Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/J0wD1VHXSK8IW6oG7-DG_smgYpA.roa
File: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (raw, json)
Hash identifier: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=
Subject key identifier: 27:4C:03:D5:51:D7:48:AF:08:5B:AA:06:EF:E0:C6:FE:C9:A0:62:90
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 0194274824B12ADD1F25A655CA214F7A6984
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/J0wD1VHXSK8IW6oG7-DG_smgYpA.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8678
IP address blocks: 5.23.120.0/21 maxlen: 21
46.182.64.0/21 maxlen: 21
80.251.32.0/20 maxlen: 20
92.61.0.0/20 maxlen: 20
185.22.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:24:b1:2a:dd:1f:25:a6:55:ca:21:4f:7a:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=274c03d551d748af085baa06efe0c6fec9a06290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:e7:7d:32:7b:d5:2b:df:df:99:1a:4a:9e:
61:0e:6b:35:e7:ac:bc:0b:e9:e9:8d:e8:d4:f4:71:
9d:a1:3d:d6:2c:ca:9b:8d:55:9c:17:e1:f3:d9:65:
22:81:bf:55:a5:a4:8c:29:64:14:77:57:97:55:42:
fe:f3:8d:0a:16:0d:ad:2e:d8:c0:ac:fb:8e:b3:07:
f9:3e:10:40:11:9b:4e:bb:b2:90:b4:bd:8b:97:89:
df:7d:ac:fe:6e:50:ea:2b:90:4c:f9:04:47:6c:ae:
71:5b:2c:6c:1b:a2:93:5a:20:14:d4:01:bc:38:35:
9c:50:10:50:9e:0a:3e:aa:f8:ef:9b:db:a8:7e:ca:
72:f4:fc:d1:f2:32:4f:6d:87:b1:d6:bf:fe:ac:5c:
a9:b3:67:fc:ce:4a:4e:aa:f3:e5:a9:15:bd:4b:e5:
55:16:41:1b:42:67:dd:6e:3d:f8:bb:29:ee:90:c6:
5c:df:61:98:43:d2:18:ef:8a:67:da:95:98:4d:b9:
91:0e:0a:15:c8:a1:e4:5f:4e:93:77:0d:67:71:4d:
76:ac:37:6c:06:94:f8:a4:73:ae:66:9d:53:db:89:
34:4c:9f:ff:b0:85:e6:65:a3:8c:cf:48:2e:92:79:
c1:cc:ec:0c:35:f2:b9:bb:f4:6c:2b:b4:89:19:92:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:03:D5:51:D7:48:AF:08:5B:AA:06:EF:E0:C6:FE:C9:A0:62:90
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/J0wD1VHXSK8IW6oG7-DG_smgYpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.120.0/21
46.182.64.0/21
80.251.32.0/20
92.61.0.0/20
185.22.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:08:3f:d5:d8:63:b5:51:79:ab:4f:99:37:3e:c0:30:2a:4e:
5f:fd:45:0d:f6:d9:80:4c:12:e6:2c:25:45:e6:47:09:a1:01:
dc:c7:3f:82:1e:8c:11:d6:c2:88:09:a7:c7:9c:26:59:d8:9f:
65:44:42:0f:32:32:4f:a1:48:d7:54:f3:c2:08:1d:c5:b1:ea:
ad:d8:4e:dd:9a:fa:1e:16:a9:d1:d0:2d:6b:86:fa:cf:29:fc:
7b:60:1c:24:15:a6:05:d7:51:7b:1a:09:ce:7f:91:3c:a7:a8:
04:73:c0:da:de:49:31:12:95:36:51:b0:b3:61:f9:9b:0c:7c:
c4:38:e0:78:ab:87:af:d9:8f:b1:44:6f:66:65:c1:87:f6:1b:
7d:e7:0c:c2:08:28:1e:3f:71:a4:3b:c7:6f:83:90:17:f0:8d:
07:e5:14:5d:9d:84:f6:64:b4:fb:23:d3:73:13:a0:d9:33:b5:
b4:e6:19:5f:d5:4b:de:c8:1b:39:73:79:cd:8b:14:f4:b2:11:
77:4b:48:0b:89:ba:a3:a0:42:31:c6:be:1a:06:cf:32:d6:3f:
46:ae:4a:50:25:de:54:62:6f:f4:97:a8:d2:f5:6d:4f:95:80:
a2:5d:3c:fd:8f:d9:85:d5:6e:1e:7a:38:d6:77:f7:2b:03:48:
b7:83:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:46 2025 by rpki-client on console.sobornost.net