Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KwIAe4fZpTOxuy1jheEcfBXQp04.roa
File: KwIAe4fZpTOxuy1jheEcfBXQp04.roa (raw, json)
Hash identifier: tJD5r9YO4KiUKdpl+tDfgpzA2j9TRIXkPogrFdX1hbc=
Subject key identifier: 2B:02:00:7B:87:D9:A5:33:B1:BB:2D:63:85:E1:1C:7C:15:D0:A7:4E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942C9881AD140E76F9A0794DE8BE11CE87
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KwIAe4fZpTOxuy1jheEcfBXQp04.roa
Signing time: Fri 03 Jan 2025 14:36:19 +0000
ROA not before: Fri 03 Jan 2025 14:36:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57433
IP address blocks: 5.83.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:98:81:ad:14:0e:76:f9:a0:79:4d:e8:be:11:ce:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 3 14:36:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b02007b87d9a533b1bb2d6385e11c7c15d0a74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:15:77:5c:bc:3b:8f:11:e7:f6:87:ec:9c:
cf:6e:f4:1d:b0:50:de:7b:1b:b7:4c:6e:e6:a3:60:
97:05:c4:e0:11:18:7d:89:7d:f0:5f:ae:12:f7:00:
9c:f4:59:e4:dd:f3:f3:6b:df:98:89:8b:52:46:6e:
2b:26:8d:1d:ee:93:c8:d0:df:0b:bd:36:51:c1:27:
07:0b:c8:9d:a9:7d:68:19:9a:f6:fa:8f:23:ce:32:
c3:de:b9:18:6e:ad:46:4b:80:e8:b2:ac:e0:48:e4:
84:99:2d:e8:56:9b:51:b6:06:eb:12:d4:ac:bc:1e:
f0:b9:48:a3:fa:88:d9:d4:52:5d:08:09:d7:7d:f1:
db:cf:33:56:fd:98:23:85:8a:0e:fb:dc:dd:cc:bc:
76:e5:ff:60:54:2f:bb:b4:64:68:af:b9:60:ff:fe:
fa:db:92:34:ae:85:74:7e:69:a0:97:48:5c:7b:8c:
99:cd:9a:2d:ef:d1:6d:68:e2:0c:78:c4:1a:45:cd:
58:1a:23:00:bd:35:4f:73:24:81:26:4a:7a:cd:65:
40:21:db:57:fc:6d:bd:e2:77:f4:69:e9:92:6b:b9:
c4:d7:2e:f3:be:94:02:08:8c:1a:d4:a7:49:3a:fe:
38:14:51:6f:04:e0:74:0e:fc:27:76:8b:b2:a1:93:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:02:00:7B:87:D9:A5:33:B1:BB:2D:63:85:E1:1C:7C:15:D0:A7:4E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KwIAe4fZpTOxuy1jheEcfBXQp04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.157.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4a:27:dc:8d:ae:18:d8:32:1f:42:21:50:96:ac:82:ab:4f:
4f:bc:fa:ce:41:5e:ff:2f:22:c0:58:ab:70:8c:a3:9f:e1:21:
0a:7b:ac:81:f1:14:20:e2:60:6d:26:cf:e7:25:90:d3:9f:29:
20:ff:3e:2f:6f:01:4b:c9:5e:a5:84:a8:7b:35:e7:2a:46:ff:
2e:e6:dd:a5:65:c2:3b:26:f5:38:bf:9b:7b:b3:7a:76:15:c8:
95:e2:bd:bb:0e:00:0b:95:41:d8:ea:7f:e5:95:51:33:91:c5:
68:95:87:64:32:dc:01:ac:5a:94:fb:e2:53:18:6c:aa:ce:c2:
7f:1f:3a:a7:1e:c0:a6:83:3c:6e:0c:3d:25:8a:cf:38:f7:c6:
12:9b:33:d9:02:e0:8b:b4:fc:d3:a8:3f:25:0d:2a:e9:76:b4:
f9:02:b0:cc:4e:1e:2b:b0:ef:a4:e3:92:ec:c9:5f:04:95:35:
06:37:7e:34:7c:4e:79:8f:7e:ca:b4:0c:6d:86:49:1f:db:5a:
e7:5d:36:68:99:8b:a7:5e:f5:b8:b2:02:44:fd:c8:e3:48:da:
0a:e2:8d:3f:b3:44:6b:dc:83:66:e6:7c:c9:87:ab:03:34:b4:
99:2a:82:71:21:86:9a:49:4b:7e:17:37:66:52:ba:f7:67:62:
02:28:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:11 2025 by rpki-client