Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/S5-p15oe6PO1US7yiwalFk2guhA.roa
File: S5-p15oe6PO1US7yiwalFk2guhA.roa (raw, json)
Hash identifier: RxwUj9qrcB8W+bA9U60Y3Yd+aWieeN2zZTQTfRBMSD8=
Subject key identifier: 4B:9F:A9:D7:9A:1E:E8:F3:B5:51:2E:F2:8B:06:A5:16:4D:A0:BA:10
Certificate issuer: /CN=388cccd78bf16533f33185443ea82dcdad920410
Certificate serial: 0194228E003F89AE9C7806406AC7AC7E4B5F
Authority key identifier: 38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/S5-p15oe6PO1US7yiwalFk2guhA.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51681
IP address blocks: 178.239.208.0/20 maxlen: 20
185.105.16.0/24 maxlen: 24
185.105.17.0/24 maxlen: 24
185.105.18.0/24 maxlen: 24
185.105.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:00:3f:89:ae:9c:78:06:40:6a:c7:ac:7e:4b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388cccd78bf16533f33185443ea82dcdad920410
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b9fa9d79a1ee8f3b5512ef28b06a5164da0ba10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:04:f9:81:fc:25:6b:f8:16:ce:85:21:13:
48:20:1f:38:62:66:0f:4d:b5:eb:7e:ed:80:8f:1f:
df:e7:0a:ee:d5:9e:f0:c9:9f:4e:15:d6:da:9a:0f:
70:79:f0:1a:cb:d7:6c:7e:8b:60:68:97:c5:25:34:
cd:76:04:d9:b6:39:90:e2:70:1a:02:6e:00:5b:e8:
d0:41:b2:ef:ad:f0:48:eb:34:42:ae:35:61:11:89:
72:9a:aa:55:5f:21:ab:d8:43:59:93:4d:a4:88:74:
48:4d:5d:aa:97:8e:9e:ba:6d:0a:35:89:e2:ad:0d:
de:c9:33:8d:61:ea:46:d0:83:6d:d1:29:3c:80:c4:
e5:05:95:c6:36:65:ef:d5:a4:f0:ff:58:30:7e:54:
91:df:e4:90:c5:8d:e3:f2:24:9e:92:5d:e0:3e:61:
41:21:da:a1:bd:e4:34:9e:8b:b5:db:85:90:c9:1f:
f7:94:e5:84:e1:86:6a:2e:49:4e:b5:65:85:81:c2:
12:1f:98:5f:25:99:d4:eb:fe:6f:86:d3:c0:c9:85:
be:63:f3:62:fb:62:0f:cd:43:ff:81:69:e3:de:91:
71:88:97:16:ba:a5:b3:3b:63:90:ca:8e:2e:90:45:
79:54:cc:96:87:71:6a:63:77:83:e2:04:48:5a:66:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9F:A9:D7:9A:1E:E8:F3:B5:51:2E:F2:8B:06:A5:16:4D:A0:BA:10
X509v3 Authority Key Identifier:
keyid:38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/S5-p15oe6PO1US7yiwalFk2guhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.208.0/20
185.105.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:87:0a:ca:02:62:df:44:63:f7:9d:e7:1a:d5:d0:df:14:a7:
2b:d3:dd:e6:c9:20:41:06:03:f6:0b:22:e5:21:73:c3:bd:b2:
bb:24:1e:8f:63:ee:a5:ff:ab:e3:7f:28:fe:a5:6c:16:54:9d:
83:61:ac:bc:93:04:18:af:b4:96:35:3f:21:6b:7f:f3:58:e0:
f4:2c:87:a9:3c:d8:fd:ac:5a:8c:99:15:b6:5a:4a:c4:04:eb:
99:2f:5a:30:32:2b:39:c6:31:39:3c:06:da:14:0d:17:b5:39:
5a:9b:df:e8:b2:2f:2d:b6:7c:52:c8:3f:36:47:5d:3e:1d:2f:
db:84:b7:5e:c9:bd:78:95:3a:c9:89:93:b3:82:68:a8:22:b6:
6a:4c:57:58:04:85:7f:c3:0b:c9:49:e7:fb:fc:e0:d9:80:09:
08:f6:66:b1:ec:62:2f:50:36:86:77:46:b5:f2:75:84:6e:69:
73:bb:38:ed:c8:26:81:77:a3:ee:2a:16:44:02:59:a3:80:d0:
1c:e4:12:9f:fc:64:fc:93:aa:e9:e2:6b:fb:1f:ac:d2:b3:20:
0b:fc:b1:04:fd:cc:f7:2b:0b:55:4c:fe:06:37:43:5f:01:57:
ec:c4:b5:97:02:ad:6d:99:09:f8:87:0f:7d:c7:fe:fb:85:ae:
e2:28:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:59:56 2025 by rpki-client