Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/5IdXodnCvQCBXqkFVtD9o-FVq60.roa
File: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (raw, json)
Hash identifier: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=
Subject key identifier: E4:87:57:A1:D9:C2:BD:00:81:5E:A9:05:56:D0:FD:A3:E1:55:AB:AD
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 0194266C01879C1BE545EFD50C45D91487E3
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/5IdXodnCvQCBXqkFVtD9o-FVq60.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 37.77.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:01:87:9c:1b:e5:45:ef:d5:0c:45:d9:14:87:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e48757a1d9c2bd00815ea90556d0fda3e155abad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:e8:67:8e:d0:df:e9:c1:a5:67:41:77:d3:
e2:3f:23:72:67:66:90:29:56:53:6a:66:b4:ec:e2:
bc:b0:d8:eb:60:52:fc:d1:58:dd:a5:b5:ec:71:f8:
f3:bb:79:2c:e2:4f:f2:e4:b0:ee:7a:ba:77:77:4f:
50:6f:b0:7b:cb:ee:76:d8:ce:97:8c:e8:cb:be:e8:
3d:71:64:a9:89:89:20:03:79:3c:76:00:49:b8:1b:
29:4a:8f:e8:00:88:51:2d:72:fa:1f:d0:10:4e:c5:
31:e7:33:a5:5f:6b:99:9c:ae:64:44:ff:0b:92:77:
69:b0:78:9a:e3:77:26:27:27:7b:e8:a8:58:cb:57:
d7:de:b9:e1:55:dd:83:97:00:65:66:e2:00:a2:ab:
eb:be:d7:77:6b:9f:44:46:e1:26:51:82:4d:9b:fc:
d6:f9:03:ce:8c:80:86:98:16:40:d3:44:90:18:4d:
76:b8:59:c4:75:25:61:99:75:a6:aa:47:e4:10:81:
2f:81:6d:2c:1c:8e:be:30:72:5b:7b:25:88:7c:1b:
3d:2a:be:0e:e1:88:f4:e5:ff:3d:b3:c1:33:1c:85:
7b:44:22:61:6c:38:b3:8e:7a:62:df:06:6a:b1:8e:
e1:88:00:9d:8a:4a:68:5b:40:77:07:c7:61:82:d4:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:87:57:A1:D9:C2:BD:00:81:5E:A9:05:56:D0:FD:A3:E1:55:AB:AD
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/5IdXodnCvQCBXqkFVtD9o-FVq60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.201.0/24
Signature Algorithm: sha256WithRSAEncryption
13:70:28:85:21:54:e1:49:fb:dd:ac:fa:31:d8:b7:0b:07:f1:
db:82:91:f0:99:6e:fa:6a:c1:9e:30:b8:2d:9d:b7:0d:a1:80:
ab:3d:a1:0f:d4:39:0e:e0:2d:e6:86:8c:53:e6:ae:d2:1a:4b:
eb:26:db:f9:19:7c:37:b9:88:14:a2:83:6a:23:ed:18:87:5d:
52:08:fc:1b:9d:e5:f2:1f:a5:0e:b3:0c:d2:26:1c:b0:e7:80:
28:99:84:53:f1:70:b0:8c:43:8e:7f:f9:24:0c:73:af:13:47:
cd:48:98:0f:ea:fb:06:b6:61:03:81:ca:b8:dd:87:c2:16:b5:
1f:2b:b5:ef:dc:60:c5:87:9f:d9:b9:b0:6f:1a:0a:f0:60:d4:
0b:37:8c:7e:ab:26:0d:28:0d:cb:ff:23:33:42:8e:95:1e:1d:
8e:67:10:fe:17:78:84:02:9d:b8:7f:a8:93:d7:15:25:47:46:
03:8f:bc:d9:04:de:65:26:e3:3e:41:65:99:3c:69:4e:f4:d9:
c5:db:1c:33:16:0f:fa:6d:8f:72:1a:c9:81:c1:88:d7:3e:77:
5d:77:cb:d3:aa:75:d0:93:6d:a7:0d:9c:6d:d7:5a:83:09:dc:
b0:99:a1:6f:37:0e:ed:de:ae:4a:4d:75:45:a6:8f:5b:d5:41:
31:07:b3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:15 2025 by rpki-client