Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/AnGCXExWaebwYfpzVolGb5SPJ_0.roa
File: AnGCXExWaebwYfpzVolGb5SPJ_0.roa (raw, json)
Hash identifier: n/vTx/H96a62Bta4NE7WqD6azMhmZyvAYZSHsJH6umA=
Subject key identifier: 02:71:82:5C:4C:56:69:E6:F0:61:FA:73:56:89:46:6F:94:8F:27:FD
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0194B698ACE775248B488AB8D82108A68657
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/AnGCXExWaebwYfpzVolGb5SPJ_0.roa
Signing time: Thu 30 Jan 2025 09:44:06 +0000
ROA not before: Thu 30 Jan 2025 09:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35277
IP address blocks: 5.181.202.0/23 maxlen: 24
45.85.117.0/24 maxlen: 24
45.155.120.0/23 maxlen: 24
185.36.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:98:ac:e7:75:24:8b:48:8a:b8:d8:21:08:a6:86:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 30 09:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0271825c4c5669e6f061fa735689466f948f27fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:42:1e:a8:15:38:68:28:63:77:68:1a:25:
6c:f2:a0:6f:77:d0:c1:90:d2:02:53:43:c4:d5:8e:
87:eb:d8:61:39:d9:dd:47:d8:70:73:60:ee:4f:1d:
c4:3b:67:dd:3b:31:b3:fc:df:a7:e1:13:9e:a5:41:
3a:d8:4c:07:0b:08:41:c1:67:4c:04:4f:0a:92:c2:
85:ac:12:a3:56:20:df:d3:06:34:7d:90:03:70:ee:
40:1e:d9:29:df:84:f7:56:ca:bb:c2:e6:a1:dc:64:
60:00:4a:17:8f:05:e8:40:ba:40:67:56:99:ea:b5:
2f:7b:51:7f:71:31:98:4d:af:f9:d4:d2:f9:70:3e:
bc:21:c4:bd:d3:0a:10:1a:1d:5e:99:d3:92:88:41:
90:c0:58:cd:ab:e1:b8:4e:90:e3:9c:d1:5e:57:70:
35:08:a6:ed:9a:99:27:fb:9e:9d:03:b9:a0:3b:6d:
be:5f:b1:fb:5a:9c:b9:a0:3b:29:21:91:cd:05:86:
d1:f8:e5:4a:e3:89:51:9a:4e:8e:f3:f9:3b:ff:34:
66:3d:68:2a:5b:9c:b5:90:9c:b7:32:1b:7b:ae:ee:
c9:51:f2:d8:f2:62:d3:14:1b:34:b6:05:bd:dd:88:
22:9a:74:da:49:6a:a0:0e:73:16:09:08:d5:8b:c6:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:82:5C:4C:56:69:E6:F0:61:FA:73:56:89:46:6F:94:8F:27:FD
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/AnGCXExWaebwYfpzVolGb5SPJ_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.202.0/23
45.85.117.0/24
45.155.120.0/23
185.36.141.0/24
Signature Algorithm: sha256WithRSAEncryption
84:51:b3:b8:5a:2d:3b:40:30:e0:16:ee:f5:8f:cb:74:1a:a4:
f2:49:0b:cb:42:c0:3a:21:a2:23:cc:f9:fa:d2:cf:3f:22:cb:
14:54:22:06:38:84:e0:5c:50:d8:d9:25:91:80:ae:b5:f7:ac:
a9:7c:28:ce:df:73:1f:12:e5:17:41:96:d8:fa:7f:2f:09:d6:
04:fc:18:68:ff:39:4f:06:24:0e:0c:dd:1d:38:f9:4d:b5:58:
f9:61:81:cc:9a:d3:fe:0d:ca:ec:2c:32:1f:68:12:fd:21:7f:
8b:62:9c:11:68:14:7d:2b:f0:73:07:e1:8d:80:61:6f:ae:22:
42:6f:10:2a:4d:51:2e:59:38:6f:b4:a4:88:f2:70:52:a5:be:
ab:01:4d:89:c3:e4:51:92:40:48:6c:7e:4c:8d:08:01:b7:96:
f9:11:42:92:04:94:a9:8a:6f:19:15:ff:1d:6a:7f:13:21:d7:
a4:14:e0:b1:c4:4a:52:4b:7a:8d:d8:c3:72:b8:02:ee:55:3e:
32:d1:bb:05:09:4d:4b:77:51:dc:88:8a:ca:cf:b8:20:c4:f6:
c6:86:62:72:d5:dc:91:f7:44:3a:03:ea:40:19:e4:dd:be:47:
41:4e:6b:0d:dd:dd:87:e6:54:57:07:38:a7:df:48:58:78:d0:
02:9b:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:01 2025 by rpki-client