Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/GeXAjifASMWW-RetKJHYQD473Ts.roa
File: GeXAjifASMWW-RetKJHYQD473Ts.roa (raw, json)
Hash identifier: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=
Subject key identifier: 19:E5:C0:8E:27:C0:48:C5:96:F9:17:AD:28:91:D8:40:3E:3B:DD:3B
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 019425FD063A426E7B7796907DA78C78E226
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/GeXAjifASMWW-RetKJHYQD473Ts.roa
Signing time: Thu 02 Jan 2025 07:48:46 +0000
ROA not before: Thu 02 Jan 2025 07:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 5.252.188.0/24 maxlen: 24
5.252.189.0/24 maxlen: 24
5.252.190.0/24 maxlen: 24
5.252.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:06:3a:42:6e:7b:77:96:90:7d:a7:8c:78:e2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 2 07:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19e5c08e27c048c596f917ad2891d8403e3bdd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:36:d0:53:cf:b4:b9:cd:47:73:a8:14:25:
cf:5c:fc:59:26:26:95:f3:a6:fe:8f:3a:0b:d3:20:
b3:d9:ff:19:da:72:c4:e3:5c:b7:13:27:07:3f:92:
77:80:2e:87:08:e5:82:17:0d:cc:96:df:eb:32:b4:
f3:46:cc:c4:a7:e9:7d:5d:1f:21:ef:a1:04:fa:fa:
ec:9e:60:be:d5:8e:8f:51:09:fc:4a:f0:8c:38:88:
47:b1:e6:95:ca:dd:a6:e2:f8:ee:02:c6:91:fc:f1:
a1:b0:28:cf:7a:40:8b:e8:87:b4:90:58:e6:58:9b:
d4:d7:3d:be:30:3b:f9:a6:43:93:b7:4a:14:ba:8e:
9b:f0:36:f2:a4:43:d6:1c:aa:4b:38:bd:8e:b1:a2:
ac:b3:d3:68:33:06:0d:78:c0:c1:ad:b8:8e:2f:6d:
f4:0b:41:8c:9d:15:fa:0b:22:e9:4e:4c:81:57:d0:
17:d2:06:58:4c:80:92:de:9d:d5:de:da:0e:7f:33:
34:ce:e6:7e:dd:88:16:0d:d6:a2:ef:a5:f6:e2:32:
a5:7d:68:1e:a3:77:30:ef:ec:fd:65:3a:72:8a:cc:
a9:21:a3:56:2f:74:4f:df:18:c2:7b:20:be:1d:6c:
cb:08:eb:c7:54:4b:26:24:ca:5f:8c:82:7b:59:90:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E5:C0:8E:27:C0:48:C5:96:F9:17:AD:28:91:D8:40:3E:3B:DD:3B
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/GeXAjifASMWW-RetKJHYQD473Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.188.0/22
Signature Algorithm: sha256WithRSAEncryption
86:dd:98:e6:e5:02:46:c3:85:fb:ea:b7:15:2b:cd:5e:1f:68:
d0:50:a7:01:68:64:8e:90:d3:3d:27:b1:d7:55:50:ba:5c:80:
41:fd:53:4b:9f:25:f1:77:06:1e:ee:b1:85:00:d1:3c:b1:7c:
c1:b1:13:85:56:db:be:89:dd:1b:f8:3a:6a:60:43:42:cc:7d:
e9:a0:0c:be:89:69:33:ac:2b:9e:52:a3:91:ff:d1:54:89:0f:
c3:70:a4:93:8c:ae:2a:10:d7:7e:b9:bf:35:86:8d:4c:71:82:
41:eb:3d:a4:26:4a:79:79:94:42:68:b9:75:32:f9:b2:65:d5:
66:98:8a:19:a6:d4:5f:2e:28:90:5c:e6:22:99:0f:32:bd:dc:
f7:8c:c0:04:37:46:f1:ba:0a:1c:d9:4a:06:5c:9c:3d:5f:2c:
00:af:d6:8a:87:28:9f:24:b0:1a:6d:15:93:06:e5:3d:1c:5f:
52:65:66:7b:de:71:2c:85:22:56:54:b4:00:22:23:6d:d9:d5:
4a:f1:31:6a:13:5a:c2:45:44:b6:84:79:3a:d3:93:44:ee:d2:
00:0d:d8:f3:fc:e8:b5:15:df:b2:4c:cb:06:22:dc:21:fb:52:
7f:11:04:e9:35:bf:af:76:f2:91:71:7e:ac:13:a2:50:27:a2:
9d:bf:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:16:05 2025 by rpki-client