Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/5OBs8P2rGlXCZQfmEXZqnvMvwUA.roa
File: 5OBs8P2rGlXCZQfmEXZqnvMvwUA.roa (raw, json)
Hash identifier: syAaU6PR2K2cAy+ArdlztwLuM7kB9ZmAJ0bVUj5fM6A=
Subject key identifier: E4:E0:6C:F0:FD:AB:1A:55:C2:65:07:E6:11:76:6A:9E:F3:2F:C1:40
Certificate issuer: /CN=ad12daa384888b5247df712965803f0d3fa8989d
Certificate serial: 01870F5DA1105F7DF68D1558F751DB6CEC09
Authority key identifier: AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/5OBs8P2rGlXCZQfmEXZqnvMvwUA.roa
Signing time: Thu 23 Mar 2023 16:46:46 +0000
ROA not before: Thu 23 Mar 2023 16:46:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42263
IP address blocks: 45.140.116.0/22 maxlen: 22
185.182.32.0/22 maxlen: 22
185.115.48.0/22 maxlen: 22
5.253.192.0/22 maxlen: 22
185.32.80.0/22 maxlen: 22
185.116.244.0/24 maxlen: 24
185.116.244.0/22 maxlen: 22
192.70.192.0/22 maxlen: 22
185.173.240.0/22 maxlen: 22
185.145.196.0/22 maxlen: 22
45.94.108.0/22 maxlen: 22
2a00:c320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:5d:a1:10:5f:7d:f6:8d:15:58:f7:51:db:6c:ec:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad12daa384888b5247df712965803f0d3fa8989d
Validity
Not Before: Mar 23 16:46:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4e06cf0fdab1a55c26507e611766a9ef32fc140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:eb:4e:6e:9b:19:00:e7:f7:42:2f:aa:3a:
1e:0b:c0:ff:ec:ac:99:80:6e:83:1b:f6:44:3e:f4:
69:5a:16:8b:11:fc:c3:1b:49:c0:f6:1f:f0:6b:2c:
e5:47:85:68:60:17:6e:0d:ea:2e:5f:8a:a3:23:a9:
b3:84:4d:9d:16:09:6f:2b:6e:68:ad:56:5f:bb:1c:
07:81:58:c6:89:84:c8:81:e8:d2:df:a8:ea:14:3a:
a7:26:77:46:48:48:33:37:e6:22:6b:93:85:5c:98:
cf:f3:32:8f:70:c0:e0:f4:ec:71:3b:8b:58:33:2c:
c9:c3:d1:fc:18:a1:07:82:36:2c:e7:c1:22:55:77:
a4:e1:af:c5:72:5e:5c:32:20:79:8e:ad:34:c0:bc:
86:2a:9b:73:77:99:b6:a1:82:af:e3:bc:58:19:6a:
19:21:8b:5f:7d:38:16:12:45:3a:cd:dd:6b:46:f3:
da:a5:b3:56:50:7c:46:99:de:b6:e7:42:8f:44:79:
f5:37:79:54:8f:40:f0:ec:06:5c:83:e9:21:cc:94:
40:bc:3b:92:ab:0b:1a:b7:ae:a8:20:c2:1d:6a:b7:
f4:59:63:27:46:02:65:c9:81:ad:cf:7a:d2:2f:a2:
e9:05:0e:75:1d:ff:96:34:1b:a0:d4:88:04:9d:5b:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E0:6C:F0:FD:AB:1A:55:C2:65:07:E6:11:76:6A:9E:F3:2F:C1:40
X509v3 Authority Key Identifier:
keyid:AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/5OBs8P2rGlXCZQfmEXZqnvMvwUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.192.0/22
45.94.108.0/22
45.140.116.0/22
185.32.80.0/22
185.115.48.0/22
185.116.244.0/22
185.145.196.0/22
185.173.240.0/22
185.182.32.0/22
192.70.192.0/22
IPv6:
2a00:c320::/32
Signature Algorithm: sha256WithRSAEncryption
73:28:be:37:75:db:1b:00:96:a7:26:91:e7:8a:02:80:11:9f:
89:c6:69:85:d3:f3:32:08:7b:8e:17:fc:c7:de:41:99:3a:66:
71:13:a8:5b:1b:82:4e:3c:2d:a7:ad:13:ad:1e:fc:88:fc:11:
5c:28:7c:c7:d7:bc:3d:15:5a:c4:c2:9f:f5:72:4a:e0:37:f7:
1e:e8:65:42:3b:a4:ac:8f:38:6f:6c:22:12:64:5d:db:e4:e7:
b7:5f:e4:70:72:2f:70:9a:cf:59:92:76:c7:8d:55:db:9e:25:
a4:41:89:05:e6:2d:1f:7d:c9:a7:d5:32:bf:da:68:73:13:12:
19:0a:53:e0:51:92:19:45:f6:99:66:f0:f0:2b:82:50:9c:c5:
00:fb:47:bb:90:88:e1:35:62:8e:8e:8c:63:14:ac:27:90:67:
22:52:3b:fe:59:f7:1c:5e:7e:d7:cd:da:56:0d:25:03:6e:50:
d2:05:3b:c6:71:49:47:63:b2:76:14:87:54:45:91:0f:e1:c0:
b9:b0:ea:a1:cd:d6:78:f6:10:57:ad:85:3d:43:b4:1d:0e:1a:
7d:db:27:b3:69:d5:34:2d:f5:b4:58:9f:6d:3f:a3:42:60:0b:
64:b0:57:96:d6:52:bc:0d:1a:24:e8:94:c6:0f:99:2d:3b:f2:
ee:47:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:26:05 2025 by rpki-client