Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/W5a7DdwJaAnEaRHZv6EO9kbudzg.roa
File: W5a7DdwJaAnEaRHZv6EO9kbudzg.roa (raw, json)
Hash identifier: oyakXu5rs8SXNOZxzAoWDuA9NdXgDHDVljC1e0neNkA=
Subject key identifier: 5B:96:BB:0D:DC:09:68:09:C4:69:11:D9:BF:A1:0E:F6:46:EE:77:38
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019427B694915ED0C339EB2640E63E40556C
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/W5a7DdwJaAnEaRHZv6EO9kbudzg.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 185.39.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:94:91:5e:d0:c3:39:eb:26:40:e6:3e:40:55:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b96bb0ddc096809c46911d9bfa10ef646ee7738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:a7:6b:db:57:53:aa:74:29:0f:3c:87:08:
d4:14:06:ab:60:51:28:13:86:15:42:4c:18:23:26:
3a:ef:c5:15:2b:d8:c4:39:e7:13:fc:86:36:e4:88:
bd:f8:ca:19:60:71:ef:dc:7c:0d:fe:94:39:db:d7:
f2:54:7e:5d:80:cf:57:f9:83:fb:b4:e8:69:f8:9e:
44:d2:48:23:19:38:62:4d:15:a3:5a:de:39:cb:4a:
1e:a8:72:99:a4:ed:32:e2:52:26:9c:6a:76:e0:09:
f3:a3:e7:9d:57:e0:be:1a:2b:f9:c1:ca:4d:94:60:
c0:14:b0:9c:4e:49:ee:af:b3:09:8c:54:03:66:05:
26:7a:f6:51:a1:e7:a4:48:24:25:76:8a:10:8e:b6:
5f:e3:53:25:74:f9:65:1e:be:1c:aa:26:f1:47:98:
a7:8c:f0:59:b9:55:3d:0b:7a:b1:94:87:8a:62:50:
d2:94:df:f1:13:d7:f7:3e:48:cd:ec:02:f5:f1:a1:
96:f6:0d:a9:83:27:91:a2:81:7b:01:fa:2c:95:cd:
ea:47:60:ab:fa:a1:92:83:a9:bf:4d:86:72:3e:e4:
98:40:a8:4b:81:e5:ec:0f:0a:f9:d5:0f:15:93:83:
00:ed:e8:13:c6:89:cc:4d:f6:de:56:4d:ad:ab:81:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:96:BB:0D:DC:09:68:09:C4:69:11:D9:BF:A1:0E:F6:46:EE:77:38
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/W5a7DdwJaAnEaRHZv6EO9kbudzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c7:a2:ec:45:71:2a:f5:e7:85:fe:8c:aa:b9:f2:b0:f7:21:
99:64:34:ad:6e:cf:ec:39:55:81:ba:3f:fd:97:34:59:74:a5:
93:ac:35:2d:f8:54:5d:91:9f:45:8c:b8:9d:9e:0c:65:10:65:
6c:18:51:fd:14:1d:cc:23:46:a1:31:3a:0d:b1:93:ff:83:0c:
ba:01:7d:1c:b0:8c:b8:2f:1c:16:28:26:d4:a8:77:de:f8:41:
d0:8a:24:eb:68:b7:14:d8:24:4e:4c:fb:b9:96:6f:bd:64:a1:
06:ac:d5:b3:82:7e:6f:32:e3:89:3c:d5:c9:a9:0e:36:32:a3:
c2:f5:db:6d:d2:53:20:ec:10:df:da:b6:c2:97:4a:ab:9e:91:
c2:3a:cc:6a:a0:28:b9:87:9e:fd:ba:85:4a:2f:a6:28:64:85:
11:d7:33:ea:5f:aa:34:07:ad:0c:f8:16:cd:84:9e:90:0e:39:
47:c2:11:77:51:0f:ac:1f:bd:25:3f:92:fa:2c:b7:23:eb:65:
ae:0b:57:00:24:16:1f:0a:82:e8:99:bf:91:0c:79:54:69:7f:
e6:a1:31:52:9e:1f:00:6c:a5:c6:ff:63:1c:54:4c:5e:2c:07:
0d:38:8e:84:0e:44:d3:d3:cb:38:21:27:3d:12:43:da:2c:2c:
6b:13:a1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:19 2025 by rpki-client