Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/v0jeM-EK5U0lFswlXgsyLuIVWWw.roa
File: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (raw, json)
Hash identifier: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=
Subject key identifier: BF:48:DE:33:E1:0A:E5:4D:25:16:CC:25:5E:0B:32:2E:E2:15:59:6C
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 01941F8C999EDAFB926644DB9EC0A75D2734
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/v0jeM-EK5U0lFswlXgsyLuIVWWw.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213195
IP address blocks: 5.254.168.0/22 maxlen: 22
5.254.192.0/19 maxlen: 19
46.230.168.0/22 maxlen: 22
46.230.172.0/22 maxlen: 22
92.241.208.0/22 maxlen: 22
92.241.212.0/22 maxlen: 22
178.72.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:9e:da:fb:92:66:44:db:9e:c0:a7:5d:27:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf48de33e10ae54d2516cc255e0b322ee215596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e4:67:27:28:4e:40:08:6b:72:1e:00:55:7b:
ba:45:df:d7:01:00:37:70:f8:67:15:ee:e3:6a:b4:
63:f3:ed:22:b1:75:f3:69:b8:24:28:6a:55:e7:e9:
ab:4d:f3:12:46:82:ef:19:1a:52:a2:f3:83:6d:5b:
69:4d:64:b1:4d:96:05:c8:c7:cd:a9:3e:b8:fb:45:
84:b0:9f:ad:0c:57:6c:17:d0:16:7c:94:97:01:3b:
50:0b:bd:32:e1:8a:1f:4a:3e:d8:d0:a5:6b:ff:ef:
b7:3f:ca:13:fa:0e:8b:e5:2b:fd:17:7a:11:15:8d:
bc:c1:c7:ea:5f:9f:e3:8c:b4:d3:6d:4f:60:07:02:
2c:39:49:b3:7b:0f:58:ef:53:d6:1c:50:23:9c:16:
3f:1c:2e:49:42:c5:7c:82:da:2d:cb:b4:37:e4:81:
4e:2b:27:6e:a5:22:e7:37:b4:16:a7:41:4e:6a:27:
7a:9d:ba:2f:cd:27:60:ff:14:e3:bd:c8:24:a4:88:
ec:4a:c7:ac:9d:74:bb:85:85:23:1a:e2:a8:ac:be:
c0:71:3e:f1:66:a0:41:db:a4:a0:f2:b4:53:5f:68:
29:20:05:50:d4:65:70:71:30:c9:d3:c5:9c:64:6e:
01:d3:3a:58:a4:0a:33:54:03:a3:ab:a2:fd:a5:ac:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:DE:33:E1:0A:E5:4D:25:16:CC:25:5E:0B:32:2E:E2:15:59:6C
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/v0jeM-EK5U0lFswlXgsyLuIVWWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.168.0/22
5.254.192.0/19
46.230.168.0/21
92.241.208.0/21
178.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:8a:af:8f:09:43:2a:da:e9:c3:33:48:cb:f5:e7:b3:dc:4e:
c3:99:95:60:8d:09:da:b3:06:b5:9f:31:cf:30:c6:11:f9:ea:
aa:ce:3b:a0:97:6d:ac:93:4f:6a:c4:5e:cb:68:d8:41:69:7e:
0e:4e:48:ed:a9:86:d7:39:9b:29:58:9b:45:49:57:1c:ea:8c:
ef:47:02:90:d1:6e:a6:53:66:10:d3:0e:60:47:69:39:55:05:
dd:1a:bc:7f:db:e0:57:30:60:43:f7:c3:6d:ee:0a:76:99:39:
56:a3:f0:7a:30:d5:bb:51:b7:a6:1f:92:e0:cc:10:2f:ec:b8:
59:b0:02:19:3b:21:95:84:40:dc:b2:71:9f:28:8c:c0:4a:1e:
67:df:2f:4c:34:7c:18:25:ab:8c:f6:89:66:a7:3c:72:31:c8:
75:6c:0b:c8:94:44:ff:cb:f7:f7:34:53:0e:c4:80:25:6b:f8:
14:65:f0:d6:dd:b2:c5:a5:28:b3:be:f1:53:cf:3f:40:a6:28:
25:87:25:21:6c:ba:4d:12:0c:cf:bf:44:a8:89:71:9f:10:23:
00:37:7f:8a:b2:50:fd:af:f5:2e:6d:9a:b2:72:96:3e:c8:3a:
d5:5e:71:f5:7a:86:18:1c:5c:f8:db:e8:12:77:40:57:bf:43:
02:94:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:34 2025 by rpki-client