Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2x8vTcY_tZ3--h2Bsts_3TvL3Ls.roa
File: 2x8vTcY_tZ3--h2Bsts_3TvL3Ls.roa (raw, json)
Hash identifier: owiJ8zOQYQ+B+4aV47NbhbpZquptzMuy5qAseAVon6w=
Subject key identifier: DB:1F:2F:4D:C6:3F:B5:9D:FE:FA:1D:81:B2:DB:3F:DD:3B:CB:DC:BB
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5B1E42BA753EBDB74DB5E8CFDBD14
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2x8vTcY_tZ3--h2Bsts_3TvL3Ls.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204272
IP address blocks: 5.188.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b1:e4:2b:a7:53:eb:db:74:db:5e:8c:fd:bd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db1f2f4dc63fb59dfefa1d81b2db3fdd3bcbdcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:6b:91:81:c5:88:a4:e4:d7:b7:14:3c:44:
c6:72:46:a9:b1:a8:cc:7b:ae:bb:f2:33:32:ab:6c:
02:1e:fa:7f:b6:96:4a:66:4a:52:f4:29:bf:92:21:
97:68:cb:af:43:ea:8b:5f:f6:e0:13:b3:46:55:dc:
ab:48:be:d5:19:99:b9:5a:05:f8:35:ad:9e:76:f7:
48:50:51:e9:6d:f8:0e:1d:df:e8:ba:52:be:8c:13:
4c:7f:64:9b:0a:7d:c7:e1:5f:10:2d:4a:ba:20:db:
8e:35:7d:97:98:2d:46:5a:f3:ab:5b:a8:08:8a:ad:
ac:0b:82:4d:3a:3c:21:99:87:80:42:35:1f:28:5f:
97:d1:2a:43:94:7d:71:bc:a7:fc:9c:55:15:bf:2b:
e0:e6:ea:d4:61:d7:47:76:bf:15:63:20:d3:e3:11:
fb:c7:77:58:9c:b0:ec:62:e8:08:bb:1f:59:58:ec:
f0:05:fe:74:cf:96:92:f4:0d:97:0b:d7:f8:06:8e:
fe:8f:e5:0c:4f:38:da:66:33:df:68:52:ec:f8:2b:
12:de:87:b3:93:73:6e:3b:c4:8c:dc:c1:29:12:19:
54:ad:56:f7:75:dc:51:10:10:7d:e7:db:db:fa:8e:
73:6e:dc:24:ab:82:11:3b:ae:19:8c:9b:4a:02:49:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1F:2F:4D:C6:3F:B5:9D:FE:FA:1D:81:B2:DB:3F:DD:3B:CB:DC:BB
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2x8vTcY_tZ3--h2Bsts_3TvL3Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.220.0/23
Signature Algorithm: sha256WithRSAEncryption
00:05:9b:e0:8c:e2:85:34:ba:76:e8:21:ad:b8:fd:32:62:47:
5b:f9:b9:f8:1e:24:00:2f:27:18:e9:83:d9:4a:bb:e1:7c:f1:
0f:8f:68:4d:d9:e7:c6:a1:44:43:b0:97:65:27:eb:dc:e7:3b:
62:6e:67:1c:e8:aa:08:62:12:d7:2b:17:c3:fc:8e:32:23:e3:
72:ec:d3:da:e5:9d:ea:9e:47:19:ce:e5:6a:4c:34:d0:56:5e:
f8:80:53:3e:08:9f:79:cf:60:c1:48:fb:00:5a:eb:ed:61:2b:
d2:8f:4f:96:92:a7:8d:1f:86:18:d1:7a:22:8a:a3:7e:41:0e:
3b:2b:8b:21:e5:5b:fa:c6:7c:f1:42:4f:44:7c:c9:bc:ff:d5:
53:36:be:8a:21:05:40:bc:ca:b4:b5:3c:ab:61:38:46:64:18:
73:3d:02:cf:58:d9:54:19:49:30:17:3e:cf:58:65:c9:78:32:
06:6b:c4:a2:70:cd:4f:2d:20:f1:1f:31:e5:8c:b9:a6:a4:be:
98:e2:3f:bf:9a:b4:ca:e6:80:64:ad:34:e7:fa:0c:9f:71:61:
a1:9c:fe:78:97:af:cf:5e:3b:c5:75:00:dc:7c:1a:a8:dd:06:
d3:4d:a3:4c:47:90:dd:ef:77:ce:3a:ca:6f:00:1c:b8:4a:31:
bf:8e:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:27:20 2025 by rpki-client