Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/5M_OjlLIVamDDVM7Mn7ivXh42XE.roa
File: 5M_OjlLIVamDDVM7Mn7ivXh42XE.roa (raw, json)
Hash identifier: BkTeHcrpJ63GFCxKbvW+LBFvAZgP9sEBg4/Ow/FKng8=
Subject key identifier: E4:CF:CE:8E:52:C8:55:A9:83:0D:53:3B:32:7E:E2:BD:78:78:D9:71
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 0193F8E878C33D907B422DA6652CB2EF36FA
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/5M_OjlLIVamDDVM7Mn7ivXh42XE.roa
Signing time: Tue 24 Dec 2024 13:43:25 +0000
ROA not before: Tue 24 Dec 2024 13:43:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215886
IP address blocks: 46.253.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:e8:78:c3:3d:90:7b:42:2d:a6:65:2c:b2:ef:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Dec 24 13:43:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4cfce8e52c855a9830d533b327ee2bd7878d971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:c5:88:80:6a:b3:59:3f:c0:76:0b:c8:5d:
41:9a:8f:a4:12:c6:83:7f:fd:31:a2:33:bb:d2:85:
2e:a3:0c:e4:30:d3:bf:cb:53:b0:e1:d0:35:d8:a2:
35:38:fe:b0:cf:43:f6:38:a3:14:7a:35:2b:ff:66:
d5:40:13:cd:6c:92:a4:c4:66:cd:60:81:1e:23:7b:
cd:2e:09:e7:f4:4f:f6:50:55:e7:9a:6e:f0:5b:12:
6a:39:4d:d5:db:ee:65:30:c2:03:76:e2:76:d9:c5:
2a:77:25:77:0f:3c:f4:ae:ea:08:c0:c0:02:61:ff:
62:f2:4b:84:a4:2f:46:42:d7:4a:a6:45:a1:45:22:
89:82:30:24:72:9d:96:b3:2f:d0:79:6f:eb:42:57:
26:15:8f:d2:14:b4:f2:44:a0:e1:76:fa:e0:07:30:
da:75:ab:71:be:71:25:d0:9a:b8:18:ec:44:e8:e3:
bb:62:2b:dc:7c:34:82:35:5d:36:d9:2a:a6:a9:99:
e1:76:36:35:09:cb:7d:84:45:0c:ad:10:5b:40:85:
08:3a:0a:45:44:95:8c:70:cb:2a:20:a4:56:4f:39:
b0:f2:a4:46:ad:45:a9:4c:dd:26:f1:b9:55:ac:de:
01:94:15:95:09:a3:6c:38:05:fd:c6:8c:17:9d:05:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CF:CE:8E:52:C8:55:A9:83:0D:53:3B:32:7E:E2:BD:78:78:D9:71
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/5M_OjlLIVamDDVM7Mn7ivXh42XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.89.0/24
Signature Algorithm: sha256WithRSAEncryption
82:03:a8:de:8f:57:94:bb:b9:51:46:95:b9:44:e7:3b:70:a8:
49:ac:70:6f:ff:e7:07:3e:a3:84:fc:79:f2:35:69:4f:56:03:
c5:89:78:0b:2d:2c:b6:93:71:8d:8b:34:19:9e:80:79:f6:29:
34:89:c5:f7:aa:67:58:6e:81:d0:a2:68:bc:5e:5d:5e:70:25:
aa:e6:66:0e:87:45:5f:5a:ea:39:d1:f9:26:7b:1e:62:f5:93:
1c:c7:a0:65:70:2c:e4:1f:60:6d:26:38:fe:f4:33:43:1a:65:
9b:05:68:9a:84:cd:b8:a7:e0:95:11:ef:66:36:a2:17:54:22:
1e:77:67:d1:a6:ae:69:bf:6a:ac:7a:64:8f:14:9f:3f:f4:79:
31:0c:7f:4f:84:47:29:e7:e7:6e:c1:f9:88:15:40:80:09:2f:
51:cf:1f:e4:96:67:53:c3:5c:6a:d4:4a:30:95:b8:55:d2:2f:
67:0e:b9:37:2f:a6:69:68:5e:f4:dc:95:81:bf:31:14:3b:00:
d2:f6:36:67:be:24:c4:22:33:a1:90:ac:11:8a:3a:86:6c:2f:
b2:be:b5:9c:b5:db:41:58:74:16:fd:6f:64:b0:0e:62:92:0f:
86:2f:c2:d0:30:55:18:59:c0:c5:21:b4:a7:ae:87:0d:a5:81:
89:b1:c7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:25 2025 by rpki-client