Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/6SCwO2S48Mqpl17CxJjrl18GrEo.roa
File: 6SCwO2S48Mqpl17CxJjrl18GrEo.roa (raw, json)
Hash identifier: +iW+64GQ290TRZ7pzpFa83Xn8R6dcie2oLJMOqdfhwM=
Subject key identifier: E9:20:B0:3B:64:B8:F0:CA:A9:97:5E:C2:C4:98:EB:97:5F:06:AC:4A
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 0194252173D28EA4C861E3EB317B9F7634E6
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/6SCwO2S48Mqpl17CxJjrl18GrEo.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 5.133.40.0/21 maxlen: 24
185.173.8.0/22 maxlen: 24
194.163.224.0/20 maxlen: 24
2a04:ed00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:73:d2:8e:a4:c8:61:e3:eb:31:7b:9f:76:34:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e920b03b64b8f0caa9975ec2c498eb975f06ac4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:c3:ca:fd:22:43:b1:95:dd:4b:6d:6e:b6:
e5:93:1d:dd:ee:d6:80:b1:74:4f:b6:a5:22:77:d3:
9f:27:0a:20:91:58:54:4f:bb:c3:af:83:77:30:66:
cb:67:d9:b7:7e:5f:10:bc:c3:ba:7c:5b:e7:ad:d4:
34:2f:26:85:0a:dc:9b:b8:29:40:bc:cb:c4:5a:fc:
91:e0:70:00:93:e8:09:8d:3a:63:d5:79:58:b7:e9:
a0:0e:b3:04:54:08:b5:39:72:f3:e4:f3:8a:02:5c:
af:b9:ef:b7:93:07:43:9a:ad:98:6a:b7:35:f0:15:
b3:b9:78:50:a5:ca:77:03:61:f3:7f:71:c7:51:26:
81:bf:82:55:bf:ad:8b:90:69:8b:91:1e:3c:01:8d:
36:94:5e:63:5b:5a:ea:99:fc:e2:1d:2c:f1:50:83:
97:d5:ce:ab:da:be:68:72:c7:1f:41:cd:c0:89:25:
88:a9:fc:bc:0b:e3:d8:6c:be:ff:93:68:b6:80:15:
e8:58:5a:ca:3d:45:5e:a8:28:21:b6:b2:14:0c:a5:
79:d8:09:3f:74:8b:79:67:26:a5:eb:63:3e:49:d4:
a3:6c:69:e9:ed:75:eb:d5:32:93:1f:71:69:3e:cb:
63:37:c6:a3:59:6b:e3:dd:a0:59:6a:f5:33:bc:33:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:20:B0:3B:64:B8:F0:CA:A9:97:5E:C2:C4:98:EB:97:5F:06:AC:4A
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/6SCwO2S48Mqpl17CxJjrl18GrEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.40.0/21
185.173.8.0/22
194.163.224.0/20
IPv6:
2a04:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
99:23:32:13:6a:6a:c2:4c:bf:dd:13:d6:1b:29:f1:da:da:33:
4a:16:3d:3c:a0:08:81:1f:e3:42:cb:81:90:68:5e:d3:ca:c9:
22:9c:2f:68:36:30:32:65:e4:ce:ae:31:3e:08:06:52:5f:78:
05:f8:29:5d:b1:f8:e3:cf:ee:a3:2f:87:09:fb:3a:03:02:f4:
01:6a:c5:a6:9a:ac:36:67:93:ef:8f:7b:2b:37:45:d9:7e:5e:
01:b2:e5:6b:3b:32:e2:6b:b4:53:7e:f8:be:c2:4c:57:bb:e4:
2b:4c:ab:b7:ae:b6:ed:16:a9:31:0c:24:8a:80:5e:d1:60:97:
8a:41:f1:9e:11:3d:fa:73:57:a2:c0:a8:0b:44:c4:b6:06:bf:
a6:04:66:70:d5:db:4f:3a:b3:e3:17:66:d6:ea:a3:c6:26:ac:
78:5d:29:d6:54:36:b4:ea:fa:54:60:51:00:2d:fe:82:7a:be:
48:49:6b:e4:ca:f9:bb:26:cf:61:09:85:13:25:6d:11:73:37:
67:83:a3:52:2e:42:b7:8f:b9:dd:cd:f0:37:af:7f:e6:83:ec:
f9:34:84:89:46:c9:6e:47:41:04:94:60:04:34:ac:16:1f:b9:
1b:a7:e2:0f:c9:b8:f4:52:f9:d5:4f:49:b5:51:4a:4c:e7:0c:
47:7a:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:38 2025 by rpki-client