Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DEViOCwom1Mo8K90gqcr9zPFbsw.roa
File: DEViOCwom1Mo8K90gqcr9zPFbsw.roa (raw, json)
Hash identifier: Cihwt2VtpCEg5M+ykbN0G+HzBd3bAEXknNMMljIBeis=
Subject key identifier: 0C:45:62:38:2C:28:9B:53:28:F0:AF:74:82:A7:2B:F7:33:C5:6E:CC
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D7702CD52EE36A0DAC11182FA5416E
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DEViOCwom1Mo8K90gqcr9zPFbsw.roa
Signing time: Wed 01 Jan 2025 21:48:29 +0000
ROA not before: Wed 01 Jan 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207439
IP address blocks: 5.1.67.0/24 maxlen: 32
5.1.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:70:2c:d5:2e:e3:6a:0d:ac:11:18:2f:a5:41:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4562382c289b5328f0af7482a72bf733c56ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:b3:7a:23:d0:86:78:3e:31:f3:63:6e:7e:
31:64:6e:92:1c:80:a9:7b:ba:04:d1:23:95:dc:1f:
50:77:4b:98:84:f3:45:af:69:f9:ba:1f:0c:83:e1:
fd:11:0e:6e:7f:21:15:d5:9c:98:16:90:09:dd:1f:
56:f7:8a:95:5e:a4:b8:a6:a0:40:3c:c0:0c:b4:9e:
c6:04:55:e3:4c:b2:67:71:24:fa:fe:21:05:dd:0c:
f4:47:1e:bb:43:de:4e:4c:3d:a7:c7:c1:2d:cb:e1:
78:d0:d4:ba:83:4b:a5:5d:17:e8:48:c3:cf:a3:d2:
df:9c:a5:b2:a2:24:f7:6b:7f:15:3b:5c:f8:4e:9c:
35:d6:fe:cb:a0:54:1b:09:da:fb:a8:9f:1e:8b:b8:
2c:81:95:a2:fe:c9:e0:44:f5:0c:6a:ac:06:01:fb:
c1:8e:d5:74:3a:d6:16:6e:27:86:06:5e:cd:10:85:
65:ef:99:67:bd:73:ab:b7:a5:6a:0a:a5:d0:aa:df:
30:fc:94:a6:21:27:35:ca:b5:12:09:51:2c:74:d6:
89:ae:1c:6a:33:73:35:8e:7c:f8:14:07:0c:e0:ff:
28:d5:ef:b7:ff:88:43:1f:a0:70:29:52:e0:16:6f:
77:bf:7d:9c:53:9c:1c:0b:84:5a:af:ea:72:0f:ee:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:62:38:2C:28:9B:53:28:F0:AF:74:82:A7:2B:F7:33:C5:6E:CC
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DEViOCwom1Mo8K90gqcr9zPFbsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.67.0/24
5.1.85.0/24
Signature Algorithm: sha256WithRSAEncryption
10:03:07:66:12:4d:58:0b:c4:62:39:fc:15:23:25:6b:f7:aa:
db:6a:3d:3b:49:bf:d1:40:4d:d2:60:95:b5:65:99:69:02:82:
a0:14:97:f1:71:6a:0c:8c:2c:1c:ea:c2:d5:93:20:e3:d5:89:
d6:d5:90:6e:24:ff:99:82:a2:13:e7:eb:05:88:1d:9e:dd:a6:
6d:08:26:80:fd:32:38:26:79:f7:d8:8e:07:0a:6b:10:ba:35:
df:5a:63:10:b4:f8:f5:4c:ec:ba:be:a5:7c:e7:0e:3e:64:4b:
3c:c7:36:74:48:fc:28:56:d2:c8:5a:d8:74:db:92:d5:8d:94:
8f:1b:ea:b3:2a:c1:90:5b:f4:43:aa:8d:e8:2e:5a:62:b3:20:
79:cf:76:54:26:17:f1:b6:58:6d:73:42:0c:a2:4b:8e:4f:30:
b5:b6:06:3d:b3:5f:50:1a:e6:54:43:81:61:53:c4:1c:8c:af:
5e:d6:24:06:88:13:91:7a:ab:8c:12:da:3d:61:89:49:4b:44:
76:15:c6:4d:11:d2:6a:d6:d3:8d:08:60:58:6f:85:c9:82:07:
74:81:bd:9a:c8:29:bd:89:23:e5:23:7d:30:39:32:32:1d:33:
dd:93:af:02:9e:d5:d8:e7:43:67:bb:33:52:79:01:73:ec:58:
8c:48:22:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:59 2025 by rpki-client