Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/xTUpOaF5FTqFkAFB2_SuMWVclvA.roa
File: xTUpOaF5FTqFkAFB2_SuMWVclvA.roa (raw, json)
Hash identifier: ARQ4Ixl2esPo2NgdZVXJk88WzMuDoDwktY5aSc213/c=
Subject key identifier: C5:35:29:39:A1:79:15:3A:85:90:01:41:DB:F4:AE:31:65:5C:96:F0
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018BC7DCC9B141BD5CCEED01A8BBDDD7B349
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/xTUpOaF5FTqFkAFB2_SuMWVclvA.roa
Signing time: Mon 13 Nov 2023 08:46:57 +0000
ROA not before: Mon 13 Nov 2023 08:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 79.139.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:dc:c9:b1:41:bd:5c:ce:ed:01:a8:bb:dd:d7:b3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 13 08:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5352939a179153a85900141dbf4ae31655c96f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:04:a6:76:ac:d3:08:0e:13:df:17:a7:87:
47:e7:30:2d:e5:73:23:0a:f3:21:8c:e6:00:30:23:
28:e2:a5:de:c4:7e:22:3f:2d:42:ab:c9:7c:06:85:
dd:fe:93:41:5c:0e:e8:4f:34:dc:12:f6:d9:cc:83:
0a:fe:5b:1d:05:9f:3a:3e:f1:37:fb:16:39:6b:17:
05:53:c3:32:2a:16:ce:c4:4b:f2:ac:1f:4e:e8:07:
5e:04:59:72:58:8e:63:2c:c8:85:ff:49:85:78:3c:
25:ab:4d:5d:a6:13:35:48:02:f5:ea:a8:94:79:98:
78:35:39:e4:bc:76:89:f4:af:4d:2f:89:98:c2:fd:
7d:6d:33:2c:84:f7:45:ef:57:99:e6:6f:ef:44:6a:
9d:6e:2e:ba:9b:48:f3:86:71:97:e7:28:a6:e2:59:
d3:3b:7a:44:1b:bb:60:78:06:4e:12:3f:10:f8:f2:
3b:2c:8f:6d:4b:41:1a:d4:b9:64:9c:ab:1f:26:09:
ba:d3:59:b5:2d:9b:61:35:60:42:03:f8:d3:9d:f5:
72:fd:c8:9c:19:99:ed:33:7e:d4:f2:fe:ea:10:56:
1f:3e:ec:a2:26:05:5c:02:82:d3:83:41:57:b9:6e:
77:64:c1:45:ea:f0:f0:29:a1:a9:eb:12:ca:f2:f8:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:35:29:39:A1:79:15:3A:85:90:01:41:DB:F4:AE:31:65:5C:96:F0
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/xTUpOaF5FTqFkAFB2_SuMWVclvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.52.0/22
Signature Algorithm: sha256WithRSAEncryption
83:78:96:5b:11:dc:81:d6:1a:62:d3:3c:0f:c2:dd:82:49:7b:
4a:ce:10:5f:84:e5:0b:8e:75:35:db:e0:8b:18:03:65:b3:b7:
20:f8:6f:27:07:16:ab:46:37:80:0a:51:50:66:ae:ca:3c:86:
ce:bc:17:38:f3:da:b3:e7:9d:96:b5:c4:ce:52:a9:2d:af:e6:
35:b1:62:e3:5d:e7:bb:f3:a0:7e:39:53:e5:c1:27:55:9a:54:
3a:e3:ae:d9:a5:3f:38:54:1d:8b:27:e2:f7:74:46:ec:8b:6c:
a3:7e:8e:ab:23:75:07:c6:8a:32:ed:68:59:c9:c0:10:c9:cf:
0b:20:10:ab:5c:f6:a1:df:e3:f2:dd:55:e9:15:32:95:02:f4:
23:82:f4:d0:17:3f:a3:98:e9:8e:50:06:b3:d5:f2:84:d0:d3:
d8:29:0e:60:98:3d:05:14:17:8a:b9:fb:a3:25:2d:35:18:1f:
b2:0d:5e:94:e6:27:8d:be:2b:c2:1f:d9:44:b8:90:90:84:40:
c2:e6:df:02:b4:b9:85:d0:63:87:8b:b4:b3:be:11:3c:76:a1:
ef:58:4e:3c:e8:be:13:a5:37:89:20:db:ca:55:0b:27:40:0c:
e7:20:f1:6e:09:2d:66:42:4b:79:71:18:32:be:ff:65:29:e7:
2e:87:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:38 2025 by rpki-client