Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/u4G1_yF4TBBumrIYzOwiYZxivvM.roa
File: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (raw, json)
Hash identifier: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=
Subject key identifier: BB:81:B5:FF:21:78:4C:10:6E:9A:B2:18:CC:EC:22:61:9C:62:BE:F3
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019422FC38B6774096877D428EB9474CEE22
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/u4G1_yF4TBBumrIYzOwiYZxivvM.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215419
IP address blocks: 5.56.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:38:b6:77:40:96:87:7d:42:8e:b9:47:4c:ee:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb81b5ff21784c106e9ab218ccec22619c62bef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:fb:c8:ba:7c:95:5d:10:8d:9a:38:bb:82:
07:4b:b1:4f:00:58:89:58:64:b1:15:9c:21:12:5f:
17:4b:bd:d6:eb:23:ef:c2:e7:7a:93:3b:04:b2:8e:
94:de:64:c4:63:8d:b5:a3:d2:1e:20:26:dc:69:fe:
5e:55:8a:31:36:20:c1:af:73:28:59:ee:0e:e4:43:
7b:d8:28:f6:29:20:6c:e2:11:86:9c:42:0a:6b:a0:
f8:c4:df:83:7d:3d:4d:5f:0b:d8:38:ec:23:fa:af:
3d:30:53:5c:93:b9:45:63:1c:01:65:76:ff:d4:33:
5d:99:89:50:39:81:ee:59:b0:5e:cf:aa:93:c5:8a:
e7:f7:c0:c5:ad:c2:62:16:b0:c8:fb:70:fa:2a:92:
6f:fa:fa:dc:58:c6:5c:84:ba:9c:d1:20:a0:7b:cd:
fc:4c:03:a7:ce:79:a9:01:cb:4b:db:04:b0:56:65:
6c:2a:e0:df:55:55:42:5e:51:9d:19:1b:1d:ae:32:
c3:f1:91:a7:2f:82:9b:8c:45:16:45:5d:2c:57:88:
3e:12:43:48:67:99:9e:16:48:82:52:03:e5:da:13:
ce:0b:4a:2f:e4:5c:84:d9:a0:5f:e5:8f:c5:62:0c:
fb:1b:c5:ba:35:05:47:2f:c3:9b:f7:9d:08:5f:a7:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:81:B5:FF:21:78:4C:10:6E:9A:B2:18:CC:EC:22:61:9C:62:BE:F3
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/u4G1_yF4TBBumrIYzOwiYZxivvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.133.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:7b:ba:01:5e:36:d7:ce:a0:e8:68:64:eb:41:72:28:e2:70:
b1:06:0a:00:a4:cd:78:9d:1b:b4:8c:39:5a:d5:3b:e1:f4:ab:
22:c6:00:cd:25:53:b0:74:78:a2:48:e4:ef:55:75:db:98:7e:
20:8a:d1:72:5b:04:d8:06:b5:f2:b2:f6:62:08:a5:7e:86:d7:
b9:77:6f:d2:ba:7a:c2:51:24:01:cb:da:80:cc:26:b1:e0:5d:
c9:89:44:40:c9:7c:38:d3:0e:ed:82:20:91:81:f4:f2:42:a2:
6f:d8:4f:36:4c:59:aa:44:7b:a3:13:70:df:cc:64:52:0d:4c:
f7:0b:2a:bb:51:8f:a4:ea:dd:19:36:a1:f0:b4:3b:54:bc:a1:
fa:de:67:17:b3:c2:29:b7:28:48:e5:45:57:00:5e:59:b8:98:
fe:7f:f9:be:91:03:45:fd:d4:0f:57:e8:64:78:5c:8b:6e:6a:
e9:4e:7c:f6:5c:6e:74:99:e3:b5:74:81:fd:f2:fe:c0:78:48:
2e:fc:f8:de:7a:95:3e:cd:15:f2:67:b2:f0:fc:ad:e6:32:a8:
59:04:77:eb:b0:0d:a0:d3:60:95:26:80:1b:ef:f3:9e:4d:47:
90:27:2e:1f:8a:9c:11:ae:32:b8:d0:2b:18:70:da:b1:c9:2b:
e8:ec:12:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:37 2025 by rpki-client