Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/goSMWDerSHWQm8a_biGbxip6JFU.roa
File: goSMWDerSHWQm8a_biGbxip6JFU.roa (raw, json)
Hash identifier: XaD94ECbN6BS26VvKKBdjXS3UxYcMtbVwFJAn3/LvwY=
Subject key identifier: 82:84:8C:58:37:AB:48:75:90:9B:C6:BF:6E:21:9B:C6:2A:7A:24:55
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 01941FFAAA23CC48E370553524B74EC4E749
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/goSMWDerSHWQm8a_biGbxip6JFU.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198292
IP address blocks: 5.133.48.0/22 maxlen: 22
5.133.61.0/24 maxlen: 24
5.133.62.0/24 maxlen: 24
5.133.63.0/24 maxlen: 24
134.255.160.0/22 maxlen: 22
134.255.172.0/22 maxlen: 22
185.11.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:aa:23:cc:48:e3:70:55:35:24:b7:4e:c4:e7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82848c5837ab4875909bc6bf6e219bc62a7a2455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:64:ca:23:c0:1f:75:27:d1:b0:06:ce:e8:
e0:f6:ca:bb:82:f8:0f:e7:0e:f2:28:6e:05:13:1a:
93:59:ef:9c:61:52:a0:a5:5d:86:fd:c0:0c:7e:3c:
0f:d8:1c:cf:37:51:a5:38:42:e0:67:0d:34:21:08:
39:df:dc:c4:1e:8a:60:de:7e:fb:3e:b6:3e:e5:e1:
b4:8f:9e:d5:6e:86:05:7f:62:97:e2:1c:49:ef:dc:
d3:12:36:9f:6e:17:b3:45:a7:2a:b8:37:20:73:97:
dc:7a:0e:d7:bb:10:e3:d7:df:c5:f4:a3:a6:7f:85:
48:d1:9f:12:1a:2c:d0:ac:ef:dd:c4:d9:5f:10:09:
7c:d9:80:aa:c1:c4:20:aa:8f:a4:eb:af:d8:6c:2b:
7e:68:50:97:43:23:6d:8d:8d:81:3f:fd:33:10:0a:
0f:e0:f9:78:cf:47:f3:fd:7f:d3:2d:e9:40:ee:6c:
2e:8d:4f:60:77:68:8e:9b:4f:d2:7f:1c:45:70:40:
c7:68:f6:20:87:ce:39:68:01:1d:61:a6:c4:38:01:
b1:c4:e6:2e:86:ec:ea:09:7f:0c:ae:7f:c5:79:39:
ee:4b:10:49:35:0d:97:a6:56:e0:ad:43:b9:72:3e:
50:64:43:44:3e:5e:e6:9b:88:23:33:73:be:c8:9b:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:8C:58:37:AB:48:75:90:9B:C6:BF:6E:21:9B:C6:2A:7A:24:55
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/goSMWDerSHWQm8a_biGbxip6JFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.48.0/22
5.133.61.0-5.133.63.255
134.255.160.0/22
134.255.172.0/22
185.11.224.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:6d:be:e5:ab:4f:4d:f8:1f:65:01:44:e6:e3:4e:66:53:1a:
19:cc:00:e2:46:46:94:8f:a4:01:93:09:c6:85:3c:04:f3:2f:
35:8f:ff:d9:62:b2:22:05:29:b6:17:df:3f:db:46:64:e3:48:
77:9a:1f:90:b6:3b:8a:89:d7:b2:61:da:bd:3e:4a:01:2d:f1:
64:d1:da:9f:a1:fd:3c:80:25:2c:f0:08:8d:21:7b:c2:92:90:
94:ac:3e:7a:8c:57:e5:cf:9b:19:2d:2a:c3:42:30:93:d8:b4:
f5:7a:92:16:53:55:1e:76:9f:d6:30:78:c0:9e:2c:52:78:55:
a4:be:bf:32:ee:95:7f:24:04:73:45:c4:b8:e6:5e:03:a4:4b:
65:a4:47:55:8b:31:ed:42:85:a6:0e:28:39:89:2a:9b:92:35:
fd:27:9f:c0:0e:87:8b:6a:25:a8:dd:61:30:e7:c8:77:da:a9:
13:24:59:23:e2:f4:e1:14:80:54:80:a9:39:03:f9:bc:b3:71:
53:5c:39:6f:ce:f2:10:d4:1d:f2:55:a8:e2:63:1f:5c:2f:b8:
3a:32:a8:3c:e9:ec:5f:c9:a5:eb:83:20:6c:1b:41:c5:1f:90:
e4:3f:01:9c:67:ca:45:52:bf:86:8c:f9:d0:b4:92:c2:c4:38:
26:1c:67:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net