Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa
File: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (raw, json)
Hash identifier: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=
Subject key identifier: DA:69:79:A1:1A:BE:57:21:1B:FE:62:46:D0:2E:C0:85:D8:DF:F0:86
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 0194258F7319D49295DC553738C46122DE36
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 37.16.91.0/24 maxlen: 24
45.86.85.0/24 maxlen: 24
62.68.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:73:19:d4:92:95:dc:55:37:38:c4:61:22:de:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da6979a11abe57211bfe6246d02ec085d8dff086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:c1:2e:d3:b8:1f:19:ab:f8:96:43:4a:56:
58:d7:f9:42:3b:12:ad:40:71:1c:06:c8:2a:4c:ef:
50:08:d7:35:2a:55:d4:a7:43:20:17:c9:e6:ff:5d:
aa:75:81:c1:36:33:03:48:f2:1f:d7:de:13:db:8b:
d5:ca:73:46:d3:6f:67:77:1d:3c:a2:5e:77:16:3a:
66:b9:ed:d9:df:ad:ed:cc:3c:30:e8:d8:03:df:1e:
bc:f6:52:ff:91:1f:60:ac:84:a9:27:bc:5f:c6:bf:
0d:83:81:dd:97:7d:1a:fa:06:dc:59:bd:c6:e8:12:
b2:47:79:a3:b5:f4:15:7e:e0:ae:67:1d:df:c2:81:
53:48:fe:dd:96:d1:69:28:af:58:10:1b:2f:36:07:
4f:36:30:b1:25:84:1c:9b:e7:33:e1:a7:b9:96:6f:
7c:75:28:ed:cd:6b:6f:64:cd:3d:2d:c7:6b:fe:86:
f9:a4:f7:f5:f4:fd:d3:22:77:a2:d5:2d:07:a7:cf:
c5:bf:b9:42:0d:65:da:4a:8a:b7:19:aa:b0:72:cb:
2e:93:46:fa:4e:2c:31:88:ca:70:d6:40:5a:48:d2:
5f:d2:eb:9a:d9:f0:4c:67:a4:9d:2c:3a:dc:58:01:
28:57:63:63:c9:e0:ab:b2:9e:49:d5:e5:18:ab:f6:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:69:79:A1:1A:BE:57:21:1B:FE:62:46:D0:2E:C0:85:D8:DF:F0:86
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.91.0/24
45.86.85.0/24
62.68.89.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4d:76:53:5f:4b:60:b2:e1:62:01:13:cf:77:08:49:cd:5a:
87:d9:c1:1a:0a:92:02:c8:80:c0:08:6a:38:39:a3:06:da:34:
2a:33:b7:1c:0d:01:0f:0a:61:9d:20:b2:84:03:0a:a0:56:5e:
4b:e2:51:75:5f:7d:71:aa:e2:61:bc:1e:fd:55:2a:4a:ec:e8:
57:16:09:53:27:bb:68:a4:c9:d3:41:1d:91:38:91:e1:e0:eb:
52:6b:4e:64:50:64:5c:8b:6e:b9:ff:9d:3e:64:9e:3b:74:04:
a6:44:d4:c0:1a:6b:05:81:8f:d6:10:a1:bb:28:a8:92:3e:1d:
fa:50:69:8a:6c:45:46:71:39:6d:8c:69:bd:c8:63:cf:cf:50:
a4:ff:3b:27:d8:2c:42:f1:5b:ef:e5:85:94:ed:06:60:11:14:
00:a2:5f:6c:4d:b3:08:27:71:bb:b8:0b:2f:8e:28:3d:6f:0a:
fd:f4:69:63:3f:51:d8:20:5e:4e:6f:30:99:d5:70:92:0a:86:
a5:68:5d:93:82:94:fa:85:8f:19:f7:85:7d:aa:88:0a:a8:02:
47:61:9c:13:df:7d:f8:69:de:e5:1b:92:25:45:88:1b:4c:51:
ac:36:26:dd:b1:74:dd:e9:93:b4:63:c1:f8:d0:c0:88:94:88:
61:86:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:03 2025 by rpki-client