Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IVP-TZ9hNwG48lCPMX_enLyBdNQ.roa
File: IVP-TZ9hNwG48lCPMX_enLyBdNQ.roa (raw, json)
Hash identifier: OPne3KA/JiCRLrpp/iHA74Eo7r25UEyDZX7XH33wlpo=
Subject key identifier: 21:53:FE:4D:9F:61:37:01:B8:F2:50:8F:31:7F:DE:9C:BC:81:74:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194284DDE9675069DE90252A15488A7DBA2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IVP-TZ9hNwG48lCPMX_enLyBdNQ.roa
Signing time: Thu 02 Jan 2025 18:36:19 +0000
ROA not before: Thu 02 Jan 2025 18:36:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213915
IP address blocks: 5.83.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:4d:de:96:75:06:9d:e9:02:52:a1:54:88:a7:db:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 18:36:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2153fe4d9f613701b8f2508f317fde9cbc8174d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:45:31:3b:e3:1b:46:15:3f:af:1e:16:20:2b:
c9:eb:fd:ee:e2:a6:a9:c1:91:c2:c1:a3:2c:6c:b6:
04:40:0f:71:20:f4:e9:05:58:08:56:aa:3e:7e:a8:
ba:43:c1:bd:58:c6:ef:53:b7:93:e4:9c:2b:36:26:
4b:b0:06:36:5c:dc:87:df:18:bf:8f:7b:a5:c0:7a:
cb:55:1d:cf:b5:c7:75:0f:2f:15:92:d7:37:79:1b:
7e:88:20:a7:e6:e4:39:78:2d:26:b1:76:1f:25:4a:
5a:1e:27:ab:1e:4d:b1:27:f7:dd:21:d2:9c:80:c2:
6d:78:b2:5e:89:8e:e9:9a:64:c9:3d:3b:30:32:f2:
ef:5f:d6:d6:0d:7d:7a:3e:35:46:fe:52:59:51:be:
b6:3c:9e:03:86:f8:be:10:a2:33:56:e1:4f:eb:90:
a6:91:73:35:65:e8:2e:03:d6:1c:eb:82:f0:98:a9:
11:0b:d1:a7:eb:2e:cf:c0:88:9b:02:e4:46:94:f2:
fe:e6:29:ce:e1:0b:bd:6c:c4:53:c9:46:08:6a:ea:
2c:1d:72:5d:80:19:f9:69:80:ab:a3:9b:59:1a:0c:
b6:df:0f:21:81:0d:2a:91:85:a8:b4:a2:d0:c3:6b:
30:fc:64:b4:5b:81:1c:d5:fa:b4:70:9a:4a:18:2c:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:53:FE:4D:9F:61:37:01:B8:F2:50:8F:31:7F:DE:9C:BC:81:74:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IVP-TZ9hNwG48lCPMX_enLyBdNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.154.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9e:6b:1d:4a:62:b8:f9:e3:d4:10:e2:b3:c3:d0:4e:05:71:
9d:1e:eb:a9:fb:d8:17:1f:1a:a2:f7:77:04:7c:8b:f4:7f:8d:
0d:02:23:61:01:39:5c:26:31:1d:d2:d9:f9:65:ae:cb:24:4f:
08:56:07:02:31:3c:6f:c6:6c:1d:c8:49:57:d1:2f:2f:bf:46:
6b:9f:a9:0b:09:90:72:4b:9c:bc:81:bc:5d:8a:9b:e6:da:60:
69:29:3f:c6:71:14:6c:90:df:7c:8b:e0:b8:95:5b:b1:fd:5b:
91:ee:7a:d4:0d:3d:33:f4:91:21:e3:f7:9b:9d:e1:a8:30:42:
03:4c:2b:33:5a:74:7c:a6:27:15:3a:07:3f:39:40:8d:55:a4:
89:7a:ec:91:39:bb:16:92:a1:76:7b:de:0b:2a:01:a5:fe:9b:
41:9a:30:1a:43:14:b5:3c:52:17:ef:17:63:41:37:cf:5a:0c:
ec:ae:42:43:47:5a:e9:83:28:14:b8:22:27:2f:3f:73:0c:86:
75:98:30:2c:dd:0f:24:c3:e3:b5:50:88:a3:7f:74:c9:ae:fc:
5a:d6:a5:eb:37:c8:eb:c0:c3:49:6f:b4:0e:c1:8b:b0:30:3c:
11:b0:73:1a:d3:5f:7a:34:e1:fc:9a:3b:ce:bf:4f:0c:b4:47:
18:22:79:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:27 2025 by rpki-client