b0:0c:d7:bf:bb:22:58:b3:b7:86:4d:
1b:06:45:b5:e4:80:3a:4b:28:0d:40:06:e9:33:ba:
15:08:f1:dd:7a:bc:49:d3:49:71:d1:6e:fe:92:2c:
33:95:ea:45:b9:9b:ee:81:8a:83:29:22:0b:da:48:
06:7a:e2:ce:0e:95:83:4a:02:82:22:27:be:74:64:
4d:57:cd:61:05:e4:a9:7d:3e:ae:51:b0:4c:87:39:
af:30:6e:c3:ab:ae:88:92:83:fb:b3:c9:22:df:18:
cb:5b:1f:0f:cd:80:06:23:41:e8:ad:73:17:c4:fc:
06:4f:0d:90:a2:0a:b1:5b:de:5f:3e:b4:f8:b0:57:
43:56:d8:99:6d:da:6a:b4:a4:ed:e6:32:c0:1f:0b:
4f:67:46:9d:83:42:4a:ae:8d:6f:b2:c6:b0:15:5a:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:30:C6:A8:CB:72:03:FB:4E:64:E1:47:F6:A1:21:CE:D9:DD:3C:30
X509v3 Authority Key Identifier:
keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/SjDGqMtyA_tOZOFH9qEhztndPDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.144.0/21
195.138.203.0/24
IPv6:
2a00:6340::/32
Signature Algorithm: sha256WithRSAEncryption
a1:cc:03:98:c1:30:88:d0:97:26:25:37:78:ac:ca:4e:ed:c6:
4e:eb:46:55:e3:fa:17:03:83:6f:f8:cd:50:21:71:2f:d4:d4:
c1:90:24:c3:c0:a4:bd:42:f2:ca:d4:00:16:99:3f:55:db:31:
7e:45:dc:0b:49:d3:c6:54:63:2e:b3:bd:64:dc:a8:79:e5:73:
15:48:d2:86:de:52:4a:87:56:4d:4c:e2:b4:da:1e:4a:74:ba:
aa:84:ca:af:bd:b9:ef:69:01:5b:49:f3:9b:44:4c:51:5b:18:
e3:e1:fe:13:76:36:8b:04:9a:0a:7f:62:7c:30:4e:6d:70:d4:
e7:1d:59:3a:a1:03:06:34:85:4f:44:97:e3:2f:e3:be:6a:80:
29:20:b9:c3:bd:6b:15:f0:f5:88:58:92:95:48:90:01:6a:51:
3d:27:57:28:5b:8c:16:51:95:ec:e3:1f:12:bf:06:9c:15:ce:
61:cf:49:a5:33:f6:fa:1f:11:5b:30:24:06:01:14:6c:df:71:
fa:4d:c6:bd:81:73:ee:56:91:bd:10:18:57:2b:b6:e8:73:92:
11:a4:fc:39:80:64:0b:22:8a:b3:85:40:98:b9:96:cb:fb:bd:
9f:c3:d4:bf:2f:df:61:56:da:f1:60:d0:0a:a1:8c:b8:36:7b:
32:31:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:10 2025 by rpki-client