Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa
File: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (raw, json)
Hash identifier: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=
Subject key identifier: 5A:FA:77:4A:7F:59:47:89:55:CA:B0:A8:2D:90:79:CD:B3:AD:89:8E
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 019420D642F2676B45DD5DB57C4BE350CE7A
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 5.145.64.0/19 maxlen: 24
5.145.96.0/21 maxlen: 24
185.74.144.0/22 maxlen: 24
2a00:d2a0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:42:f2:67:6b:45:dd:5d:b5:7c:4b:e3:50:ce:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5afa774a7f59478955cab0a82d9079cdb3ad898e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:c2:e2:85:34:ff:91:4d:ed:4a:13:8c:4b:
5c:34:3b:bf:9e:90:f0:d5:54:73:80:66:80:ef:f7:
02:61:38:1d:4d:5e:50:99:c1:0d:69:40:da:ed:a3:
a7:31:1b:97:a7:89:84:0e:0e:51:ca:26:1d:22:50:
91:a8:38:1c:3a:73:28:64:9b:20:41:fe:6d:de:8a:
34:b5:ae:12:50:d4:1e:4a:55:08:74:00:26:79:b6:
db:d5:6c:fc:58:b7:4c:bb:3e:3f:e6:f6:b0:08:e0:
5c:bc:12:83:b1:08:d7:f1:f9:70:a5:9e:f3:2d:39:
2e:18:8c:11:23:b2:67:ed:73:6b:2e:02:84:ce:06:
03:17:32:88:da:e0:aa:eb:61:0b:d2:d0:78:5f:36:
03:26:ef:47:fb:69:dd:ef:ad:90:30:c0:5a:44:60:
b0:a3:49:e6:15:42:2a:4e:c4:e0:de:00:e9:98:65:
60:9a:14:d1:d2:1d:c8:fe:2c:2b:03:c3:20:f0:5b:
46:43:45:a8:50:b6:d1:4a:1d:3c:7b:e9:dc:05:bf:
2f:3d:30:4f:22:d2:0a:66:49:26:73:aa:e0:9c:a1:
db:8a:96:55:c0:b6:6a:40:c8:9e:dd:6d:ae:90:14:
82:f4:76:99:db:5c:21:9f:e6:b3:db:d9:f8:4f:f2:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FA:77:4A:7F:59:47:89:55:CA:B0:A8:2D:90:79:CD:B3:AD:89:8E
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.64.0-5.145.103.255
185.74.144.0/22
IPv6:
2a00:d2a0::/29
Signature Algorithm: sha256WithRSAEncryption
63:ef:b5:a6:74:cc:5d:61:bc:1d:a8:85:3e:55:cb:5e:82:3f:
db:38:78:ff:6e:99:ba:d5:91:55:dc:57:3a:49:4f:0a:72:09:
ba:e1:be:8c:b5:54:a2:52:eb:b2:28:28:c5:3e:20:f5:da:cd:
b7:9e:27:f9:51:64:08:5f:63:f0:bc:1b:5e:3c:d3:48:08:df:
16:a3:64:f8:67:10:32:32:26:35:42:af:74:ad:ca:80:3d:f6:
81:04:f0:ba:6f:fd:f1:d9:02:f9:58:6a:7f:9d:03:4a:95:2b:
29:9e:61:c0:d0:b7:1a:01:68:35:a1:8a:10:1f:fe:17:ba:b4:
10:41:6b:32:9f:22:ab:8a:c7:6e:7a:f0:3e:18:b0:69:40:99:
cb:c9:46:d8:51:b9:12:c2:9f:0b:e2:ef:ba:1d:20:90:df:e2:
be:42:a4:09:32:a2:03:3f:7d:ac:0f:5a:aa:e4:67:dc:5d:65:
5a:1c:1f:5d:70:c5:3c:00:c8:a0:8a:50:0b:8a:54:32:0f:01:
14:fe:0b:8f:72:02:f1:90:40:43:f3:94:f9:8d:1d:53:f4:ce:
d0:b2:14:42:69:1b:07:61:ba:fe:2f:cc:6c:72:79:85:dd:2b:
43:0c:10:db:7c:cb:28:c0:df:76:a7:1d:09:73:c0:a1:a1:bd:
c7:f0:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:13 2025 by rpki-client