Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/05VR7Apif7PaHK5Yg8kh_VSUV9I.roa
File: 05VR7Apif7PaHK5Yg8kh_VSUV9I.roa (raw, json)
Hash identifier: ihCDhiECgIYwZFBKfq/BQEQQj9YqY+DvRPYwF+Y4068=
Subject key identifier: D3:95:51:EC:0A:62:7F:B3:DA:1C:AE:58:83:C9:21:FD:54:94:57:D2
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01941FFA2F053B8B94DA7C40703FA5EC8305
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/05VR7Apif7PaHK5Yg8kh_VSUV9I.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 137.174.0.0/17 maxlen: 22
137.174.128.0/18 maxlen: 22
137.174.192.0/19 maxlen: 22
147.123.32.0/19 maxlen: 22
147.123.36.0/22 maxlen: 24
147.123.128.0/17 maxlen: 22
155.204.0.0/17 maxlen: 22
155.204.119.0/24 maxlen: 24
155.204.128.0/18 maxlen: 22
155.204.200.0/21 maxlen: 24
155.204.208.0/21 maxlen: 21
155.204.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2f:05:3b:8b:94:da:7c:40:70:3f:a5:ec:83:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d39551ec0a627fb3da1cae5883c921fd549457d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:c4:3c:4d:77:68:76:29:a1:33:64:ac:b6:
2a:26:cd:eb:cc:98:f8:a7:b5:e0:41:53:ca:d1:85:
ea:ce:ee:f8:b4:2b:57:1b:b0:2f:8e:5d:86:39:2d:
6c:aa:de:03:d0:c3:fa:ab:25:25:25:b8:ad:1c:eb:
70:85:f4:04:f8:7c:88:5f:e6:9e:1f:da:07:72:53:
8f:46:89:18:2c:12:cd:86:d8:81:99:83:68:32:aa:
46:45:e5:03:52:65:d4:06:e7:2d:f6:c3:15:37:7a:
c9:1c:0e:f4:f4:e4:3c:c4:7f:0d:d3:90:16:18:17:
18:87:63:1e:c2:f9:47:33:2b:1e:f6:4b:8f:87:8c:
8d:9e:f9:62:3f:a5:f8:cc:07:bf:e6:73:38:65:e1:
0d:33:98:69:9f:ce:a3:81:37:9d:e4:01:3d:ff:f5:
e1:6c:20:c0:05:ef:e7:49:40:90:26:4b:45:0e:57:
69:06:6f:d7:42:17:b6:fa:72:d9:e8:b4:d5:bd:1d:
54:b5:6f:1d:77:9d:71:2d:e9:03:d3:e3:a2:ea:c6:
43:ff:ca:04:74:47:14:8a:b8:33:ae:33:ca:2d:cb:
ff:f5:88:26:23:0b:0a:d5:f6:71:fc:18:1e:ec:9b:
d2:4a:80:78:5d:ee:c7:5c:5d:7f:fc:d5:0c:ff:47:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:95:51:EC:0A:62:7F:B3:DA:1C:AE:58:83:C9:21:FD:54:94:57:D2
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/05VR7Apif7PaHK5Yg8kh_VSUV9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0-137.174.223.255
147.123.32.0/19
147.123.128.0/17
155.204.0.0-155.204.191.255
155.204.200.0-155.204.223.255
Signature Algorithm: sha256WithRSAEncryption
a4:f6:a9:33:87:14:d3:fa:0f:9d:da:7f:6b:59:1d:02:a2:9e:
8c:5a:db:5e:71:fb:5a:a6:57:7c:bb:4c:6a:5d:e9:a2:b7:35:
07:78:f1:5a:e7:67:97:1d:c1:b1:73:a3:ac:34:a4:2e:5b:de:
78:d0:16:d5:44:82:22:f8:a1:ab:03:aa:64:48:28:17:0d:f1:
c4:43:a7:65:8e:a4:1c:0f:c0:7e:77:b4:22:cf:c5:6a:ad:57:
50:e8:bd:5f:9e:a9:26:f3:fe:0f:4e:4e:b4:87:bd:db:c2:a8:
95:4e:2f:c0:8b:3e:3f:d4:d0:78:f0:14:26:07:3a:41:ed:0b:
e8:26:02:c3:eb:f8:92:55:bb:88:63:c8:f1:80:2d:b1:3c:68:
7c:c5:20:4f:97:57:9b:54:eb:2d:03:05:20:7e:b9:fd:ab:a9:
7e:a1:05:6a:42:55:06:fb:5b:a5:9a:23:90:20:ab:37:41:e6:
9e:60:b3:4d:b6:71:a3:79:cc:be:af:2b:92:c1:31:48:29:4e:
4c:b3:20:45:e1:0d:37:50:b4:02:74:de:b2:71:a8:7c:a3:5a:
56:c3:2f:3a:a6:6e:70:cd:e5:62:20:ee:2f:26:14:7e:f4:ba:
e1:db:97:e3:ee:21:81:e3:8e:ae:84:39:b3:ba:05:a1:30:8c:
29:aa:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:42 2025 by rpki-client