Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f3497-dcbb-4970-a901-72fa0c680db3/1/5jwreNAMXhMFyJpukU95oWFz1n8.roa
File: 5jwreNAMXhMFyJpukU95oWFz1n8.roa (raw, json)
Hash identifier: hGyn1OYc8ujCIYt88tsMSsWu4dVGFyP14NKHpwPOQXc=
Subject key identifier: E6:3C:2B:78:D0:0C:5E:13:05:C8:9A:6E:91:4F:79:A1:61:73:D6:7F
Certificate issuer: /CN=e566f962bc8fc409f927e6351218db7a5f3d5551
Certificate serial: 01882086B1BB4F5E60E1FD3DC32F9F5E4D80
Authority key identifier: E5:66:F9:62:BC:8F:C4:09:F9:27:E6:35:12:18:DB:7A:5F:3D:55:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Wb5YryPxAn5J-Y1Ehjbel89VVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f3497-dcbb-4970-a901-72fa0c680db3/1/5jwreNAMXhMFyJpukU95oWFz1n8.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 46.253.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b1:bb:4f:5e:60:e1:fd:3d:c3:2f:9f:5e:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e566f962bc8fc409f927e6351218db7a5f3d5551
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e63c2b78d00c5e1305c89a6e914f79a16173d67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:f7:24:d5:eb:35:94:b7:58:7c:64:bb:c7:
c6:84:17:39:2b:f1:aa:71:5c:98:38:50:6f:81:45:
1b:6d:82:d4:85:69:4d:9f:8b:40:06:d2:a8:5d:ac:
ad:de:6f:0f:4c:1f:cd:fe:6a:17:50:b2:6a:84:1e:
73:09:71:01:31:31:46:04:7f:97:41:6c:fc:d5:e3:
1b:95:ba:94:28:5e:eb:97:bd:12:f7:ec:c9:de:5c:
31:a2:e4:58:05:64:0f:6f:9c:1e:b6:06:a2:a1:e8:
97:4d:c1:d8:bb:64:9b:ee:4c:96:89:4b:25:22:be:
91:66:2e:de:27:0c:08:59:6f:e5:c6:f3:96:ce:74:
bf:4d:aa:f0:ce:03:0e:a3:99:68:a2:86:9d:35:da:
3a:fc:ee:47:15:3a:5a:e6:74:61:bb:0a:bd:28:71:
6e:c6:08:49:39:bd:5e:e5:a6:3b:0c:79:e8:8f:c5:
fd:c8:b8:bc:16:20:50:1d:cf:bb:5c:70:60:23:a7:
f4:e0:4a:78:27:04:d3:02:12:09:f9:be:3d:f6:40:
ce:80:23:4f:a4:ba:05:0c:f9:f2:4b:c8:d9:b6:dd:
f8:56:23:4d:52:19:00:91:7a:fa:03:57:00:ae:16:
9a:bb:6c:72:1c:a8:2b:c5:82:35:7e:70:38:2d:ba:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:2B:78:D0:0C:5E:13:05:C8:9A:6E:91:4F:79:A1:61:73:D6:7F
X509v3 Authority Key Identifier:
keyid:E5:66:F9:62:BC:8F:C4:09:F9:27:E6:35:12:18:DB:7A:5F:3D:55:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wb5YryPxAn5J-Y1Ehjbel89VVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f3497-dcbb-4970-a901-72fa0c680db3/1/5jwreNAMXhMFyJpukU95oWFz1n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f3497-dcbb-4970-a901-72fa0c680db3/1/5Wb5YryPxAn5J-Y1Ehjbel89VVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:82:92:96:c8:05:97:d6:2f:c9:0f:34:37:ab:d0:b9:83:d0:
10:74:d3:8c:f8:8a:4b:7f:c2:a4:9b:4e:34:03:00:e9:58:45:
81:39:00:71:ad:50:6f:2c:cf:48:5d:b2:bd:f6:cf:68:b6:a1:
69:26:4c:4f:98:be:26:cd:ea:7c:70:22:34:83:37:ce:f2:a6:
81:b3:ce:60:55:b7:7a:dd:7f:72:af:0b:4f:b9:73:d0:93:84:
e2:ea:31:80:1e:18:db:ee:c4:6c:3b:bd:a0:98:37:ac:22:7f:
63:84:8c:4e:97:03:e0:1f:e7:56:53:dd:65:e3:1d:e2:b2:8b:
86:4b:88:42:34:0c:10:8e:1b:03:7c:57:eb:83:76:e0:68:f3:
e7:ab:04:4c:f3:9c:ce:27:e6:d9:f5:94:28:c8:98:d3:2f:48:
da:73:3c:6a:37:a2:95:3e:0c:a6:4a:f9:1f:42:fa:72:7c:e0:
c3:4d:fd:e6:78:6e:ad:da:94:ab:35:d2:53:e2:d2:e4:1e:1b:
09:3c:18:45:00:41:fe:f5:64:48:24:90:a0:7f:f9:89:5b:ae:
35:06:6f:93:b8:04:21:9a:27:1e:8f:73:55:5a:ac:4a:2d:03:
5b:fb:60:2c:e4:f3:32:40:17:df:e0:a1:96:ae:b8:37:62:13:
37:c4:35:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:04 2025 by rpki-client