Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa
File: m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa (raw, json)
Hash identifier: 1a8qCx4A/hh4MAoCIXUYRzaVBoJjd0SdneNnyPupOv8=
Subject key identifier: 9B:44:6D:E7:20:3C:18:6B:50:CD:E2:30:7B:2C:1D:08:A6:77:BC:F9
Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial: 0194282385C92583061257107061D54AAD60
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa
Signing time: Thu 02 Jan 2025 17:50:04 +0000
ROA not before: Thu 02 Jan 2025 17:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206483
IP address blocks: 5.180.188.0/22 maxlen: 24
185.185.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:85:c9:25:83:06:12:57:10:70:61:d5:4a:ad:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Validity
Not Before: Jan 2 17:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b446de7203c186b50cde2307b2c1d08a677bcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:fe:ef:f6:4b:98:74:e6:93:aa:41:3d:2a:
46:32:15:87:b7:fe:b2:e2:5f:39:12:1b:3b:43:22:
2a:18:48:30:61:98:ad:2d:9a:bd:ac:f1:d2:13:61:
be:6b:b4:88:0f:2c:e0:38:5a:af:bb:f7:cf:3a:62:
25:13:43:61:8b:b1:ed:aa:ee:9c:4e:a0:70:81:96:
63:f9:8e:a9:55:70:0e:37:b0:ff:9e:3f:60:f4:da:
a0:ec:ee:8b:46:f9:c3:38:27:4e:c8:cf:53:67:90:
79:12:d4:f1:a0:c9:31:d6:fe:19:8a:18:b7:d2:b5:
f9:af:5a:e1:af:f3:22:2a:a6:76:f7:d9:b8:30:ff:
ee:ed:65:4a:08:c9:d1:dc:c4:e1:c0:7c:16:5e:26:
b2:85:8a:50:55:7c:f1:1f:42:fe:65:b2:ab:e9:61:
54:ee:08:99:c1:a0:5c:a6:c2:ea:03:54:b2:b5:1f:
7b:25:02:e8:e6:61:54:39:57:f3:c8:16:25:47:bb:
d8:86:df:69:c9:9c:35:6c:9f:58:70:82:35:ae:8e:
5c:06:52:26:20:b1:23:0d:76:06:00:1c:16:bd:cd:
29:3f:17:5b:cc:cc:c6:30:bc:be:93:27:72:bb:4a:
38:ba:f5:33:5c:c3:89:a1:1a:4a:5f:a2:1b:3c:12:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:6D:E7:20:3C:18:6B:50:CD:E2:30:7B:2C:1D:08:A6:77:BC:F9
X509v3 Authority Key Identifier:
keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.188.0/22
185.185.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:8e:e9:8e:d2:38:d1:d7:ea:18:4a:56:73:f4:43:ee:e1:97:
55:a1:7f:b0:f9:22:36:9a:bd:60:4c:d2:f0:9c:e8:9c:fa:36:
e3:5d:66:e9:43:f1:c9:d2:0b:0e:b3:5b:67:d1:d9:6b:c3:46:
79:d2:4f:35:3d:09:5e:d7:5a:a1:cd:08:ce:a9:f5:44:d3:e8:
02:30:db:0d:4f:25:f5:a8:15:0c:3a:9d:24:7a:ad:e3:ec:9a:
54:bb:77:5f:c7:7e:eb:f7:51:48:77:0d:ea:db:61:68:68:27:
1e:8e:7b:b7:0c:c2:51:ce:25:a7:7a:b1:bb:0f:4e:d5:23:0e:
c4:01:b1:32:0b:99:6e:d7:e7:56:65:4b:2c:34:ad:84:df:42:
a2:33:78:6f:1c:bb:10:ef:e4:bb:e5:44:bb:74:33:bf:b9:ca:
1b:e6:b9:38:08:a0:04:4a:c8:32:33:95:85:d0:3d:d0:4d:5e:
14:12:09:9a:29:21:eb:4f:6c:27:f4:84:23:db:d5:cc:64:76:
c3:3a:a1:e2:a5:dc:ce:57:e1:3f:a3:90:3d:63:a7:5a:12:7c:
c1:46:08:44:66:16:05:68:c1:3a:58:c2:96:7b:05:99:7e:17:
dd:50:fa:5e:a8:7b:26:b1:db:1c:e0:5f:9d:8b:8d:9a:2e:21:
ed:8a:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:13 2025 by rpki-client