Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/5QoLvq-WQhi5T97Feko4QBKbJJw.roa
File: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (raw, json)
Hash identifier: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=
Subject key identifier: E5:0A:0B:BE:AF:96:42:18:B9:4F:DE:C5:7A:4A:38:40:12:9B:24:9C
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01942827FCCA8BCE1444996EC411524AFEA6
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/5QoLvq-WQhi5T97Feko4QBKbJJw.roa
Signing time: Thu 02 Jan 2025 17:54:56 +0000
ROA not before: Thu 02 Jan 2025 17:54:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52125
IP address blocks: 46.19.70.0/24 maxlen: 24
94.198.222.0/24 maxlen: 24
185.166.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:fc:ca:8b:ce:14:44:99:6e:c4:11:52:4a:fe:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 2 17:54:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e50a0bbeaf964218b94fdec57a4a3840129b249c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:b2:3b:88:1d:49:59:fd:5f:79:87:ac:6f:
69:8c:70:ab:0a:2d:7b:09:a7:97:3b:3c:92:5f:01:
16:22:cf:5d:4e:d0:15:f4:6e:8a:96:d4:3c:11:1f:
1b:7f:81:36:ae:e4:c5:cf:be:2a:43:78:a5:7f:ec:
b8:a7:7e:41:2e:94:8b:61:84:5a:19:7f:41:3e:f3:
0a:e2:d0:d3:b6:8b:c8:41:a9:cd:1a:b3:ee:32:4f:
fe:18:ab:fc:a9:1c:40:67:35:ea:3c:28:45:13:31:
ff:5e:7f:a1:9e:cc:21:44:72:31:17:fb:d3:40:9e:
f1:c5:c2:6e:5d:ef:c8:62:d8:86:dc:e3:ea:98:11:
44:e5:28:63:94:6f:0f:31:47:f5:84:cf:89:d4:5f:
45:a9:65:1e:33:20:b0:b4:01:1e:59:26:f2:40:5e:
95:b9:69:6c:39:ab:3c:f4:e4:66:51:89:c2:ab:7d:
a2:66:1e:ec:a6:f7:c9:01:bf:1c:76:66:32:45:38:
c3:d8:67:d8:32:f4:b9:34:92:12:1d:5d:84:7c:e4:
6d:3c:d2:52:ed:20:92:64:fb:bb:f6:a5:ed:af:3e:
24:ed:16:0f:55:77:16:0f:0e:18:7b:52:f5:bb:7d:
68:0a:a9:e9:72:05:c3:4f:3f:df:55:8a:80:98:04:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0A:0B:BE:AF:96:42:18:B9:4F:DE:C5:7A:4A:38:40:12:9B:24:9C
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/5QoLvq-WQhi5T97Feko4QBKbJJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.70.0/24
94.198.222.0/24
185.166.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:51:e1:54:1e:3f:e3:bd:ae:ab:66:44:18:e5:ec:d6:38:fc:
c9:34:7c:1e:79:f1:42:88:b6:87:16:25:dc:9a:ad:fd:18:2e:
21:cb:b4:d8:00:99:52:21:5f:e0:0f:9e:57:7d:6d:62:ca:16:
f4:26:35:6d:45:b6:f0:87:f4:ef:6b:91:f8:3e:34:2e:56:24:
f6:be:41:64:5d:78:a1:de:bd:f4:1b:f2:7a:9e:05:aa:ac:69:
2c:9b:cb:a6:76:ce:90:89:89:c0:5c:29:f0:24:ca:d0:18:be:
98:26:6d:e3:d4:4f:f6:b5:b9:c0:16:c3:81:7d:11:a5:58:86:
4c:33:21:d4:4a:c7:b9:95:67:2e:a1:ca:83:90:2c:be:9f:5a:
ef:1b:0d:99:08:c7:1c:5c:ae:b4:9e:47:f0:11:1c:11:67:19:
03:54:0f:57:b6:ad:1d:2b:82:c7:62:16:60:56:20:75:4e:71:
d1:e5:8a:90:9c:5e:c8:24:bf:93:81:33:67:58:91:7f:3b:67:
f6:23:cf:42:be:47:dc:3b:a8:78:12:5c:80:c6:f6:4f:99:ac:
89:bb:d1:9a:7a:39:0e:e0:66:e0:ad:4e:84:bf:97:b5:cd:52:
cb:db:d3:3d:61:ee:ce:58:77:fb:d1:7b:dc:2e:9b:cd:3a:2c:
9f:ac:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:56:33 2025 by rpki-client