Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/asVMiTxQoOH4zq5J04HFS7t7oew.roa
File: asVMiTxQoOH4zq5J04HFS7t7oew.roa (raw, json)
Hash identifier: G//y1AaGY18G7+2P1OPo67QHsRKPZprev6YUEMRwkmo=
Subject key identifier: 6A:C5:4C:89:3C:50:A0:E1:F8:CE:AE:49:D3:81:C5:4B:BB:7B:A1:EC
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D7758FF1C025C5CF1B61678992381B
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/asVMiTxQoOH4zq5J04HFS7t7oew.roa
Signing time: Wed 01 Jan 2025 21:48:30 +0000
ROA not before: Wed 01 Jan 2025 21:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215163
IP address blocks: 5.180.194.0/24 maxlen: 24
94.247.43.0/24 maxlen: 24
2a00:f826:8::/48 maxlen: 48
2a09:e1c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:75:8f:f1:c0:25:c5:cf:1b:61:67:89:92:38:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac54c893c50a0e1f8ceae49d381c54bbb7ba1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:ca:3e:1f:f8:79:c8:34:53:ac:c5:3e:2b:
c8:8c:31:08:e9:0e:d8:cd:8b:8f:5f:09:1b:19:9c:
48:a4:1b:12:d3:df:57:bd:cc:10:95:ef:5a:02:01:
2e:9d:c2:5b:0f:8f:74:5b:f1:68:6c:8f:dd:68:7f:
b0:0a:70:b1:04:c9:97:a8:ae:88:69:fc:ec:9b:3e:
34:6c:81:ec:0d:e5:14:6c:aa:36:80:c2:75:f7:ab:
6c:e6:5b:5d:4f:6a:a6:f4:5a:36:66:7e:c2:4f:e8:
14:f6:b0:cf:c3:84:5c:a8:b4:79:b5:28:d2:5e:4a:
45:18:20:45:1f:ed:c9:2b:74:3c:6e:c1:1f:fc:d6:
c4:d9:04:dd:43:23:1c:64:94:c6:9e:d3:c8:3e:b0:
6b:30:6e:a6:8c:c8:6b:32:81:14:f1:81:60:3b:1b:
bb:2f:8f:11:15:e1:50:81:76:2c:e4:a5:be:ba:31:
1f:b4:72:0d:fd:27:16:4a:43:f2:09:a5:73:75:3f:
ad:e5:68:fb:ed:99:f1:6e:27:b3:29:31:80:90:39:
b2:21:db:88:9c:a2:a7:c5:d8:3b:7c:1e:38:ff:ac:
ce:94:bf:03:04:2e:87:a5:ad:2a:75:b2:85:b4:14:
41:db:f9:26:85:d8:b5:7e:d6:6d:50:92:5d:ad:c9:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C5:4C:89:3C:50:A0:E1:F8:CE:AE:49:D3:81:C5:4B:BB:7B:A1:EC
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/asVMiTxQoOH4zq5J04HFS7t7oew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.194.0/24
94.247.43.0/24
IPv6:
2a00:f826:8::/48
2a09:e1c2::/32
Signature Algorithm: sha256WithRSAEncryption
5f:35:71:36:3f:20:e7:85:cb:3e:e4:a1:1a:79:50:85:cc:83:
46:21:0b:e5:a1:8e:45:22:83:cf:08:d7:25:31:94:2a:6b:1b:
67:ff:eb:83:5f:36:3e:16:46:ad:17:1b:74:a3:a5:1f:14:dd:
e9:dd:0c:09:83:6b:6e:a3:3e:e3:09:47:8b:be:e5:af:82:24:
e2:d3:b6:a7:dd:4d:8f:e5:e2:ea:39:9f:4f:1b:65:03:f5:4a:
c8:95:d7:06:04:bf:e7:f9:36:08:9d:7d:ac:cd:cc:93:58:e1:
60:6d:eb:1d:b8:0f:30:20:4d:24:5d:1f:c4:f5:c2:82:1e:3b:
39:4c:86:bf:d4:d7:13:d4:ad:40:1a:5a:ca:a6:90:6a:4c:a0:
0c:64:98:ae:da:59:10:08:80:ef:b5:15:d5:7a:a9:cb:06:96:
7f:50:c4:b6:fc:68:7c:54:06:35:2d:28:dc:c4:39:06:09:52:
1e:94:7e:b5:bb:f6:ff:67:cd:b7:26:b6:4e:96:e3:92:5b:a8:
10:35:6b:ac:4e:14:11:f1:51:5c:41:ca:35:0b:57:b8:c8:b6:
a9:a3:65:88:a9:c7:b3:c5:ca:12:7a:35:8c:69:d3:de:f0:ff:
7a:0a:2d:e1:01:a7:bb:2b:16:84:d4:a3:fd:e6:71:c0:be:5f:
9f:4b:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:46 2025 by rpki-client