Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/psSTG0Xrqssglub7odw_Aeumxw4.roa
File: psSTG0Xrqssglub7odw_Aeumxw4.roa (raw, json)
Hash identifier: ZT7znN26M2IQ2XLLuIQT50IETg9WXMqInwpcq6t20hA=
Subject key identifier: A6:C4:93:1B:45:EB:AA:CB:20:96:E6:FB:A1:DC:3F:01:EB:A6:C7:0E
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01942521EE1D914F6E28ED6F2F8CB72D4A41
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/psSTG0Xrqssglub7odw_Aeumxw4.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10122
IP address blocks: 5.150.156.0/22 maxlen: 22
185.22.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ee:1d:91:4f:6e:28:ed:6f:2f:8c:b7:2d:4a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6c4931b45ebaacb2096e6fba1dc3f01eba6c70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:ed:fe:06:fc:58:68:04:18:73:99:9e:e5:
80:ef:56:a7:ac:f5:e1:6b:93:45:25:46:90:bd:5e:
9b:ec:96:f0:79:da:d9:4a:93:68:59:93:ce:a8:43:
74:fe:03:b6:69:ab:6d:e8:89:4e:d1:bd:72:e1:06:
39:a3:3a:5e:6a:f6:a1:bc:b7:cd:1a:8d:ea:c1:70:
d3:66:4d:71:bb:5e:1e:7e:07:34:39:08:ea:e4:e6:
85:78:54:ac:e0:c8:7d:b2:5b:39:04:0c:b8:5f:76:
00:13:cf:0f:0a:ce:6c:67:cf:88:87:17:ff:82:c4:
97:7a:b2:2f:b4:eb:22:f6:16:82:9b:23:23:b8:fe:
06:22:32:fa:20:7d:c1:d1:34:bd:2b:4d:31:7f:91:
b6:ef:9a:71:96:43:d4:5e:fb:46:44:f2:9f:ad:b6:
d2:57:c9:c9:e5:f1:a7:fa:e8:4e:13:41:ca:a0:5c:
60:d3:f3:90:f3:ef:54:64:45:ad:17:d3:09:be:ec:
37:55:f8:12:98:89:13:3f:a2:43:22:62:d1:76:ab:
82:ee:2f:7f:ed:dc:d4:97:39:d7:ba:de:dc:8a:b0:
41:a8:47:1e:b6:cf:52:45:8c:19:7f:5d:85:4e:dd:
89:23:cf:04:40:02:a4:54:cc:e7:ec:f1:48:00:1e:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C4:93:1B:45:EB:AA:CB:20:96:E6:FB:A1:DC:3F:01:EB:A6:C7:0E
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/psSTG0Xrqssglub7odw_Aeumxw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.156.0/22
185.22.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:d1:7c:0e:73:0e:9a:52:13:fc:09:27:96:f0:51:01:5d:fd:
d4:b6:4e:76:ab:e4:2f:e7:f4:8c:df:c1:08:2c:13:8b:47:12:
f5:2e:00:1c:1a:08:ee:73:58:db:0a:07:7d:35:9c:49:c8:10:
45:b3:fb:43:03:58:e1:fc:76:cc:58:53:2d:8e:43:1f:6a:b6:
1b:9c:f4:12:a3:a0:d3:1f:5a:dd:81:65:1b:c7:f9:15:b5:50:
62:81:c3:37:18:22:50:8e:2a:65:d2:cb:9d:60:b9:36:c4:43:
a9:fb:7d:3d:15:26:d8:01:aa:fd:7e:2e:08:2e:19:fa:b0:70:
df:27:d0:f4:6d:31:12:32:ca:10:a8:b5:cf:76:8b:b3:76:a4:
61:29:3a:86:77:87:60:c1:38:44:99:25:b8:13:b1:5b:0f:65:
2b:b8:6c:15:de:7b:72:11:41:1b:b7:62:5d:69:08:9c:1e:ba:
b1:ac:f1:e5:45:cb:c4:e9:0d:55:23:d5:43:db:66:09:96:ab:
3a:94:d7:74:39:41:3f:9b:9d:8e:ae:dc:fe:f6:3f:72:8c:61:
7b:ca:c2:78:48:3c:2f:2b:29:37:09:d1:03:ac:53:33:db:a8:
e7:68:49:fd:3a:af:a7:74:aa:26:44:9c:ad:33:93:30:8f:43:
77:d5:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:13:40 2025 by rpki-client