Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/w9DsKJQchXyKOre5d88roxihJjM.roa
File: w9DsKJQchXyKOre5d88roxihJjM.roa (raw, json)
Hash identifier: qJiC2MKflN/naDfpF5pUN+PjVWNrfef690kG+7C6occ=
Subject key identifier: C3:D0:EC:28:94:1C:85:7C:8A:3A:B7:B9:77:CF:2B:A3:18:A1:26:33
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0193651895B247B6F66C256DEE1939A6ED7B
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/w9DsKJQchXyKOre5d88roxihJjM.roa
Signing time: Mon 25 Nov 2024 20:52:10 +0000
ROA not before: Mon 25 Nov 2024 20:52:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149875
IP address blocks: 5.39.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:18:95:b2:47:b6:f6:6c:25:6d:ee:19:39:a6:ed:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Nov 25 20:52:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3d0ec28941c857c8a3ab7b977cf2ba318a12633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:81:03:1b:15:fa:ae:fe:20:57:4d:5d:59:
23:72:b0:7c:38:02:90:02:fa:7f:b5:88:80:d3:de:
15:a3:b7:d1:7e:56:0b:00:b9:b8:a5:63:0a:d6:ca:
6c:ca:1b:c1:54:ea:ce:ce:6f:0c:d6:b7:f4:ce:5b:
6e:7b:75:2d:21:b2:59:c4:51:3a:9e:bb:be:e7:54:
8c:d4:9a:68:d7:68:e0:3b:c2:04:4c:9a:30:7f:84:
4b:23:2e:bf:6f:d9:e9:22:ef:69:4d:ea:fb:31:d8:
a9:96:be:ab:d5:8a:c9:61:23:98:38:25:84:8a:a9:
0d:c9:49:47:8a:80:87:34:ec:23:90:0e:6a:9b:74:
7e:f7:be:4a:10:7a:00:1c:f2:1c:e8:e7:60:5c:92:
35:d6:81:66:7c:d1:c4:13:77:6f:b4:16:b7:45:0d:
4a:27:6f:3f:18:14:3c:22:cc:23:46:9b:05:96:15:
b0:87:cd:4e:95:23:43:e0:93:63:52:90:0d:81:f4:
39:c7:fe:7d:f5:23:ba:9c:da:74:fc:e2:73:de:ad:
1b:cb:19:dc:f1:8c:2c:41:cb:de:7a:e4:51:3d:67:
fe:fc:44:d8:2f:b1:0d:b8:18:44:3f:d8:f4:66:47:
61:3b:5f:b9:bc:81:8e:80:da:8c:c2:f3:3f:aa:f9:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D0:EC:28:94:1C:85:7C:8A:3A:B7:B9:77:CF:2B:A3:18:A1:26:33
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/w9DsKJQchXyKOre5d88roxihJjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.250.0/24
Signature Algorithm: sha256WithRSAEncryption
73:94:18:b7:3d:58:4f:6f:95:40:47:cb:2c:5e:64:b0:9f:8c:
fa:44:cf:b6:a7:99:2c:b6:89:9d:af:fd:5f:3b:40:99:23:e1:
6a:01:96:10:1d:10:a5:7d:96:e6:9c:92:de:c1:bb:6c:5a:42:
94:c1:3f:a5:3a:65:fe:ce:cc:c3:b4:21:56:ce:28:cc:d6:f6:
01:dc:09:a1:68:ae:fa:f9:64:91:3b:74:46:9d:41:7a:f8:6b:
47:b1:5e:6b:66:ec:35:06:19:b2:8c:e6:d6:09:bf:4c:1a:b0:
48:42:6c:64:e4:02:a5:4f:93:d5:bb:d9:ac:a1:f1:1f:aa:6c:
f2:9d:b2:8a:d4:6b:b1:77:2e:30:fd:6f:3e:31:0c:ae:ca:fd:
b8:af:70:e6:3c:6b:54:7a:ff:69:18:5a:8b:b2:fa:7a:1c:7a:
86:bc:f6:55:d3:07:93:41:5f:c7:3e:24:fb:3c:2d:ea:cc:ae:
d0:df:9a:fa:6f:66:bc:fe:e9:f4:dd:fe:0d:fa:a4:58:1c:ca:
24:f7:94:8a:b1:44:e0:ed:5b:10:25:9c:86:ee:b8:02:1f:d4:
22:32:38:e7:32:b4:a3:1b:b8:f3:d2:2e:7e:4c:82:1e:55:e4:
90:16:0a:9b:40:06:40:da:a7:7e:5c:9b:d0:98:dc:2a:fa:5c:
3a:03:ca:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:04:22 2025 by rpki-client