Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/RagZVp33x_ZhRPfhRcY-ePMpfNA.roa
File: RagZVp33x_ZhRPfhRcY-ePMpfNA.roa (raw, json)
Hash identifier: gMsYucRSntBj1BaVj8EkbP09b3qQ09XAtS6QWD6kZsw=
Subject key identifier: 45:A8:19:56:9D:F7:C7:F6:61:44:F7:E1:45:C6:3E:78:F3:29:7C:D0
Certificate issuer: /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial: 019422203CD8646BBC35A4FD9836A40DB554
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/RagZVp33x_ZhRPfhRcY-ePMpfNA.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206947
IP address blocks: 5.63.17.0/24 maxlen: 24
2a10:ff00::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3c:d8:64:6b:bc:35:a4:fd:98:36:a4:0d:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45a819569df7c7f66144f7e145c63e78f3297cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:b4:f6:ea:c4:dc:c7:77:f6:fc:42:b5:21:
29:1b:f8:1a:77:62:05:8a:e9:7c:76:64:20:6e:4a:
e0:b3:d0:a6:ea:f0:db:82:a8:64:5d:f2:7f:73:5d:
68:d2:ed:61:4c:67:e1:71:d4:da:a6:21:59:bc:c6:
41:6e:ec:6b:25:58:95:92:86:f4:89:15:50:fb:6e:
7f:4f:25:af:8d:9e:b4:ad:2f:93:de:10:fd:47:d9:
90:7d:58:80:f6:3f:f6:15:ca:6e:05:70:fb:1f:bb:
55:0f:e2:03:69:50:a7:a3:14:e6:29:e7:02:41:9c:
85:49:51:fe:9e:2a:e3:21:4a:57:7c:14:15:71:53:
0e:e2:cc:69:21:f4:d3:bc:ce:e0:4e:44:97:a3:8d:
70:63:46:30:5b:90:a6:0e:25:42:48:c4:3a:5d:c6:
c1:ac:f2:73:bc:34:ae:21:0a:3d:15:e0:d2:90:2f:
24:fc:e0:4a:ab:24:ad:bf:80:23:11:9c:ea:fe:5c:
6e:51:e2:eb:3d:80:eb:26:84:ec:7b:0c:a2:67:74:
2b:f2:6a:3f:ef:8d:b8:48:80:13:b3:5c:92:35:3f:
a1:a4:fd:4a:db:7a:a3:2e:fd:82:17:be:79:20:ad:
84:14:5c:dc:93:6b:b7:f8:7e:71:56:a5:2a:66:33:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A8:19:56:9D:F7:C7:F6:61:44:F7:E1:45:C6:3E:78:F3:29:7C:D0
X509v3 Authority Key Identifier:
keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/RagZVp33x_ZhRPfhRcY-ePMpfNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.17.0/24
IPv6:
2a10:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
82:a6:1e:0f:96:72:6a:a6:c4:df:b7:be:9f:b1:3b:0f:59:7c:
79:d7:fd:39:9c:4b:dd:9a:bd:10:84:3e:f6:44:8c:b3:00:2b:
8f:59:79:ef:5a:b9:87:b3:ef:58:86:4d:7b:99:8e:e2:39:d4:
e0:e1:73:8a:59:53:88:eb:de:23:11:87:2b:0c:7f:f0:ec:0f:
18:93:27:95:57:de:60:c4:2c:b4:c8:1f:11:0a:bf:2c:87:fb:
ce:8d:0f:e7:04:24:cd:22:44:a7:61:15:0b:56:09:77:d0:cd:
e1:42:da:47:5f:96:54:64:51:c3:f8:5a:b4:74:f8:f7:34:86:
48:62:bd:e6:03:8d:7d:cf:65:2e:f0:29:7f:7b:f0:d4:7f:3e:
90:bb:18:d2:b8:61:f3:3e:5c:73:7c:30:3f:b2:57:ed:22:c5:
9f:b3:bf:3e:8d:52:94:4e:23:32:92:d8:72:10:cc:e9:13:c8:
42:57:5c:fa:e1:0e:19:88:85:e3:51:fe:39:0b:20:9a:45:c6:
0f:e3:a7:20:02:ca:13:3e:63:f6:e7:25:24:f0:5d:2c:c8:1c:
19:25:a8:ef:3f:b2:19:65:bc:9b:c9:47:3c:2d:30:9d:0f:b4:
17:da:b9:89:69:3a:e3:e3:43:d9:e8:e5:90:ab:d1:53:94:e8:
98:49:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:29 2025 by rpki-client