Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5a94f4-c79b-46e9-97c9-4a6fa53c6607/1/5kIqEn315PizLL4uHuLYEkwIrnQ.roa
File: 5kIqEn315PizLL4uHuLYEkwIrnQ.roa (raw, json)
Hash identifier: JhYA7rt3bkLjteXXYzhytJGcEWM02y5JbJ4hdXKTYt8=
Subject key identifier: E6:42:2A:12:7D:F5:E4:F8:B3:2C:BE:2E:1E:E2:D8:12:4C:08:AE:74
Certificate issuer: /CN=451197a9046e4fbb7ef2272ee4a8c25d15cb32fa
Certificate serial: 0A71EAA5
Authority key identifier: 45:11:97:A9:04:6E:4F:BB:7E:F2:27:2E:E4:A8:C2:5D:15:CB:32:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRGXqQRuT7t-8icu5KjCXRXLMvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5a94f4-c79b-46e9-97c9-4a6fa53c6607/1/5kIqEn315PizLL4uHuLYEkwIrnQ.roa
Signing time: Sat 01 Jan 2022 14:55:35 +0000
ROA not before: Sat 01 Jan 2022 14:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204326
IP address blocks: 31.132.40.0/22 maxlen: 24
2a0d:9f40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175237797 (0xa71eaa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451197a9046e4fbb7ef2272ee4a8c25d15cb32fa
Validity
Not Before: Jan 1 14:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6422a127df5e4f8b32cbe2e1ee2d8124c08ae74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:20:6e:a1:ef:79:96:b6:49:6d:c4:e8:0e:
0a:37:cd:c3:41:c3:93:7e:cd:fe:09:70:90:b3:39:
3f:4f:a4:08:e0:83:4d:20:eb:10:1d:a2:14:4d:e3:
d4:a8:30:d6:d8:65:cd:c2:08:83:ce:c6:35:6d:3b:
26:12:07:3a:6b:62:6e:22:55:53:69:c6:f0:fd:06:
c9:86:d7:3c:92:3a:46:93:07:e8:ba:e5:77:ab:24:
6f:1c:fd:de:ce:81:40:32:cd:62:32:fd:e4:6c:63:
97:9e:21:23:a5:c1:12:f9:fe:b5:d1:58:98:ba:15:
2f:73:2c:2c:78:4f:d1:c6:30:c3:a6:db:77:bc:17:
7b:9b:44:c2:3b:98:9d:27:e5:d9:a7:ed:70:91:bf:
3e:fe:15:d2:fd:5c:a8:7e:71:2a:08:e7:88:7d:2f:
d3:c6:42:b1:8a:b0:fe:0c:49:f2:2b:41:20:86:87:
eb:e4:ae:b0:ea:9a:c1:23:68:8a:ac:88:d8:b4:71:
e1:64:0f:54:08:c3:f9:4f:2a:14:44:9c:29:5f:e3:
b1:17:b9:2c:22:55:0b:47:36:ec:82:00:6f:36:7e:
a5:8a:57:2a:ea:3a:62:33:47:91:09:9b:ea:79:df:
29:35:2d:b9:28:ca:e1:be:91:e4:4a:4e:9a:ac:4e:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:2A:12:7D:F5:E4:F8:B3:2C:BE:2E:1E:E2:D8:12:4C:08:AE:74
X509v3 Authority Key Identifier:
keyid:45:11:97:A9:04:6E:4F:BB:7E:F2:27:2E:E4:A8:C2:5D:15:CB:32:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRGXqQRuT7t-8icu5KjCXRXLMvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5a94f4-c79b-46e9-97c9-4a6fa53c6607/1/5kIqEn315PizLL4uHuLYEkwIrnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5a94f4-c79b-46e9-97c9-4a6fa53c6607/1/RRGXqQRuT7t-8icu5KjCXRXLMvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.40.0/22
IPv6:
2a0d:9f40::/29
Signature Algorithm: sha256WithRSAEncryption
95:8c:2a:cc:56:af:25:2b:e5:86:1f:34:d5:96:d7:8b:18:0a:
3b:b4:2d:25:8f:a1:dd:63:01:4d:d7:9a:78:98:15:fb:20:72:
81:5c:4e:c7:4f:90:2f:49:3a:2a:02:7e:c3:72:8b:05:91:f6:
4b:e2:2d:1b:5c:5a:73:d6:ee:af:bc:c0:4c:2e:29:b2:2f:83:
90:54:63:86:86:cc:01:15:29:bf:0e:9f:88:2f:b1:64:63:b8:
f5:c0:48:3d:e5:cd:13:c1:14:db:07:42:e5:df:bd:3f:23:37:
b5:66:07:97:fb:89:b7:ff:6f:2e:34:74:ea:d3:f2:9c:c7:e8:
b7:e4:0d:ab:03:f1:1a:8c:7a:8a:59:f9:1f:d2:29:ec:b5:fa:
9a:49:da:23:87:3e:03:66:96:84:c9:4e:5d:95:04:2e:d8:84:
92:c1:87:2d:9f:89:35:88:14:25:93:ce:00:49:a3:57:71:69:
02:55:8c:61:8e:0a:8c:97:31:24:02:4c:ba:a6:a7:0f:c6:80:
6e:20:84:d4:9b:0b:72:64:4e:be:94:b2:7c:a1:b7:dc:44:63:
03:a0:b0:83:20:13:a7:cf:33:76:a7:4e:df:fe:4b:6b:00:de:
e9:63:a7:f1:fc:c9:b1:33:41:7c:f6:f8:bf:01:20:94:ff:45:
b0:c4:e0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:46 2025 by rpki-client