Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_CERSIegxywv5AtCwdOpOn52hH8.roa
File: _CERSIegxywv5AtCwdOpOn52hH8.roa (raw, json)
Hash identifier: JJcyWlUEBpdW0fCwNUmYK/BlDQPJ7Scclim4XqXl3bw=
Subject key identifier: FC:21:11:48:87:A0:C7:2C:2F:E4:0B:42:C1:D3:A9:3A:7E:76:84:7F
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFFBE07B085EFA5F886E2CF4FED09
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_CERSIegxywv5AtCwdOpOn52hH8.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60168
IP address blocks: 5.32.128.0/24 maxlen: 24
5.32.129.0/24 maxlen: 24
5.32.130.0/24 maxlen: 24
5.32.131.0/24 maxlen: 24
151.237.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ff:be:07:b0:85:ef:a5:f8:86:e2:cf:4f:ed:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc21114887a0c72c2fe40b42c1d3a93a7e76847f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:a1:dd:bd:69:8d:8b:03:7f:39:fc:2a:28:
eb:76:e3:b2:1f:86:bc:0f:74:51:43:82:b5:82:f2:
81:22:a5:d8:f5:07:3c:56:4d:2a:3f:3b:c2:03:90:
c0:34:0a:95:48:d1:ed:09:83:33:86:bb:fa:e5:20:
9b:d0:17:fa:3f:5d:70:d5:4a:1c:53:f0:f9:14:d3:
02:27:f4:d7:00:62:84:51:08:d9:18:1e:24:40:48:
cf:e1:70:f5:8b:f1:e4:72:9b:33:84:8f:63:d1:ee:
bf:5e:7c:3f:8e:0a:3b:ab:38:16:ca:56:e7:21:56:
80:5e:35:be:b8:74:92:02:ba:c1:de:a8:10:6d:f0:
07:fb:e9:be:84:3f:ab:44:4a:b4:f0:8b:15:02:14:
16:13:f2:7a:f4:4d:a5:01:5c:7a:1b:37:a2:50:4f:
e6:c8:33:1e:4e:ea:15:21:83:08:13:d2:a5:cf:ae:
05:1c:5b:52:9b:18:10:c0:72:92:64:e7:8e:67:38:
f7:33:58:94:34:0d:05:82:cb:3a:92:ce:35:92:7a:
da:4a:de:44:46:49:15:04:9a:6b:24:48:ef:24:54:
c2:c6:bd:7d:9b:1d:a1:fc:4b:e9:6b:f0:93:b5:f6:
a9:f0:37:bf:f3:62:78:68:94:9a:d2:13:10:8b:71:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:11:48:87:A0:C7:2C:2F:E4:0B:42:C1:D3:A9:3A:7E:76:84:7F
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_CERSIegxywv5AtCwdOpOn52hH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.128.0/22
151.237.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:3e:2c:05:26:7b:4d:d8:cf:2d:ed:17:64:e9:be:ba:39:8e:
bc:b7:44:ca:64:22:0f:b9:9d:84:af:fe:c0:1e:62:d6:ab:45:
6b:23:11:09:9d:69:57:3f:69:6a:45:64:a2:68:86:21:06:11:
87:c2:9d:d7:fd:4e:54:d8:d1:3f:8e:59:1b:7c:10:48:26:1b:
d1:4a:14:0a:e3:2d:f2:e7:d7:dd:89:71:35:d3:81:d8:a5:40:
34:39:02:d2:26:fa:a9:5a:83:78:ec:32:72:ee:28:df:b9:28:
cf:48:7e:10:8d:65:af:5a:2e:46:5b:45:8d:6f:1c:7c:b5:a2:
b0:0e:b0:ca:97:2e:38:51:16:6d:4d:44:6d:ab:97:98:08:d8:
2f:ed:e1:c0:4b:b3:04:5a:74:1f:2b:7f:cb:39:44:2b:70:32:
cb:b7:9a:96:8f:2c:62:8c:12:03:97:f3:47:3e:41:93:42:21:
3a:1d:fe:dc:f2:79:1c:82:ae:1c:e9:bc:43:88:f3:66:dd:17:
f6:be:5c:de:05:27:c8:7d:90:5e:ed:01:4e:ec:69:3e:13:d2:
08:c3:60:21:44:0b:14:5b:54:d7:92:ad:e7:1d:76:ef:68:36:
01:10:4a:02:84:fd:a4:83:c5:b2:8a:e4:e7:d1:1b:12:41:1a:
30:b7:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:48 2025 by rpki-client