Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/SX7Fh5D5SSmhzFcwpzLVfpnGjio.roa
File: SX7Fh5D5SSmhzFcwpzLVfpnGjio.roa (raw, json)
Hash identifier: hS1AFnLFbyQCTAlmoU4gf8KnF5G/ZsoLJZ6QNcU/zBo=
Subject key identifier: 49:7E:C5:87:90:F9:49:29:A1:CC:57:30:A7:32:D5:7E:99:C6:8E:2A
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01942521EF6C4524ABFAABAAD1A79B7907F5
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/SX7Fh5D5SSmhzFcwpzLVfpnGjio.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36131
IP address blocks: 5.150.156.0/24 maxlen: 24
5.150.157.0/24 maxlen: 24
5.150.158.0/24 maxlen: 24
5.150.159.0/24 maxlen: 24
185.22.40.0/24 maxlen: 24
185.22.41.0/24 maxlen: 24
185.22.42.0/24 maxlen: 24
185.22.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ef:6c:45:24:ab:fa:ab:aa:d1:a7:9b:79:07:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=497ec58790f94929a1cc5730a732d57e99c68e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:a8:0d:11:d8:f0:b7:6d:a3:a5:c1:bb:90:
56:38:cc:95:4d:16:72:a4:85:bc:ab:1b:af:a8:f0:
be:d7:b6:a2:f0:29:45:c7:01:43:ac:29:0e:c5:d3:
a7:94:50:3f:e8:13:9f:a5:78:d8:9b:82:df:54:4e:
8d:58:7e:5c:46:36:d4:cf:4b:9a:53:a6:72:d3:2a:
a1:56:dd:b2:27:dd:82:08:b6:ad:16:68:0a:20:a6:
ed:5b:97:3c:a3:a5:1a:4d:d9:22:2c:93:68:22:ca:
54:8c:e1:c8:e5:d1:07:09:05:2b:7b:46:5b:4d:3c:
0d:56:f6:cf:d0:a2:35:37:01:b5:19:59:60:fe:12:
d4:e2:73:fa:9e:a5:ee:f9:78:1f:c1:4d:4c:cc:f4:
56:2e:67:2b:73:1c:0a:84:23:f2:39:4a:65:cc:c7:
6c:0a:e3:c2:88:33:83:6e:ee:c5:3e:66:02:f0:7e:
b7:9d:5e:d3:ad:9d:98:70:7a:f8:b0:9c:48:8b:32:
05:40:9d:c3:0e:d1:d9:a2:41:a8:22:cb:9c:e9:59:
04:aa:f9:2b:c6:28:56:b5:66:de:1e:24:0b:ce:9a:
3d:8c:b4:ef:8c:91:fe:82:23:a9:7f:4f:be:cd:1a:
bc:c9:4e:7f:ca:2f:58:ed:83:3e:8e:0b:15:d7:6b:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7E:C5:87:90:F9:49:29:A1:CC:57:30:A7:32:D5:7E:99:C6:8E:2A
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/SX7Fh5D5SSmhzFcwpzLVfpnGjio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.156.0/22
185.22.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:ff:6d:8e:66:4d:2a:c4:17:8f:85:e2:32:09:ee:b9:b3:d1:
c0:98:5e:70:e5:f4:7e:96:69:4f:92:3c:e9:d7:14:b6:51:5a:
42:5e:9f:0c:08:2a:9e:f1:5f:78:71:da:97:14:d9:1c:23:df:
47:1b:3f:c0:4e:6f:83:fc:df:33:09:ce:1d:d0:f7:9d:b3:64:
4a:64:e3:e0:fe:b5:df:ec:58:26:be:da:88:d7:63:d7:85:fb:
fb:db:1b:14:2b:64:47:a5:2c:ff:c1:a4:cb:42:09:7f:c5:21:
e7:91:e2:cb:5c:03:35:6d:b0:b4:49:13:b5:95:3c:01:47:d1:
e4:61:0c:fd:a2:90:68:1a:48:19:bb:80:50:a8:ca:bc:9e:ce:
12:f2:76:b7:3f:f1:84:02:16:5f:b3:61:37:ba:d1:e9:74:89:
51:3b:2e:52:16:5b:d4:3d:b7:ea:c1:81:31:b0:9b:95:bc:a2:
51:a1:08:fc:37:cb:d1:0b:dd:a2:3e:09:f9:80:41:82:c4:52:
56:91:ab:f7:46:92:d9:2f:46:c8:2a:88:72:fc:31:0b:93:10:
c0:c5:bb:3b:64:5b:8c:87:aa:83:9b:22:3a:9e:a0:76:b8:a4:
aa:8b:a2:81:55:a7:22:b2:73:c5:9d:81:e1:13:bf:bd:58:d1:
57:60:d2:e0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIe9sRSSr+quq0aebeQf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx
ZjZhN2QwHhcNMjUwMTAyMDM0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTdlYzU4NzkwZjk0OTI5YTFjYzU3MzBhNzMyZDU3ZTk5YzY4ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYeoDRHY8Ldto6XBu5BWOMyVTRZy
pIW8qxuvqPC+17ai8ClFxwFDrCkOxdOnlFA/6BOfpXjYm4LfVE6NWH5cRjbUz0ua
U6Zy0yqhVt2yJ92CCLatFmgKIKbtW5c8o6UaTdkiLJNoIspUjOHI5dEHCQUre0Zb
TTwNVvbP0KI1NwG1GVlg/hLU4nP6nqXu+XgfwU1MzPRWLmcrcxwKhCPyOUplzMds
CuPCiDODbu7FPmYC8H63nV7TrZ2YcHr4sJxIizIFQJ3DDtHZokGoIsuc6VkEqvkr
xihWtWbeHiQLzpo9jLTvjJH+giOpf0++zRq8yU5/yi9Y7YM+jgsV12toiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEl+xYeQ+UkpocxXMKcy1X6Zxo4qMB8GA1UdIwQY
MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt
MjdmYmM5OWVhM2M2LzEvU1g3Rmg1RDVTU21oekZjd3B6TFZmcG5HamlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2
LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBZacAwQC
uRYoMA0GCSqGSIb3DQEBCwUAA4IBAQCh/22OZk0qxBePheIyCe65s9HAmF5w5fR+
lmlPkjzp1xS2UVpCXp8MCCqe8V94cdqXFNkcI99HGz/ATm+D/N8zCc4d0Peds2RK
ZOPg/rXf7FgmvtqI12PXhfv72xsUK2RHpSz/waTLQgl/xSHnkeLLXAM1bbC0SRO1
lTwBR9HkYQz9opBoGkgZu4BQqMq8ns4S8na3P/GEAhZfs2E3utHpdIlROy5SFlvU
PbfqwYExsJuVvKJRoQj8N8vRC92iPgn5gEGCxFJWkav3RpLZL0bIKohy/DELkxDA
xbs7ZFuMh6qDmyI6nqB2uKSqi6KBVacisnPFnYHhE7+9WNFXYNLg
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:45 2025 by rpki-client