Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa
File: 70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa (raw, json)
Hash identifier: UXG2vfv9VFhp8kbUsMPdFVXztsWH0VKzkTqdDHZBLZY=
Subject key identifier: EF:4F:B4:F8:2D:AA:7F:04:45:18:E9:97:B3:BC:F4:3F:DA:CE:D4:38
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 0194252174DBCA9261349254D6168DB92D66
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199468
IP address blocks: 5.133.40.0/21 maxlen: 21
5.133.40.0/24 maxlen: 24
5.133.41.0/24 maxlen: 24
5.133.42.0/24 maxlen: 24
5.133.43.0/24 maxlen: 24
185.173.8.0/22 maxlen: 22
194.163.224.0/20 maxlen: 24
2a04:ed00::/29 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:74:db:ca:92:61:34:92:54:d6:16:8d:b9:2d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef4fb4f82daa7f044518e997b3bcf43fdaced438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:5f:ff:73:0d:8c:ba:ea:57:8b:29:d9:d3:
47:ea:3e:b4:d4:3a:f9:da:8a:a3:f9:95:29:e4:46:
10:35:d5:46:12:00:81:29:2c:cb:71:67:aa:8d:91:
51:11:c1:a6:2d:3a:f2:2e:a2:f0:23:14:af:e2:ef:
38:71:24:59:1d:75:2e:1b:6a:14:2b:8f:a6:0c:d1:
d3:6b:3e:3b:45:04:ff:ab:77:06:62:96:32:26:74:
d7:30:4b:e0:5a:04:e0:28:94:a5:d7:e2:11:ac:4f:
74:e2:7b:2f:56:23:73:11:0e:65:5b:d1:70:f0:08:
3a:c6:07:ba:5f:38:c1:f2:0a:9b:e9:4d:56:02:b4:
4f:4d:0f:38:4b:81:b0:14:84:7b:ae:89:de:0d:73:
d1:7e:0b:be:33:2b:f7:99:5b:11:80:e3:3b:b4:17:
ed:3b:fe:c0:19:12:23:cd:03:25:62:e2:09:4a:33:
e4:40:b7:ff:b5:a4:06:68:70:fa:7f:fe:94:a0:9c:
a1:f9:be:ac:78:56:46:ec:ba:ee:f4:22:2c:c8:25:
d2:f8:b2:7f:ce:72:8c:44:fe:f1:21:9a:c4:ba:b1:
5e:81:26:93:78:13:e5:6f:2e:d6:3c:82:65:48:4d:
61:36:c2:04:6e:69:ec:43:d1:36:6a:21:23:1c:a1:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4F:B4:F8:2D:AA:7F:04:45:18:E9:97:B3:BC:F4:3F:DA:CE:D4:38
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.40.0/21
185.173.8.0/22
194.163.224.0/20
IPv6:
2a04:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
10:68:f0:65:51:48:0f:3b:8a:1e:e8:be:ac:37:22:e1:08:74:
b7:db:c3:50:32:53:c3:ea:1d:eb:e8:63:0e:69:cb:d4:23:bb:
6c:5b:32:13:14:87:85:b7:07:f9:a1:e0:c8:6a:fd:84:55:b7:
a3:27:33:13:00:3c:87:e6:37:e7:c6:5c:c5:67:10:b7:79:a4:
6d:88:87:48:ac:b3:24:c3:e7:a5:6b:85:1d:67:8a:65:42:9c:
63:56:39:5f:fe:52:5b:70:14:d0:e8:17:da:3c:f5:08:03:13:
d8:c6:97:a4:78:7e:86:21:ba:07:38:db:0c:aa:2a:01:ac:03:
c6:fc:f1:13:eb:3d:2b:82:bf:86:06:5e:57:2b:87:b7:94:fd:
aa:97:0c:88:ca:ab:9a:6e:66:8e:7e:c8:67:c2:ff:a9:5d:d0:
e9:2a:2c:9d:56:e3:47:e9:32:8b:f9:86:b5:d4:e0:f0:bf:d5:
5d:b1:6d:9c:4a:03:28:dc:27:4c:57:a5:b7:58:15:5a:92:b7:
93:6e:d6:70:a8:db:52:b5:78:56:31:ba:91:3e:ca:56:02:39:
eb:2f:a6:13:3a:3d:b3:1d:35:c8:61:fd:aa:e3:09:66:ac:2d:
e9:9b:d0:a9:68:37:8b:3d:b6:de:74:76:34:41:84:4f:12:67:
07:23:29:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:02 2025 by rpki-client