Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/5cshQDWiETJPEPkneLCI83DOyB8.roa
File: 5cshQDWiETJPEPkneLCI83DOyB8.roa (raw, json)
Hash identifier: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=
Subject key identifier: E5:CB:21:40:35:A2:11:32:4F:10:F9:27:78:B0:88:F3:70:CE:C8:1F
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01942746F8FC7228ED3F9DD1EB317726AFA5
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/5cshQDWiETJPEPkneLCI83DOyB8.roa
Signing time: Thu 02 Jan 2025 13:49:10 +0000
ROA not before: Thu 02 Jan 2025 13:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51248
IP address blocks: 2a10:9687::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:f8:fc:72:28:ed:3f:9d:d1:eb:31:77:26:af:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jan 2 13:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5cb214035a211324f10f92778b088f370cec81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:28:28:0e:4c:bd:2a:c2:bb:5f:6e:75:e8:
5b:95:c2:29:ca:c7:fa:49:c4:36:0e:f4:01:8e:5c:
bc:96:55:c6:11:df:49:96:ff:49:e7:bf:62:63:e5:
44:2e:91:1f:43:70:62:1b:93:a9:46:6c:34:cf:37:
03:13:db:19:d6:8a:12:2f:7a:d6:49:61:d9:d1:e2:
4a:11:81:f8:96:de:9c:01:a4:cb:21:60:b6:3f:68:
af:54:b9:1e:a7:f3:25:a4:e0:df:71:46:62:7a:30:
0f:6a:31:eb:d5:ae:51:df:74:df:d2:d9:47:e9:05:
a3:a0:09:52:cf:cd:d4:65:76:f8:98:f5:a7:e8:3c:
5f:f8:3b:0c:e2:c2:76:96:59:0e:46:e2:31:18:a3:
5b:3a:3d:39:90:51:d8:9f:cc:40:e1:d4:df:ef:22:
60:78:5c:61:2d:83:6e:9f:ba:c6:1d:45:f7:0f:88:
6f:1b:63:07:1a:45:4c:16:d6:7c:c9:b7:6c:93:a0:
6e:63:a0:27:f8:62:f8:8c:c1:a5:74:22:37:a9:24:
42:07:15:5d:62:78:35:e2:3c:95:cc:7a:1d:d4:22:
57:f9:f8:c8:cc:57:8f:02:01:9b:10:42:ed:6e:66:
c3:c2:76:37:a1:e8:d6:08:e7:45:9d:67:ee:6b:ce:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CB:21:40:35:A2:11:32:4F:10:F9:27:78:B0:88:F3:70:CE:C8:1F
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/5cshQDWiETJPEPkneLCI83DOyB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9687::/32
Signature Algorithm: sha256WithRSAEncryption
48:3b:3b:f3:8c:cd:87:f7:a0:28:f6:65:cb:e0:a7:e6:c5:be:
51:e5:1e:27:56:11:cf:68:5a:1a:5c:b0:ac:74:5d:8e:6b:c1:
f0:69:83:ed:a2:fc:1d:5a:58:b0:c3:a4:9f:ff:5e:ae:55:47:
79:90:e4:a1:25:29:ad:27:ad:d7:8b:65:f8:1e:d3:41:ea:2d:
9b:54:f2:4f:69:2d:0c:f0:e9:cf:0f:95:1c:44:3f:a2:a9:97:
30:a9:ee:c0:a8:5f:49:ad:42:ef:a6:77:4c:6f:ce:ca:47:8e:
72:87:61:0e:83:44:4e:e6:08:8c:43:c7:72:8e:92:c9:f5:46:
54:a2:94:8f:dd:2e:b4:06:64:f5:7f:4a:54:35:ec:09:ed:58:
90:c4:80:0e:b3:1a:dc:54:fc:32:d7:1b:49:f7:5d:b4:1a:fb:
e5:6c:e4:be:1b:14:1a:fa:03:b9:f1:6d:6c:e7:81:3f:9f:a4:
4e:c4:80:a3:b7:b7:b2:c0:a8:f8:b9:2a:4b:d2:47:9c:0a:f3:
67:4f:43:54:f5:97:c2:4f:60:0b:52:a1:9c:cc:5d:eb:48:89:
56:93:fc:8f:f6:db:9e:b5:57:cf:9a:96:94:4f:48:f6:8f:a5:
66:00:99:a0:5e:32:47:f2:fd:86:3d:83:b2:1b:7e:b2:6b:f2:
1c:7f:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:54:37 2025 by rpki-client