Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/cXHMvnYXUn58neLwmoRSc042tjs.roa
File: cXHMvnYXUn58neLwmoRSc042tjs.roa (raw, json)
Hash identifier: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=
Subject key identifier: 71:71:CC:BE:76:17:52:7E:7C:9D:E2:F0:9A:84:52:73:4E:36:B6:3B
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 0194282666895F6A1AF4845774046DE04DA2
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/cXHMvnYXUn58neLwmoRSc042tjs.roa
Signing time: Thu 02 Jan 2025 17:53:12 +0000
ROA not before: Thu 02 Jan 2025 17:53:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12757
IP address blocks: 5.44.190.0/24 maxlen: 24
5.44.191.0/24 maxlen: 24
188.227.248.0/21 maxlen: 21
2a03:5880::/32 maxlen: 32
2a03:5880:104::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:66:89:5f:6a:1a:f4:84:57:74:04:6d:e0:4d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jan 2 17:53:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7171ccbe7617527e7c9de2f09a8452734e36b63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:da:53:1a:24:28:c6:29:c1:02:db:15:9f:
d4:aa:3d:ae:50:7e:cb:77:07:df:d4:ed:1e:41:15:
fd:78:5b:88:f1:47:5a:4f:1b:04:0e:f2:61:a3:53:
64:3e:e0:4c:c0:5a:c1:90:51:82:7c:a5:ab:ce:f6:
f2:a4:a9:ef:c3:9d:65:55:6e:dd:90:c4:2d:d8:62:
64:b8:50:07:ce:96:55:66:42:35:5b:7b:cd:be:06:
e2:ae:37:58:aa:fd:37:4e:17:fe:e2:09:ae:77:24:
65:86:3c:67:a0:b8:9a:5e:5a:2b:2c:17:48:f4:71:
27:c9:1b:1a:32:4c:37:25:00:3f:27:0f:89:ea:91:
96:12:2a:69:a2:7c:88:92:b7:a3:f3:45:6a:e3:30:
23:11:e1:d9:64:1f:57:2e:4b:c9:2d:d7:83:b7:10:
b4:90:18:43:9e:af:7e:a3:ff:b6:ec:49:ec:0e:cd:
9f:69:9c:9f:49:e0:56:62:9f:78:2a:10:b7:0e:34:
45:29:f7:10:54:20:c4:2f:49:47:8d:64:42:fc:a0:
c2:69:49:26:95:c7:2a:b2:81:55:81:45:0d:f9:25:
ea:97:10:fa:04:4b:c9:17:81:57:47:54:f5:2b:aa:
7f:35:c4:d4:61:ef:82:e9:e4:95:7a:77:e3:d6:56:
ae:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:71:CC:BE:76:17:52:7E:7C:9D:E2:F0:9A:84:52:73:4E:36:B6:3B
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/cXHMvnYXUn58neLwmoRSc042tjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.190.0/23
188.227.248.0/21
IPv6:
2a03:5880::/32
Signature Algorithm: sha256WithRSAEncryption
61:4c:17:52:40:7e:b1:24:83:7b:ab:9a:a6:fc:6d:0a:04:b9:
d7:9c:4a:ab:ec:70:80:91:1a:3c:04:ba:29:4c:d1:fb:d2:c9:
00:a2:35:e4:ac:1f:6d:d2:92:25:73:42:7e:68:90:16:b2:23:
d7:06:f6:d8:91:ee:7f:49:97:73:d2:4f:75:7f:04:a8:61:cf:
f8:7c:a3:0c:d6:ac:0a:35:8b:39:39:49:c9:7c:34:e5:a8:0b:
2d:d1:0f:e5:6a:0c:30:e0:4a:c4:fa:05:a7:ab:30:ba:ac:19:
0f:b0:59:d8:a7:80:7f:06:1f:c7:9b:05:61:09:6d:4e:83:25:
c4:dd:59:e0:55:ae:63:12:5b:1e:0a:45:a7:9c:3c:ff:e5:08:
71:03:ea:14:2e:4e:81:3b:3c:c1:67:3f:4e:b7:2e:aa:45:50:
24:21:37:b6:2b:9b:ee:3f:85:17:20:61:5c:38:b7:63:43:be:
5f:51:b3:84:1f:fe:b0:42:e6:c9:c6:b1:8b:99:2e:5d:ee:73:
0e:ea:a5:93:39:f4:db:5a:c1:c2:ea:64:6a:19:0c:7f:d3:33:
e4:b7:70:f7:09:35:e1:cf:3f:a9:25:c8:56:b9:0a:bb:4f:54:
d8:d8:87:9d:b8:ff:91:71:ca:2b:e5:2e:cc:fe:8c:90:7c:db:
f4:c9:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:09 2025 by rpki-client