Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/KWv1h7d7_BKtQ7u2xaAlaVwsnKU.roa
File: KWv1h7d7_BKtQ7u2xaAlaVwsnKU.roa (raw, json)
Hash identifier: FGwbcx3clkwRs2TORHQS/7wJnH4FGiwH99SWIt+VKCQ=
Subject key identifier: 29:6B:F5:87:B7:7B:FC:12:AD:43:BB:B6:C5:A0:25:69:5C:2C:9C:A5
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C2B426EEAE9F0F7925040F25715DB
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/KWv1h7d7_BKtQ7u2xaAlaVwsnKU.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151633
IP address blocks: 5.39.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2b:42:6e:ea:e9:f0:f7:92:50:40:f2:57:15:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=296bf587b77bfc12ad43bbb6c5a025695c2c9ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:b5:60:8c:fd:b0:84:4b:65:38:d0:4e:e9:
d4:28:67:bd:c9:05:ea:bd:a1:cc:5e:49:22:d4:20:
b3:bf:69:88:7d:e1:79:70:16:49:bc:88:0f:09:f0:
ce:f4:8a:56:7a:06:22:91:43:64:a3:84:40:75:25:
0d:bc:29:27:02:f0:2c:07:da:8b:a4:13:4d:18:33:
9f:72:cb:53:98:b1:fb:b2:8a:dc:55:f2:ef:d7:0e:
98:9a:30:e1:43:02:e6:fb:60:75:8e:1b:59:7a:d3:
eb:5c:a2:9e:50:0f:5b:03:cb:2f:48:8b:ef:2e:f4:
69:a5:a7:64:b5:95:9b:96:45:5a:6d:df:62:82:28:
5b:61:5c:f9:a8:09:77:67:d6:3d:36:c2:da:8f:6d:
36:e9:c5:c2:71:44:b9:6d:a9:96:83:9d:1a:4b:9e:
3e:d7:ca:48:dd:22:92:da:20:a1:9e:ea:37:e4:35:
43:b8:3f:3a:f6:f0:6f:08:1b:02:29:16:35:04:e7:
03:5c:69:59:0c:3d:b9:f6:30:21:d8:ba:62:c2:ed:
91:4e:df:9d:8f:11:0d:4b:c0:44:ed:a5:c2:f7:af:
bf:7a:07:66:7a:e9:74:48:3e:cc:5b:1d:43:47:b0:
d7:4e:6b:74:e0:ec:67:46:e7:05:57:b3:79:05:84:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:F5:87:B7:7B:FC:12:AD:43:BB:B6:C5:A0:25:69:5C:2C:9C:A5
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/KWv1h7d7_BKtQ7u2xaAlaVwsnKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.250.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ce:27:73:27:ee:4e:8f:79:17:77:07:14:63:c1:ee:b3:0e:
99:7a:51:56:ea:a8:05:3d:5c:22:47:99:00:35:5b:c9:82:45:
88:11:21:5f:31:9a:61:9f:c3:28:5b:78:80:5b:c7:8e:22:cf:
17:d9:88:e3:b5:ea:b1:b7:7a:31:88:e1:cd:40:eb:fd:b5:32:
5c:2b:61:b8:4c:b6:44:19:ab:ca:78:56:80:0a:2c:0e:47:69:
11:07:d8:24:35:37:00:2b:6f:ef:4c:12:31:04:74:cf:96:54:
55:f6:8f:c4:cc:58:9e:ff:59:11:1f:fe:ae:85:1f:29:ae:b5:
88:64:d9:5e:d3:a0:5c:3d:5f:44:24:6b:d9:8a:9e:cc:5e:f1:
49:93:88:28:aa:4c:63:5d:45:e1:63:cc:0a:64:80:f7:78:37:
17:5c:d7:3f:96:b2:10:5f:8c:69:2d:11:97:13:65:1a:b9:a8:
ab:26:d9:60:d8:66:17:59:cd:55:5d:24:4b:f0:33:35:61:ea:
11:d3:bf:47:79:6e:25:5d:9b:c2:ae:f9:ef:87:85:5d:7e:f8:
7b:a2:2b:7e:ba:16:fb:45:a4:07:69:35:2f:14:dd:cf:c4:dd:
53:a2:0d:36:c1:84:e8:2f:b7:f8:34:e3:3d:06:f8:17:37:1e:
e5:0f:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:45:52 2025 by rpki-client