Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5EBoRhVqDrjepbPwDN5F9rvnrso.roa
File: 5EBoRhVqDrjepbPwDN5F9rvnrso.roa (raw, json)
Hash identifier: ODY8ZBIDl8sE4VNCdAO9FgSJ9c1tkXc31SFmWcjdSlk=
Subject key identifier: E4:40:68:46:15:6A:0E:B8:DE:A5:B3:F0:0C:DE:45:F6:BB:E7:AE:CA
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA9007B2036DBCD703E9235BDC7F10
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5EBoRhVqDrjepbPwDN5F9rvnrso.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 188.72.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:90:07:b2:03:6d:bc:d7:03:e9:23:5b:dc:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4406846156a0eb8dea5b3f00cde45f6bbe7aeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:ad:cb:f4:5a:13:65:7f:d5:b1:05:ff:77:
3e:d1:78:e1:bb:53:e4:cc:88:55:9c:c0:e7:2c:48:
59:cf:80:ce:4b:be:58:eb:fc:08:83:3c:e4:f6:a3:
b5:36:e7:ca:3c:34:6f:d6:4d:f3:34:9a:dc:37:db:
1d:36:22:31:83:b1:a9:e2:6b:43:ed:b0:7b:95:56:
a8:3e:dd:8b:cf:06:05:d2:33:32:52:3a:ec:b7:e2:
91:6b:28:e8:e7:e1:9b:70:a8:28:7b:e7:25:7e:ff:
f4:51:cb:d6:9c:3a:17:d0:9a:2b:f4:ac:0e:a6:bb:
d9:13:ec:d9:3f:b8:98:82:1e:75:52:19:f4:8a:fa:
05:e3:63:ff:f3:da:e5:68:bf:d5:46:3d:dd:b6:0b:
b7:1e:20:ca:00:e5:4c:1a:28:16:30:9c:38:9c:3a:
df:f8:bb:c4:20:ef:9f:51:19:7c:22:07:99:1c:4c:
40:35:aa:75:80:4e:74:d0:e2:f6:ea:e0:a6:d4:c7:
d3:37:d7:41:23:d2:57:fb:7a:e6:3c:94:93:1b:f9:
1f:ec:74:64:6e:66:00:00:80:cc:6e:a6:1d:b2:c4:
83:ed:3b:a9:65:a1:bb:54:37:a3:39:ce:78:20:a1:
50:2a:83:7b:58:2f:17:9d:20:df:ce:a7:36:a1:9f:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:68:46:15:6A:0E:B8:DE:A5:B3:F0:0C:DE:45:F6:BB:E7:AE:CA
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5EBoRhVqDrjepbPwDN5F9rvnrso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.93.0/24
Signature Algorithm: sha256WithRSAEncryption
52:15:21:05:ef:8a:d1:5d:90:88:90:c5:f0:93:ce:bd:24:55:
50:e7:0c:a6:4a:b9:b8:98:ad:89:26:31:d4:c5:2d:ea:70:b5:
b6:a2:60:df:b7:ca:c8:33:e8:c0:4b:2f:07:ba:72:57:76:7d:
cf:61:5f:c5:67:c5:e7:0c:bc:de:7d:23:53:a6:5d:84:3d:19:
b4:8c:cb:d4:59:8b:29:ec:c6:21:69:78:5f:6d:40:e8:75:c9:
9b:f9:9b:55:69:4c:0c:34:e6:fe:33:d6:a0:aa:10:9e:20:36:
c7:52:7c:52:9b:8a:f5:e1:cc:6e:58:56:83:b4:0a:ba:db:7f:
4e:e3:c8:4e:18:5a:92:ed:94:84:34:2a:f9:b0:98:78:8e:20:
ac:95:d0:83:4b:52:61:8a:42:a9:46:02:fb:21:b5:1d:78:79:
c9:cf:0c:d5:51:dc:02:10:34:43:df:7d:cf:eb:5d:79:78:8c:
72:c1:e4:7b:2f:d3:cc:a7:81:c0:f1:ef:70:76:3a:f3:77:c8:
c9:47:6e:aa:d2:eb:70:6b:92:0a:9f:78:93:21:8e:01:49:bf:
35:97:64:47:15:5a:8e:64:75:bf:6e:eb:91:d0:67:9d:be:6a:
1c:d7:18:95:4d:c7:77:8e:cf:34:a0:a2:9d:00:3c:bd:0a:ad:
17:0f:26:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:08 2025 by rpki-client