Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/4En8hh6iPMt2ROgkWiKsRZvR28k.roa
File: 4En8hh6iPMt2ROgkWiKsRZvR28k.roa (raw, json)
Hash identifier: ihXZUFrhHsMSpZOwta8+Pb61Dl0AGxi0cujp3kYkDEw=
Subject key identifier: E0:49:FC:86:1E:A2:3C:CB:76:44:E8:24:5A:22:AC:45:9B:D1:DB:C9
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019487DD7BC700122E1FF862998C23CA8397
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/4En8hh6iPMt2ROgkWiKsRZvR28k.roa
Signing time: Tue 21 Jan 2025 07:57:06 +0000
ROA not before: Tue 21 Jan 2025 07:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 5.178.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:dd:7b:c7:00:12:2e:1f:f8:62:99:8c:23:ca:83:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 21 07:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e049fc861ea23ccb7644e8245a22ac459bd1dbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:63:0c:ee:37:51:20:22:dd:af:3b:51:51:
7d:01:b8:04:2f:48:34:c0:73:22:22:24:fd:52:55:
c8:d2:03:45:90:c6:42:73:17:7b:d8:9a:61:85:0e:
74:27:44:f2:fd:a0:39:85:b2:47:5d:4f:da:82:8f:
19:cb:da:2c:ce:7c:dc:65:47:3a:45:44:85:65:74:
50:90:10:62:bd:81:1c:26:50:13:4f:89:90:6c:70:
91:f0:cf:f6:62:7a:5b:5d:f0:1f:a8:bd:ea:9f:4f:
25:8b:3a:99:43:fc:20:c5:df:d9:bd:2d:30:06:65:
be:22:66:be:1c:3d:1c:28:4c:c6:1f:6d:ba:7b:fb:
e6:84:e8:2f:47:1e:b1:cf:8e:5f:89:31:c6:00:1b:
31:7c:36:1e:1e:2f:8f:bf:46:ae:a5:4b:3d:56:6f:
68:3b:35:4d:7a:ba:bd:86:2d:29:51:ec:97:ec:3e:
0d:d6:27:f4:ac:8e:7b:d7:4a:24:11:43:cc:c7:a1:
2c:17:9d:99:f1:3d:c6:be:5c:5a:1e:69:c9:47:01:
df:b1:c5:e3:d7:83:e5:d8:da:b2:25:46:75:0c:4b:
3a:17:99:9c:68:20:af:9e:f0:49:c8:d1:18:0b:25:
54:d8:43:75:90:9d:73:0a:8a:5c:84:ca:0a:1a:1b:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:49:FC:86:1E:A2:3C:CB:76:44:E8:24:5A:22:AC:45:9B:D1:DB:C9
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/4En8hh6iPMt2ROgkWiKsRZvR28k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.96.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c1:0d:f8:74:cc:9b:80:91:7a:a9:66:44:02:d9:c7:73:fc:
f8:20:ee:3e:76:9d:64:62:37:88:80:2f:86:ba:92:9c:1c:af:
cd:0f:18:b1:17:da:a0:58:1d:ee:15:05:35:39:24:b5:e4:12:
5a:3c:bf:91:8f:d0:6c:20:ea:01:3f:cd:f8:6b:2b:35:ab:e0:
a6:9f:6d:5e:46:a8:71:f5:94:1e:86:04:ff:ab:51:e8:84:92:
78:39:f4:4c:09:f5:e0:ae:52:c8:b8:59:ff:45:29:43:81:29:
d0:f4:9c:7f:5e:a9:10:67:67:12:eb:43:bc:9a:c1:66:b4:63:
25:ec:72:d7:2d:47:06:fe:0e:97:f5:cf:50:ea:63:5e:fe:b6:
d0:03:a2:77:e0:5b:0e:82:52:ee:cc:99:22:1d:02:bd:5a:d5:
7f:d8:a0:9e:c4:9f:a9:95:bc:c8:23:4c:a8:2b:1f:b3:77:2c:
46:94:d8:fe:55:4a:3b:c3:f1:c4:74:69:44:7d:89:c0:d9:be:
6d:9c:02:a3:bf:d9:8e:c7:3e:4a:dc:1c:b6:ab:b4:66:86:c8:
d1:e6:8c:09:46:21:28:55:d5:2d:aa:47:68:80:d9:b8:1c:ed:
59:5a:40:73:a3:a8:79:2c:53:60:58:0c:3d:bf:76:f2:71:66:
f4:4c:2e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:23:01 2025 by rpki-client