Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/uCdJS4_WDnm3wI7mgRnT4iwSoMY.roa
File: uCdJS4_WDnm3wI7mgRnT4iwSoMY.roa (raw, json)
Hash identifier: ltDfy93bVkATSxErghVxmEEMWY5SxH0YsvmSTy743ms=
Subject key identifier: B8:27:49:4B:8F:D6:0E:79:B7:C0:8E:E6:81:19:D3:E2:2C:12:A0:C6
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 1574159F
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/uCdJS4_WDnm3wI7mgRnT4iwSoMY.roa
Signing time: Sat 01 Jan 2022 14:03:39 +0000
ROA not before: Sat 01 Jan 2022 14:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49515
IP address blocks: 104.160.13.0/24 maxlen: 24
5.157.31.0/24 maxlen: 24
104.160.12.0/24 maxlen: 24
5.157.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359929247 (0x1574159f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 1 14:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b827494b8fd60e79b7c08ee68119d3e22c12a0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:bb:10:e0:5a:04:cd:4f:00:09:e6:30:7a:
f2:8c:79:91:40:ea:19:a1:89:64:ee:6f:56:4e:74:
be:9e:c2:ff:a0:57:13:12:fb:39:d6:03:d4:cb:2d:
ea:e7:cf:cd:7d:75:0f:99:0e:a7:14:49:07:bb:a6:
8d:6f:a9:b6:80:7a:e5:59:95:e4:47:01:ad:55:db:
66:00:7f:7f:43:ce:30:dc:e6:19:4d:96:40:3a:46:
94:c9:78:72:dd:3e:0a:47:8a:9a:5f:47:02:77:4a:
db:87:5f:fc:78:e9:e2:8a:68:5d:b4:2b:f8:2b:48:
cf:fc:97:6f:aa:de:0b:4e:e8:12:76:00:23:9a:fc:
07:56:03:12:a4:f1:f0:d4:51:d7:b7:50:f0:ab:63:
c9:2f:18:57:77:ea:d3:64:40:36:8e:9b:1d:70:9e:
39:56:a8:7f:7c:83:9e:a5:d0:1d:67:28:03:95:f4:
88:4b:bb:2f:ff:05:cd:a6:0d:a3:8f:c7:20:9c:01:
59:ea:13:f5:e4:6a:e4:b3:05:eb:36:c3:ec:c2:da:
b3:07:b8:6f:5d:02:b3:5e:12:f7:c4:19:82:6c:6c:
fd:d8:bf:e4:6f:6c:a9:d8:bf:a5:38:55:90:7e:8d:
28:19:1f:c1:71:50:c7:50:f6:90:c7:a5:96:89:cc:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:27:49:4B:8F:D6:0E:79:B7:C0:8E:E6:81:19:D3:E2:2C:12:A0:C6
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/uCdJS4_WDnm3wI7mgRnT4iwSoMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.30.0/23
104.160.12.0/23
Signature Algorithm: sha256WithRSAEncryption
58:70:c9:7f:bf:ba:e1:ed:5e:b9:60:f1:70:ef:10:55:4d:10:
16:56:28:39:4a:06:ee:1f:2b:7d:80:73:55:46:b6:d2:88:c0:
16:a1:37:db:b1:1b:a6:01:5d:b1:c5:aa:30:59:f0:25:bb:f8:
81:31:59:2b:25:98:a5:21:45:54:31:cb:71:fe:2a:fd:6b:3b:
9b:b6:76:54:eb:b6:d8:d3:e1:2f:7d:6d:77:29:e1:2f:79:38:
ed:9c:d7:6d:20:08:1f:93:cb:27:02:2c:83:4d:d2:85:da:d2:
ca:63:bb:ef:a0:03:5f:fb:23:81:52:9d:fe:e6:47:63:2d:bc:
50:ae:fb:7c:67:67:e9:f4:89:e2:d4:dd:5d:df:36:77:46:1d:
59:6e:8c:7e:a9:76:33:51:0e:9c:35:e8:47:66:6b:64:29:8c:
f8:5d:88:82:d3:79:be:fb:a6:78:b6:b4:a2:88:92:04:b8:55:
75:be:d6:40:3b:b1:7a:f5:05:84:5e:25:d2:7a:f6:20:55:08:
ae:ea:70:3c:f7:9e:05:02:c9:20:ca:07:d6:1b:29:d8:ce:8e:
39:b9:b4:cc:f8:ed:68:56:05:6e:cd:de:62:10:3f:96:6c:6c:
19:22:d9:1c:56:02:b0:1f:f8:03:c0:20:28:ac:88:6e:99:99:
04:f2:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:47:40 2025 by rpki-client