Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5XLyKjCQ34TKvtTvjl5bTNJxjbI.roa
File: 5XLyKjCQ34TKvtTvjl5bTNJxjbI.roa (raw, json)
Hash identifier: e88dYuNcRPHi+RBZmMZySEQdTnjmMroQQTSHlbjlxuc=
Subject key identifier: E5:72:F2:2A:30:90:DF:84:CA:BE:D4:EF:8E:5E:5B:4C:D2:71:8D:B2
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A41EC1F8CAA1883E7374D452F4DA9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5XLyKjCQ34TKvtTvjl5bTNJxjbI.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48115
IP address blocks: 185.133.72.0/24 maxlen: 24
185.166.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:41:ec:1f:8c:aa:18:83:e7:37:4d:45:2f:4d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e572f22a3090df84cabed4ef8e5e5b4cd2718db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:59:cc:8b:f5:50:1b:9a:06:d6:95:e8:8a:5f:
0e:2a:f2:0a:d5:80:32:b0:a1:af:1e:c4:73:2c:7c:
2a:59:4b:d3:3e:13:52:5e:01:13:25:79:b9:ce:a7:
5b:98:73:c9:fd:9c:c6:65:85:82:15:33:12:80:ad:
f8:b8:6c:a7:52:0b:86:d2:1c:59:73:78:5f:a8:26:
0e:e9:b5:09:3c:0b:62:0c:e5:1d:61:2b:ad:20:a3:
a8:bf:6a:da:a7:c0:fe:48:d9:78:71:d4:1e:7f:db:
10:80:b2:e5:71:0c:8e:91:96:f3:b5:70:a3:8e:bd:
7a:46:96:54:07:d9:50:ae:9e:ff:8b:46:9c:b0:2b:
04:f8:66:11:a1:50:5b:c4:73:de:3c:8b:a1:89:54:
4b:76:b9:ca:47:58:92:cb:85:23:9d:dc:96:c7:6e:
38:17:9c:bd:41:99:a1:d7:2c:ff:a0:d3:2e:ea:e2:
ae:ca:80:de:47:3f:f6:99:de:df:bb:f1:48:f7:6b:
5c:76:b3:a1:29:8e:d0:82:22:f9:f7:cf:0f:fa:cb:
41:e0:0b:fc:6c:0c:d5:96:42:cc:28:51:04:49:a9:
a6:bc:6f:8b:c5:b2:ed:3d:9d:ed:c8:a6:87:0b:d4:
5a:3a:74:1c:75:38:48:c9:90:be:57:dd:88:24:c0:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:72:F2:2A:30:90:DF:84:CA:BE:D4:EF:8E:5E:5B:4C:D2:71:8D:B2
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5XLyKjCQ34TKvtTvjl5bTNJxjbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.72.0/24
185.166.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:47:ee:be:6d:70:97:dc:3e:ec:d4:10:c1:1b:4a:1d:9d:7b:
ee:5b:c1:36:cc:2e:15:58:e3:cb:d8:b9:5f:59:d7:73:b7:b9:
ea:7c:d2:28:1c:0d:1b:1e:73:b3:af:16:30:cd:9c:e5:83:97:
25:ba:67:df:80:27:d1:d9:89:c3:78:f5:7f:34:75:73:ee:7a:
43:c4:65:e0:f0:07:f2:11:a2:cf:57:66:3c:90:d1:37:42:8c:
47:3b:18:8e:83:d1:4c:96:eb:44:50:8a:69:96:25:dc:9a:0d:
3a:17:8e:df:e5:69:14:02:cf:4a:97:b7:91:29:c5:9b:20:16:
f9:b8:67:ea:b4:9f:37:a3:11:f8:27:4f:52:9e:c1:de:bb:d7:
d2:d1:e9:0b:fd:21:0c:22:3c:ae:30:9d:1f:7e:fe:6e:69:e4:
e7:ce:be:4a:16:74:aa:5c:cc:1f:0c:1d:b7:d8:0b:3a:b5:a7:
35:f7:67:67:81:88:32:32:2f:2c:5d:e0:8a:dd:67:31:ff:31:
55:7e:9b:bb:cb:d7:3a:aa:c3:85:12:7f:04:54:ee:fa:a7:39:
1f:59:0b:00:bf:d4:04:40:ea:a7:fb:cf:4f:bc:73:d0:37:2f:
01:e3:78:22:fb:67:dc:4c:62:a9:57:b1:be:b3:cb:91:c2:70:
29:dc:4a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:34 2025 by rpki-client