Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa
File: uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa (raw, json)
Hash identifier: jnz+6TEphg6WeFVMNjeLnKwOXT2+7WslFFXVeACqJbs=
Subject key identifier: BB:13:E6:DA:38:2B:18:1F:5A:52:9A:15:4A:AB:71:3A:B9:3A:A0:B7
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 01942368E0F5610E9A50E9EBC6CDDC8630BB
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa
Signing time: Wed 01 Jan 2025 19:47:43 +0000
ROA not before: Wed 01 Jan 2025 19:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209304
IP address blocks: 5.11.56.0/22 maxlen: 24
213.217.12.0/22 maxlen: 24
2a09:5940::/29 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e0:f5:61:0e:9a:50:e9:eb:c6:cd:dc:86:30:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Jan 1 19:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb13e6da382b181f5a529a154aab713ab93aa0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:3f:34:c5:6c:b5:fd:07:97:25:ad:ad:58:
c9:18:19:5b:2b:31:1d:21:b5:c3:fc:3c:19:6f:57:
c8:c4:76:bf:a9:89:f3:b0:83:59:47:a4:18:d1:ef:
62:fe:1d:6f:80:7c:61:03:8e:27:5a:2b:e7:d3:fd:
c5:49:ca:ed:37:20:dd:d5:cd:ea:25:77:c1:2f:73:
a5:8d:47:f6:fb:d8:e5:0a:14:a1:0d:5a:74:6e:12:
f0:6e:4d:4c:67:d3:31:83:e7:7e:15:bf:dd:79:a8:
5b:b9:eb:cc:39:73:a9:9f:e1:b4:a9:d0:f9:e5:fb:
64:cf:19:df:c1:aa:61:7f:4c:51:35:3d:f0:44:fb:
24:a2:1b:cd:17:c5:03:44:16:c7:bd:de:63:d4:e6:
a0:59:35:c4:f8:96:64:93:6d:1f:e9:5b:49:f2:5c:
5f:9a:36:bc:e1:74:f5:cc:6c:93:c2:fd:92:29:3f:
a5:46:35:62:97:19:51:20:09:f5:7f:26:6b:7b:f0:
2f:6f:ab:4a:93:c6:db:b8:d4:0d:cb:df:5f:24:f1:
0f:c6:45:e9:97:b2:e6:8f:a0:72:e0:53:c9:a7:c8:
a1:d9:6e:9f:01:fa:34:2d:4b:57:60:27:7a:dc:42:
e1:3f:13:9a:0c:d2:8e:56:d4:a9:bb:1e:a9:0c:b6:
38:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:13:E6:DA:38:2B:18:1F:5A:52:9A:15:4A:AB:71:3A:B9:3A:A0:B7
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.56.0/22
213.217.12.0/22
IPv6:
2a09:5940::/29
Signature Algorithm: sha256WithRSAEncryption
23:65:1b:5b:e5:38:28:c9:3c:cc:3c:f7:6d:56:58:10:4a:05:
61:f4:e0:40:60:bd:97:ba:5b:44:73:38:86:10:db:a3:fc:b3:
d1:dd:77:9e:e9:fa:3f:98:a9:57:a5:18:45:0d:17:e0:88:2b:
6d:c1:f6:2c:eb:42:15:c3:84:ea:b9:60:b0:2a:bb:35:5e:b4:
c4:0e:78:c2:0f:57:79:6e:99:b5:48:81:07:d4:fd:59:ad:b1:
0e:03:6a:cf:17:f4:8d:96:cb:ea:a7:06:f9:21:fb:a4:27:7a:
33:3a:a4:91:24:7b:72:3d:5c:c0:53:49:fe:82:94:d3:65:4c:
9d:e2:dd:0c:be:04:93:6e:40:57:df:8f:78:ee:31:a7:b3:6d:
51:7a:c8:52:b2:72:c5:a4:09:e4:d4:a7:56:be:84:b9:1f:30:
63:0a:6d:85:b4:57:33:b3:a5:97:f6:a0:fa:aa:05:d6:5d:d8:
ff:12:85:9a:90:82:b7:33:0f:f7:0f:78:3a:d2:ce:93:6e:6a:
69:26:9e:03:ce:1b:26:db:1a:06:46:0b:b4:6b:a8:64:1f:7d:
36:0d:43:ab:2a:f7:98:a9:47:96:95:39:21:54:a8:5c:87:7a:
d7:a0:a0:79:5e:46:a8:ca:b8:7c:ff:ef:b8:98:41:0b:6a:0c:
4f:40:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:35 2025 by rpki-client