Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/awtxlmXxYey33LP8ipAWouNVaYo.roa
File: awtxlmXxYey33LP8ipAWouNVaYo.roa (raw, json)
Hash identifier: zNAYUTiCUJALspJOKIp0H4AMNJ4nchOt12U598dMJYs=
Subject key identifier: 6B:0B:71:96:65:F1:61:EC:B7:DC:B3:FC:8A:90:16:A2:E3:55:69:8A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B252C4617A8F9300455E8398EB3A37
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/awtxlmXxYey33LP8ipAWouNVaYo.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 5.253.44.0/24 maxlen: 24
5.253.47.0/24 maxlen: 24
45.8.188.0/24 maxlen: 24
45.8.189.0/24 maxlen: 24
45.8.206.0/24 maxlen: 24
45.9.4.0/24 maxlen: 24
45.9.7.0/24 maxlen: 24
45.66.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:52:c4:61:7a:8f:93:00:45:5e:83:98:eb:3a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b0b719665f161ecb7dcb3fc8a9016a2e355698a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:8d:95:9a:09:25:8b:d6:3b:7b:34:35:f6:
87:84:91:4c:84:8f:74:dc:ca:a3:bc:5e:c7:b9:27:
9f:d6:8f:a3:b8:88:16:73:a5:08:7d:6a:b7:de:bb:
ca:39:2b:19:29:34:dd:23:9c:51:cc:57:e9:e9:70:
27:89:06:b1:36:00:de:f3:03:9d:f7:65:83:7d:16:
1e:0e:5e:1b:2e:9d:23:06:a2:80:1d:a1:52:cd:22:
3b:d8:2f:b9:88:08:75:59:6a:46:ce:4c:3a:ef:40:
84:e2:0f:18:15:bd:0d:8a:3f:09:01:33:e9:df:c8:
8f:86:ae:39:f6:69:b9:bd:fe:50:14:ce:99:82:d0:
47:85:ec:a6:c9:d1:e7:13:70:f3:a2:42:3d:be:ad:
e9:eb:af:92:15:e4:3d:00:6e:5c:3f:ae:a8:4b:e2:
86:c6:a4:fa:da:74:80:cb:f9:8c:c7:35:b2:b1:66:
92:af:e2:bf:3e:94:42:fa:46:7d:17:7c:4d:9e:6d:
d1:21:09:68:27:75:94:ae:f3:ed:c1:91:77:fc:a2:
0d:30:dd:e2:d3:e6:58:af:d1:eb:88:17:ce:6c:a9:
e3:a4:38:05:6a:c4:5e:03:49:05:cc:ef:78:a2:34:
b6:bd:68:9c:a4:4e:dc:63:00:59:60:72:18:5b:56:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0B:71:96:65:F1:61:EC:B7:DC:B3:FC:8A:90:16:A2:E3:55:69:8A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/awtxlmXxYey33LP8ipAWouNVaYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.44.0/24
5.253.47.0/24
45.8.188.0/23
45.8.206.0/24
45.9.4.0/24
45.9.7.0/24
45.66.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:93:83:ee:65:ae:7a:7c:c5:f4:a1:42:a5:53:fe:c4:1b:6e:
60:32:72:64:24:5a:b0:b4:53:3c:79:fa:6e:24:ed:b7:8e:a7:
c7:e2:f5:91:35:d6:28:04:1f:bc:ee:96:14:c5:02:66:2e:b5:
6d:0d:57:4f:32:7e:8d:ce:b6:dd:96:8d:47:b4:55:0e:d5:a6:
8b:ef:8c:40:e2:8a:67:e6:c4:c0:13:c5:29:cc:ab:84:c8:7f:
c1:70:cc:8f:9d:a5:44:07:d5:d7:6d:f4:96:c8:b0:12:1e:0d:
41:fc:70:e2:2d:61:ac:de:d4:3a:d3:1a:9e:3a:5e:75:ef:da:
8d:91:3c:0c:a7:49:8b:4a:83:2d:67:7a:db:68:0b:92:92:a7:
c0:d7:76:1a:f7:b0:1c:d0:ed:11:8a:b7:25:82:f2:20:2d:e8:
03:d3:76:c1:83:17:a6:99:59:0c:c1:1b:64:e7:b2:26:79:05:
46:1d:81:3f:72:09:f8:8c:1f:c8:95:d6:da:e4:f5:7e:09:ac:
18:48:6b:d7:c7:50:63:62:a0:f9:78:92:d3:ce:1f:a7:a5:a3:
a8:43:f3:ff:77:46:11:fc:28:e1:ad:56:2d:01:c5:67:78:0c:
23:cf:b8:ed:4c:41:4e:2f:10:cc:38:ff:ee:75:b2:7d:c9:c0:
4a:35:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:42 2025 by rpki-client