Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/flFkC3rLYTBJuae6k7suUXp0M98.roa
File: flFkC3rLYTBJuae6k7suUXp0M98.roa (raw, json)
Hash identifier: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=
Subject key identifier: 7E:51:64:0B:7A:CB:61:30:49:B9:A7:BA:93:BB:2E:51:7A:74:33:DF
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 019427B5E5AF352D367DF46F57E33FC830B3
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/flFkC3rLYTBJuae6k7suUXp0M98.roa
Signing time: Thu 02 Jan 2025 15:50:19 +0000
ROA not before: Thu 02 Jan 2025 15:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 5.133.162.0/24 maxlen: 24
5.133.163.0/24 maxlen: 24
5.133.164.0/24 maxlen: 24
5.133.165.0/24 maxlen: 24
5.133.166.0/24 maxlen: 24
5.133.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e5:af:35:2d:36:7d:f4:6f:57:e3:3f:c8:30:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Jan 2 15:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e51640b7acb613049b9a7ba93bb2e517a7433df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:a0:c6:53:78:78:8b:18:1c:8c:27:cb:fe:
ac:bb:62:4c:96:15:29:45:43:e2:3e:9a:fc:6b:72:
f4:f1:b3:ef:95:11:f5:c3:cb:07:96:23:ca:1c:84:
6c:12:7a:f1:00:a5:ec:7f:4e:e9:5a:0d:9f:33:35:
e5:f4:f6:24:34:59:41:8f:83:ec:1c:a3:7c:e2:5a:
58:57:31:4a:2e:c4:28:45:2c:0a:9f:62:2c:6c:48:
f9:e1:0b:5e:d5:90:5a:6d:f0:0d:91:e7:9b:23:8f:
60:31:bc:54:87:9d:5d:82:4b:a7:69:70:95:53:56:
1d:e8:04:2b:79:51:90:9f:db:15:2a:d7:ee:65:01:
dc:80:53:fe:cd:e6:32:ac:64:16:39:05:bc:85:34:
95:b5:f2:eb:42:54:dc:51:f1:74:6e:e7:8f:63:ed:
1b:b0:f1:f0:98:41:0b:55:f6:7a:8d:f3:83:d6:6e:
97:87:a7:3f:cf:a7:1d:70:e1:54:1a:49:bb:85:37:
19:cf:85:6e:2d:a9:f8:76:2d:a5:79:40:71:0b:a4:
a2:1d:de:5f:b5:00:c5:ab:eb:a9:bb:ef:7d:88:48:
31:11:59:f6:77:00:0c:e8:ee:a6:d7:35:43:b4:be:
61:07:b3:8f:b0:56:8d:b2:c3:97:dd:69:c9:ea:c9:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:64:0B:7A:CB:61:30:49:B9:A7:BA:93:BB:2E:51:7A:74:33:DF
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/flFkC3rLYTBJuae6k7suUXp0M98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.162.0-5.133.167.255
Signature Algorithm: sha256WithRSAEncryption
cf:29:f2:bd:73:0c:16:c0:04:00:15:fa:b3:99:9d:d4:21:77:
49:e2:39:eb:97:8d:43:22:50:a3:81:40:52:20:f7:39:34:d3:
d6:a2:e9:82:fe:3a:62:d1:a3:41:b0:55:45:ae:22:8c:a7:06:
9d:dc:b3:7f:48:6b:78:3d:d9:cd:87:be:42:d8:36:57:20:ed:
1f:70:ff:3f:bf:20:37:9c:2d:b2:3c:9e:4c:07:4f:ea:ec:89:
b2:6c:bc:b5:1b:c3:a2:a3:57:bb:05:a9:43:42:0c:e1:ef:67:
ae:cd:f2:54:92:56:c8:b6:9f:e1:0f:8e:c0:c9:3b:91:33:78:
fe:18:ff:ac:7c:4b:be:80:c1:c3:12:e4:fe:d6:49:df:7a:fe:
e4:fc:e8:bf:5e:e6:8f:17:50:62:c3:06:ef:c5:fc:a1:b0:17:
1e:ad:f4:af:14:e1:1c:c0:8c:60:a2:c3:f5:4f:8a:d9:b9:c6:
71:7d:bd:7a:40:85:3f:48:9c:d7:16:b7:47:63:ad:53:51:ad:
da:69:29:cf:8b:a0:0f:0c:6a:e1:10:d5:2a:b5:68:2b:43:76:
53:2b:60:d0:73:92:cc:91:30:76:ce:5b:0d:90:a4:2d:bf:a4:
e2:e3:10:86:51:24:f4:29:87:cb:f4:ef:8f:47:fe:b6:03:ff:
c8:76:a4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:42:00 2025 by rpki-client