Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_0sjthYRaAet3JbRp0XUDRbz-GA.roa
File: _0sjthYRaAet3JbRp0XUDRbz-GA.roa (raw, json)
Hash identifier: ul8jawKmMZl7pMGLxI/c/PCpmLqBlcwBurtPIn7OQwg=
Subject key identifier: FF:4B:23:B6:16:11:68:07:AD:DC:96:D1:A7:45:D4:0D:16:F3:F8:60
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 019426D9CF8A8D81BE82ED6EE5566868B84F
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_0sjthYRaAet3JbRp0XUDRbz-GA.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205847
IP address blocks: 5.181.56.0/24 maxlen: 24
5.181.57.0/24 maxlen: 24
5.181.58.0/23 maxlen: 23
5.181.58.0/24 maxlen: 24
5.181.59.0/24 maxlen: 24
2a0c:a741:1000::/38 maxlen: 38
2a0c:a741:2000::/38 maxlen: 38
2a0c:a741:3000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cf:8a:8d:81:be:82:ed:6e:e5:56:68:68:b8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff4b23b616116807addc96d1a745d40d16f3f860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:c9:57:e1:62:25:5c:34:51:c9:c2:2f:8a:
a6:75:db:b8:ce:8c:b5:06:de:88:8a:75:6e:3a:90:
e6:0a:24:e2:9a:c6:13:44:34:44:f2:35:4a:5e:89:
dc:5c:26:e6:fd:db:67:18:87:a4:41:47:de:0d:af:
25:1a:d3:7f:a9:a4:36:e7:fc:ab:b7:74:8f:22:2b:
4e:d4:6c:0e:a8:b3:52:0a:ed:46:cc:12:42:f5:13:
30:c4:18:78:5c:fe:24:07:5d:44:79:d5:1b:8e:6f:
0f:52:48:80:f3:30:bc:80:ab:69:95:1c:26:2e:c8:
f6:5f:6a:8c:71:51:64:83:f8:c4:0d:50:fb:b7:7b:
a0:71:eb:72:a7:06:76:26:af:1a:ce:50:25:96:55:
23:38:3c:a7:b4:5d:32:04:23:45:06:5d:1a:9e:79:
bc:45:a1:c1:8d:ed:a1:45:b1:3d:7c:75:ff:5f:b1:
07:03:86:c7:86:90:a7:39:2d:78:23:36:cf:94:42:
af:9d:f0:86:a2:6e:58:2e:66:3d:e1:79:66:73:36:
44:5a:fc:4d:97:77:b7:4d:9c:4d:fb:58:d2:d9:fd:
08:7f:e0:2a:45:08:40:be:97:e2:fd:4a:fe:50:6f:
49:f3:43:13:6a:85:14:03:21:be:0e:5f:96:de:9f:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:23:B6:16:11:68:07:AD:DC:96:D1:A7:45:D4:0D:16:F3:F8:60
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_0sjthYRaAet3JbRp0XUDRbz-GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.56.0/22
IPv6:
2a0c:a741:1000::/38
2a0c:a741:2000::/38
2a0c:a741:3000::/38
Signature Algorithm: sha256WithRSAEncryption
8a:11:e4:ba:a7:76:01:4c:87:9f:97:b1:aa:3e:a7:73:f5:83:
b8:62:ed:67:47:67:af:e6:9b:2b:eb:e7:48:52:e7:fa:84:d8:
52:9e:31:74:fd:78:4e:99:25:ca:d9:8f:6f:cb:41:d3:65:23:
6f:ca:1c:95:e8:e7:a0:2d:e2:f2:77:0e:8c:de:f1:0a:44:c2:
b5:35:89:df:cd:6c:9f:df:af:ce:51:06:dd:1b:a5:03:9b:4c:
05:76:4c:0e:36:b0:57:91:2e:2b:d6:13:fa:09:33:97:9e:1f:
97:fe:15:92:96:c4:f2:67:64:31:d1:00:35:f8:52:7a:39:47:
5e:b4:08:b2:b5:32:2c:86:d8:0d:f3:50:41:6b:14:6b:38:09:
d7:a7:b8:55:13:d1:6a:59:3d:ab:6f:b4:4a:aa:07:e0:b9:6a:
24:0d:93:7b:1a:66:4d:70:6a:5d:85:a0:9e:bd:db:3f:69:b3:
86:d7:35:03:21:06:83:6b:1e:68:08:c7:c1:5f:cd:0a:29:69:
fa:54:cf:f5:d8:0d:76:30:e8:42:d2:97:9d:da:63:85:d9:89:
ed:fb:82:51:1c:cf:ed:6a:cb:79:92:d1:01:b1:a0:4c:93:93:
81:f2:33:ad:5d:76:d3:4c:ed:78:75:31:f6:81:82:72:e2:21:
37:27:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:41 2025 by rpki-client