Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/DXCUVkjG_w4i_UFc-U8dom6KGR8.roa
File: DXCUVkjG_w4i_UFc-U8dom6KGR8.roa (raw, json)
Hash identifier: 7/9M+t3D5dS7nLdTbv1/QxcCcoXqgis87Ga9Kqm0CFU=
Subject key identifier: 0D:70:94:56:48:C6:FF:0E:22:FD:41:5C:F9:4F:1D:A2:6E:8A:19:1F
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 01857130A09B2532AC98035FD1E5F3F58BC1
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/DXCUVkjG_w4i_UFc-U8dom6KGR8.roa
Signing time: Mon 02 Jan 2023 06:34:50 +0000
ROA not before: Mon 02 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60485
IP address blocks: 5.157.22.0/24 maxlen: 24
37.203.209.0/24 maxlen: 24
5.157.38.0/24 maxlen: 24
91.108.183.0/24 maxlen: 24
5.157.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a0:9b:25:32:ac:98:03:5f:d1:e5:f3:f5:8b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 2 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d70945648c6ff0e22fd415cf94f1da26e8a191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:a4:d7:0f:af:96:9c:ca:fb:dd:c5:89:48:
ba:23:fd:9b:6b:05:ca:85:62:85:70:f8:52:ea:6a:
a7:2c:ae:f7:e7:95:0a:0f:24:d3:80:25:44:7c:3d:
d6:19:bf:eb:f8:b6:d5:5d:d3:0d:2b:1d:a3:8c:88:
69:55:49:87:14:b2:23:88:6c:2e:13:f6:bd:9e:60:
b3:f3:3c:c6:97:25:9a:92:7e:f5:b3:b4:c6:67:4e:
4e:2a:76:27:16:28:32:cf:8e:c6:1c:47:fb:09:bc:
5d:6a:b4:85:2d:4e:71:e8:5b:e0:26:6b:28:aa:5a:
49:3d:df:95:ba:07:ad:77:0f:76:1d:82:07:7d:88:
93:3b:41:19:26:33:b8:4c:1d:73:34:ef:9b:62:18:
14:95:92:75:57:ef:8d:df:c3:89:41:30:f8:32:48:
93:fd:7c:b0:47:b4:b2:f7:93:21:4d:d8:a0:a8:b7:
d5:b3:02:21:1b:da:9a:93:66:0b:c7:a3:75:9d:75:
a9:b8:c2:ab:b7:06:41:dd:73:f7:8b:e9:55:58:a8:
28:f8:81:05:73:1f:3f:3e:45:41:32:c8:c0:33:96:
0a:11:58:4f:2d:43:45:f0:11:27:e5:66:99:12:40:
47:11:5d:bb:0c:8b:86:4f:5a:97:a5:cd:87:be:9a:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:70:94:56:48:C6:FF:0E:22:FD:41:5C:F9:4F:1D:A2:6E:8A:19:1F
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/DXCUVkjG_w4i_UFc-U8dom6KGR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.22.0/24
5.157.38.0/24
5.157.57.0/24
37.203.209.0/24
91.108.183.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b5:d7:42:03:b2:06:15:d0:0e:91:dd:dd:87:e5:13:a3:c8:
ae:44:0a:d5:ce:82:e0:fb:be:b7:26:d4:32:69:e8:c1:ff:9a:
c5:c0:bc:39:19:4a:3c:2a:0d:4b:ea:c1:39:c4:0c:ff:db:88:
c4:f1:59:47:13:23:78:e0:2f:14:9b:1b:0b:4c:2a:47:a6:f3:
57:5f:c1:3a:0c:3c:64:8a:cb:44:a8:b5:07:d1:75:52:3f:f2:
80:41:43:29:fc:ce:02:3b:28:6b:38:7c:00:a5:e9:df:ab:d3:
08:b7:1f:cf:fa:c3:19:87:42:05:f5:12:8b:bd:6c:f6:47:2f:
b2:4e:5d:1e:bf:37:a6:2d:dc:b5:88:e3:97:84:fe:48:a9:83:
8c:df:d7:11:b5:b7:9e:c9:04:40:0d:8d:0a:dc:ca:6f:98:19:
ce:04:cd:91:86:ec:77:d6:9d:08:2f:50:c0:2c:0b:45:7d:36:
3b:f1:c6:56:c5:63:f7:22:5d:85:72:43:57:9c:48:d0:11:05:
95:ce:6c:7b:68:a6:08:4e:bf:bb:5d:f4:ae:62:32:83:41:a4:
99:18:f4:93:d1:12:61:7a:0c:1a:5e:a7:7d:16:bd:c9:a2:47:
6f:e6:b6:74:93:43:29:be:62:5d:f0:78:03:d2:61:94:ae:5a:
b3:e6:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:47:20 2025 by rpki-client