Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/5S92E_dEmNTTwfkm2rsCO6-zdvo.roa
File: 5S92E_dEmNTTwfkm2rsCO6-zdvo.roa (raw, json)
Hash identifier: gLy7LOPageczNSXewMrkGlzpLLm8xvxYhJmy6XmoxNw=
Subject key identifier: E5:2F:76:13:F7:44:98:D4:D3:C1:F9:26:DA:BB:02:3B:AF:B3:76:FA
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 01942143AAA0336EB09A6D65DFED9051A376
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/5S92E_dEmNTTwfkm2rsCO6-zdvo.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 128.127.168.0/24 maxlen: 24
128.127.169.0/24 maxlen: 24
128.127.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:aa:a0:33:6e:b0:9a:6d:65:df:ed:90:51:a3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e52f7613f74498d4d3c1f926dabb023bafb376fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:07:5a:70:88:9a:18:7a:c1:3c:9a:31:46:
3c:f1:64:31:f3:6f:6b:9a:6b:5a:0f:3b:f9:a9:3f:
36:18:81:a2:b2:c4:76:96:2b:1e:8b:60:9d:18:8c:
3e:13:aa:a8:7d:11:16:ee:45:b1:46:81:8e:cb:c5:
05:18:e7:b1:5c:35:53:e9:d4:72:44:a4:37:3f:bd:
8e:16:bc:28:27:55:25:66:98:4e:c6:69:8f:4a:f5:
3f:3b:1d:d6:22:ed:d0:50:08:8a:1b:01:2b:2d:b9:
95:a9:8c:f8:9d:73:38:87:b8:02:d8:57:0c:82:db:
a9:93:f1:36:b7:fe:27:35:ff:a3:f8:c4:2e:62:d0:
63:97:78:6a:16:12:79:e1:41:fd:8f:20:88:5e:c9:
16:6e:5f:21:bb:f7:e9:85:c9:5f:91:57:c0:fd:97:
07:a7:a0:0f:b2:3d:b1:b2:19:2e:9a:8e:09:7b:7f:
d5:29:94:74:7f:21:b0:0a:7c:21:c5:4f:78:8f:28:
45:af:f1:53:b5:49:28:a6:cc:d9:de:07:db:34:e9:
b9:b9:2f:fc:72:57:59:ca:8c:d9:5c:93:86:94:4a:
3c:b0:ea:f1:c1:49:c8:ae:7a:66:73:c3:42:02:e9:
df:10:3a:b7:be:12:cf:19:11:4c:2f:a6:5d:b4:34:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:76:13:F7:44:98:D4:D3:C1:F9:26:DA:BB:02:3B:AF:B3:76:FA
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/5S92E_dEmNTTwfkm2rsCO6-zdvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.168.0-128.127.170.255
Signature Algorithm: sha256WithRSAEncryption
82:c3:33:56:e9:94:bd:98:bb:6f:53:26:12:3c:91:ea:63:b7:
c4:8a:a9:3e:84:b8:cf:38:10:8e:fd:42:32:9e:c7:2c:e5:96:
a5:41:2a:29:eb:53:b3:0d:69:b0:27:be:c8:bd:66:a9:3d:bc:
99:40:c6:32:21:f0:02:ca:d9:40:af:53:86:bb:b7:34:d6:79:
0b:94:53:99:35:e1:3a:a5:bf:c2:ee:d2:9c:0f:10:9c:0c:80:
be:fd:36:31:1a:ba:98:3a:93:a2:16:77:b1:87:3c:61:ff:40:
78:53:30:66:df:5e:44:1a:a5:d2:ee:94:bf:53:c3:46:77:c1:
66:a1:48:6f:97:85:1b:3d:b4:26:8d:06:cf:84:08:a3:b4:eb:
89:c9:df:82:3f:a3:ed:2c:ec:4b:ef:e1:ff:c1:99:31:c7:4a:
3a:e3:c5:d0:c6:6f:50:68:a3:e5:85:f8:78:51:75:ae:91:df:
c3:97:82:b4:15:d1:b0:15:c9:09:01:e5:45:e9:57:50:c4:d0:
cd:3b:a9:d5:a2:78:38:c5:69:ef:72:93:b4:f0:86:1f:5f:13:
39:f0:91:7a:df:4a:2d:74:7a:0d:1d:01:63:4f:da:4a:7e:b8:
18:7f:23:1c:6f:f3:91:12:13:c6:20:48:96:e5:d9:19:f3:c9:
57:4d:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:43:11 2025 by rpki-client