Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AG0R4NdSsuBeNCNacTEShvC4V78.roa
File: AG0R4NdSsuBeNCNacTEShvC4V78.roa (raw, json)
Hash identifier: 9tMX/wAJMp1K781n1UgBEA2sENOsO5dGG3bXdYWy53M=
Subject key identifier: 00:6D:11:E0:D7:52:B2:E0:5E:34:23:5A:71:31:12:86:F0:B8:57:BF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143FCCD303E9D285C16264B5779BB22
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AG0R4NdSsuBeNCNacTEShvC4V78.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43278
IP address blocks: 5.42.211.0/24 maxlen: 24
212.46.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fc:cd:30:3e:9d:28:5c:16:26:4b:57:79:bb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=006d11e0d752b2e05e34235a71311286f0b857bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:13:96:2b:32:d0:f0:06:b5:6d:f1:55:bc:
9c:31:f4:ea:a7:32:9f:1e:73:b3:cc:cb:fd:1a:34:
5b:9a:5d:2a:ca:72:fa:b0:7b:8d:32:cb:48:ff:50:
16:8b:82:e4:25:8e:19:33:94:1a:13:34:0b:47:45:
20:55:fe:fe:e6:13:3f:73:c4:14:82:ea:a9:e3:26:
55:70:e6:66:78:2b:c6:4c:03:72:d8:bb:39:07:b4:
31:66:4f:55:e8:8f:31:43:70:91:87:0e:3b:df:e0:
4f:9f:d3:b8:f0:a4:a2:f4:39:23:df:e0:7c:aa:59:
03:ff:98:6c:96:4b:40:ba:40:c5:d2:c2:30:ee:5b:
7d:68:4e:d0:b8:7c:86:68:97:1d:0e:fb:ea:55:aa:
f7:e1:78:3c:92:b3:03:7a:bd:f0:12:c5:99:f3:09:
3b:17:b7:e3:cb:66:38:dc:2f:3f:ea:87:3d:81:c2:
01:60:23:2d:ac:ad:61:eb:ba:da:ef:e2:53:33:33:
25:f7:fe:1f:36:91:b5:98:61:0c:51:24:dd:a3:f0:
d8:64:20:de:66:67:c8:74:15:f4:e5:c1:a3:53:bd:
41:5f:a0:fc:c7:9d:19:4d:e1:28:7c:ca:50:62:11:
e4:9a:ff:75:b8:3a:0a:a9:1e:50:66:e9:84:1b:a5:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:11:E0:D7:52:B2:E0:5E:34:23:5A:71:31:12:86:F0:B8:57:BF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AG0R4NdSsuBeNCNacTEShvC4V78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.211.0/24
212.46.36.0/24
Signature Algorithm: sha256WithRSAEncryption
19:31:2a:d0:a3:f3:fb:fe:e1:24:1b:ba:01:a4:a4:d3:1f:f6:
ce:96:22:2b:31:e0:31:bd:8d:f7:c1:87:ab:f9:68:ce:da:d9:
04:03:5a:43:ab:a8:b2:36:9c:5d:ec:e8:d6:9a:b2:8b:68:72:
27:74:6a:f4:43:6e:33:78:c1:68:49:bf:e1:3e:be:13:58:8a:
60:c9:24:ac:bc:63:53:88:fa:a4:90:d2:d4:71:24:5b:fb:de:
12:ba:90:c2:9c:b2:a1:b7:98:ad:5d:07:30:30:cb:37:a6:a1:
c4:f8:e5:c7:04:e6:2b:31:08:d5:7a:96:e1:ee:ae:e9:48:65:
fc:14:4e:99:44:21:1c:9b:52:6e:ef:61:c1:38:63:d3:1d:33:
c0:43:d9:e1:c7:f5:77:8a:bb:cb:9d:2e:28:2f:48:ab:db:99:
67:a9:46:99:e3:6d:0f:8a:cd:60:aa:62:66:83:5c:30:21:8b:
27:e5:6e:47:a6:17:8f:32:81:1b:25:64:ca:9c:bb:c7:37:73:
79:71:c3:95:3f:5b:75:72:91:eb:df:3f:03:f6:e3:a0:09:b6:
c5:92:ed:8e:a8:d6:a5:60:d9:24:69:e4:c2:cc:57:6a:cc:95:
f1:1d:bd:b0:b0:8d:56:3a:bf:77:71:d5:30:a5:2a:50:7d:09:
85:5c:0b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:31 2025 by rpki-client