Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/w5BxPGkpdUOoj6KfnZEduZETjuE.roa
File: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (raw, json)
Hash identifier: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=
Subject key identifier: C3:90:71:3C:69:29:75:43:A8:8F:A2:9F:9D:91:1D:B9:91:13:8E:E1
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 019426D9F79A259CF0B813349738DDC5E148
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/w5BxPGkpdUOoj6KfnZEduZETjuE.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19330
IP address blocks: 193.58.199.0/24 maxlen: 24
212.121.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f7:9a:25:9c:f0:b8:13:34:97:38:dd:c5:e1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c390713c69297543a88fa29f9d911db991138ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:d3:2e:a4:95:3b:62:0c:67:52:3d:bd:fc:
0b:de:09:3d:c2:3d:da:03:08:b4:2e:e4:e9:fc:eb:
96:65:ba:a2:da:22:21:41:ab:57:29:43:6a:f6:0e:
f6:ea:1f:59:8a:0a:22:5a:be:c7:b4:00:52:cc:0c:
22:62:14:0c:66:c8:8a:3e:45:aa:a0:38:81:0c:ed:
08:2e:82:e6:6a:e6:84:d9:6d:13:67:02:5e:a4:4d:
8c:9a:4a:23:92:7b:3a:63:1f:ab:22:8b:1a:69:30:
4c:c1:18:48:f5:03:54:04:0e:a8:fb:4e:3b:d1:49:
39:35:2b:7f:22:f0:8b:61:d5:5a:f6:a4:5e:67:c6:
cd:3d:49:dd:3d:37:fa:45:1a:c8:43:10:1a:e5:39:
fd:68:6b:03:c9:08:5e:0d:ec:00:0b:d8:26:8d:82:
73:b5:27:35:13:ba:f8:f9:c8:d4:12:d1:af:77:0c:
4e:25:00:db:fb:35:b0:5c:22:55:8c:64:1d:ad:98:
b2:40:64:ea:22:61:d0:4e:15:8f:4c:ab:e7:a7:12:
f4:33:97:a3:ce:88:9c:2b:fd:ea:00:23:d8:6c:42:
ed:a3:c2:c2:e5:ed:50:2d:59:27:fb:f4:89:66:59:
6d:ce:bf:72:79:d6:ce:ac:ac:af:5e:f4:c6:6c:65:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:90:71:3C:69:29:75:43:A8:8F:A2:9F:9D:91:1D:B9:91:13:8E:E1
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/w5BxPGkpdUOoj6KfnZEduZETjuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.199.0/24
212.121.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e6:e5:61:a5:d9:47:da:24:43:75:01:6e:2c:11:2a:4c:4a:
97:92:72:ad:b0:22:b9:84:b6:87:c8:b3:9c:fd:c9:0e:ae:98:
74:36:59:a0:67:9e:12:28:98:e7:24:12:88:a1:51:fe:d2:6d:
3a:fc:df:96:da:59:6d:16:a9:f1:96:20:70:aa:e5:a3:1a:da:
01:0b:ee:1d:67:81:e8:f9:1c:da:04:fc:4b:4c:5c:e6:81:ce:
c6:e4:84:6a:56:32:ee:5e:fa:93:29:a5:59:ab:e6:93:39:34:
7b:b3:7d:54:42:eb:7c:55:b6:33:d9:2f:bc:9f:15:9e:b9:03:
7e:b3:18:6b:cf:11:46:f0:a5:0c:cd:1d:01:ba:c2:21:bf:33:
d3:aa:1f:5f:89:9a:d5:09:c1:3d:58:6c:17:80:c6:39:8a:e9:
f5:66:ba:c8:c1:7f:bf:12:10:04:76:9e:bc:77:a2:11:d9:82:
74:84:16:69:7b:2e:0a:6c:d7:b4:ed:28:07:9c:c7:0c:bc:ae:
31:29:a2:ac:ac:19:b6:1f:2a:92:e2:57:1d:ce:5d:7c:04:a6:
66:76:b6:16:07:86:ca:7e:c0:5b:80:9b:18:93:d2:de:52:67:
9a:07:e3:f4:68:a0:9c:fe:26:7e:01:63:5a:14:a6:84:0a:91:
ef:70:db:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:28:43 2025 by rpki-client