Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fV4Ay98Z4xJwt16tLasSxDTW_q8.roa
File: fV4Ay98Z4xJwt16tLasSxDTW_q8.roa (raw, json)
Hash identifier: 2EHCj7K4WP6mpzsFEgs1R52akJEBwizY5BBMcFrNh04=
Subject key identifier: 7D:5E:00:CB:DF:19:E3:12:70:B7:5E:AD:2D:AB:12:C4:34:D6:FE:AF
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A2824073E1905649BE4FC671A9DB
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fV4Ay98Z4xJwt16tLasSxDTW_q8.roa
Signing time: Thu 02 Jan 2025 15:50:02 +0000
ROA not before: Thu 02 Jan 2025 15:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 5.188.192.0/23 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a2:82:40:73:e1:90:56:49:be:4f:c6:71:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d5e00cbdf19e31270b75ead2dab12c434d6feaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:bb:59:9b:1b:35:33:b1:89:0b:49:87:a8:
fe:5f:0a:c4:04:ac:61:ba:a3:c7:19:5b:44:b9:28:
47:f6:90:91:4d:51:da:dd:92:aa:c2:84:ee:a7:5b:
24:5f:25:c8:81:e7:22:7b:d3:f8:60:45:13:c3:fd:
6b:1a:b3:33:ed:32:54:0e:29:1a:25:82:bb:87:f2:
6b:ba:0c:b7:cc:11:a4:99:1e:9e:09:5a:f6:4c:5c:
9f:e4:5e:1b:26:8d:2e:7b:21:6d:32:40:fc:7f:2c:
93:e6:97:4b:60:63:ef:86:72:ce:cd:6b:9f:cb:72:
1a:61:91:4b:77:a4:a9:35:be:0a:49:5c:7f:e3:d0:
df:16:58:88:f0:6e:64:2d:3a:9b:3c:18:af:31:44:
2c:63:e4:10:fc:02:fe:50:76:4a:b5:57:c2:4e:ef:
04:d6:73:0b:a7:a7:a0:03:41:ff:f1:bd:7d:38:aa:
48:8c:79:2d:57:10:8b:f6:40:7e:d6:83:c5:f4:5d:
54:56:61:30:10:46:f7:1c:e7:e0:12:48:a2:ab:c4:
35:e4:30:3b:ea:f0:b0:b4:ff:01:db:59:7c:76:c8:
00:9a:d4:66:d9:e8:13:0e:2d:05:b6:03:cb:e4:b0:
8a:dd:50:31:df:8a:0a:ce:6b:ae:51:85:fa:f2:40:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5E:00:CB:DF:19:E3:12:70:B7:5E:AD:2D:AB:12:C4:34:D6:FE:AF
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fV4Ay98Z4xJwt16tLasSxDTW_q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.192.0/22
5.188.204.0/23
5.189.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:6d:4e:b1:b7:c2:f7:f5:81:24:a3:b1:b6:3b:0b:db:ef:58:
86:0b:14:4e:55:02:6b:5f:9b:a8:63:c8:ab:35:6a:91:ff:f8:
9c:aa:20:87:f9:c0:ef:3c:87:a2:26:f5:62:ad:21:60:e8:41:
ab:a5:b7:2b:b2:67:83:71:12:80:60:b3:49:85:45:48:43:81:
9b:3d:30:37:df:46:6c:88:16:60:67:f3:97:b1:a3:9b:c0:b1:
f1:b5:a1:bd:f0:6b:eb:ab:b6:e4:7d:ca:b0:87:94:05:04:b6:
9c:0b:08:1e:90:ca:d7:94:9c:25:62:8f:a5:e4:19:e9:e8:f7:
72:c8:0f:1a:ae:98:5e:cf:ab:70:e5:c2:b9:bb:8d:c1:81:66:
aa:ff:22:87:cf:15:9e:13:b8:6f:2d:06:48:ac:fd:6c:da:ec:
53:05:2f:37:7a:e4:15:57:0b:17:37:72:de:0b:ce:b9:a3:21:
76:70:8c:ad:10:12:7f:cd:2e:f7:bc:49:5b:6e:f4:2e:74:bb:
6c:44:91:dd:5d:70:5c:15:c0:ff:0f:c8:49:d5:f1:f9:c3:65:
25:96:fe:19:e1:6c:9f:88:88:e5:80:e4:82:a7:56:42:46:e4:
57:e9:e1:d3:e2:38:75:46:43:e5:8b:bd:95:34:ad:91:92:9d:
fc:35:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:48:15 2025 by rpki-client