Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CZmBUmxQR6FtgYlBA3mwPDiuai4.roa
File: CZmBUmxQR6FtgYlBA3mwPDiuai4.roa (raw, json)
Hash identifier: eOyAiZgNyH0SgCCr2ma2DfCgKtF6IwAYaWb7NQi4VKI=
Subject key identifier: 09:99:81:52:6C:50:47:A1:6D:81:89:41:03:79:B0:3C:38:AE:6A:2E
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B59CFB8A8FBBA3A2466BE9C09EDF28
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CZmBUmxQR6FtgYlBA3mwPDiuai4.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39238
IP address blocks: 5.188.164.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9c:fb:8a:8f:bb:a3:a2:46:6b:e9:c0:9e:df:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=099981526c5047a16d8189410379b03c38ae6a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:1f:e0:cb:6d:f7:ef:5a:b7:48:e9:e7:1d:
6f:c2:a8:b1:de:cc:1c:d0:a9:87:74:e0:c7:d1:3f:
17:46:fa:3b:c9:76:45:ec:54:ff:d1:90:e0:bb:12:
ec:3a:af:82:08:8c:ef:a2:ff:1d:b3:b2:d3:f1:e7:
ae:53:d8:e7:40:c5:34:33:2d:0d:f6:2a:4b:24:83:
0b:71:e4:17:5e:a0:97:f3:81:61:42:7d:a9:94:31:
b8:45:19:2c:02:30:a3:fe:ee:44:64:41:4b:13:32:
fa:61:9f:ce:60:b9:3e:b7:61:03:b6:6d:58:db:38:
35:71:4a:60:6f:9e:ad:e9:94:8c:57:21:20:aa:18:
55:c1:28:c4:99:82:65:60:57:cd:1b:27:f5:7a:ea:
ec:1c:90:09:43:c3:6a:e7:88:a4:02:cc:5b:ce:19:
d2:0d:dd:2e:81:6a:6c:4f:a1:1e:40:28:22:34:ce:
b8:3c:78:f3:a0:ac:09:02:07:4f:83:8e:d5:a3:bc:
46:6e:bc:86:b0:d5:f6:00:5c:02:8a:37:44:04:58:
24:05:7a:f9:29:50:45:96:00:c3:2a:cc:1d:80:80:
38:e2:eb:22:62:6e:fb:a0:3e:c8:d9:4e:15:ff:b6:
0a:02:b1:63:55:28:77:62:34:a9:d9:49:6a:6c:dd:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:81:52:6C:50:47:A1:6D:81:89:41:03:79:B0:3C:38:AE:6A:2E
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CZmBUmxQR6FtgYlBA3mwPDiuai4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.164.0/23
Signature Algorithm: sha256WithRSAEncryption
22:4d:91:a4:bb:09:83:c8:5f:c1:76:ac:0f:4a:4f:52:e0:0f:
8e:b3:08:4e:c7:56:ef:3f:13:a7:bf:07:60:fa:4b:68:c3:f5:
a6:88:da:0d:92:7a:88:b2:14:0d:11:92:a6:91:71:85:9e:cb:
fc:35:6d:96:31:9e:e1:4a:3c:8b:b6:81:9e:39:86:a4:e2:ce:
bf:25:93:b2:76:d9:88:c0:7f:b5:55:96:60:3a:16:a2:c1:40:
b0:01:07:fe:a1:1f:85:77:17:2f:18:84:1f:1d:6f:72:f7:6a:
87:e5:83:33:47:a0:5c:65:ab:ef:68:3e:c6:1b:eb:91:42:d4:
08:03:54:77:a5:b8:05:83:53:4a:1a:25:c1:04:48:c8:d5:d5:
25:48:47:ee:78:82:6d:dc:30:ac:3e:67:95:33:fd:37:80:af:
8c:7a:97:f8:00:6f:c9:c1:40:13:36:35:d6:8d:01:9c:c7:1d:
06:6d:4a:af:ca:dd:df:40:88:04:f3:08:8b:b7:e7:d0:98:04:
a2:d2:3f:a8:0c:0f:d4:e2:65:35:18:3e:01:85:29:ee:93:17:
a1:e8:dd:50:77:7f:02:91:ef:33:f0:2d:f2:70:5b:cc:d1:b9:
76:3c:32:50:86:37:4d:19:ea:94:df:14:77:94:2b:03:11:7a:
c3:46:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:11 2025 by rpki-client