Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6Hv6SOB_nvjLHdtLWKtILhKJ0Tk.roa
File: 6Hv6SOB_nvjLHdtLWKtILhKJ0Tk.roa (raw, json)
Hash identifier: bRSdUj5/O9raeh4/5s++uKz6RgFRNMzjhO7JEBCuVM0=
Subject key identifier: E8:7B:FA:48:E0:7F:9E:F8:CB:1D:DB:4B:58:AB:48:2E:12:89:D1:39
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0194272ABA28860FCEABF2E1C69044B8590E
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6Hv6SOB_nvjLHdtLWKtILhKJ0Tk.roa
Signing time: Thu 02 Jan 2025 13:18:19 +0000
ROA not before: Thu 02 Jan 2025 13:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215181
IP address blocks: 5.133.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:2a:ba:28:86:0f:ce:ab:f2:e1:c6:90:44:b8:59:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 2 13:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e87bfa48e07f9ef8cb1ddb4b58ab482e1289d139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:04:da:5d:e2:9b:d2:23:34:0a:fe:98:3b:
81:e4:04:2a:58:49:b6:26:98:fc:5c:de:b3:b1:97:
38:6b:e8:35:c0:fe:97:14:51:45:88:a0:84:2a:6f:
09:f1:4e:dc:27:f3:9b:90:b3:d6:d1:7c:b5:b6:49:
de:9a:a1:52:06:3f:fa:3c:43:19:01:25:3c:85:b9:
88:67:6b:76:e6:d7:a5:70:cb:c7:79:96:87:6c:83:
68:a4:61:4c:6e:b7:23:61:d7:a9:ed:29:ff:0b:56:
72:08:4f:b9:31:d8:ea:64:ee:8d:11:27:06:c7:85:
96:d4:ad:84:14:be:bd:91:57:54:4f:9c:17:1e:15:
95:77:e2:76:49:1a:ae:e1:44:48:8f:59:b0:95:83:
84:b3:b8:17:d9:74:10:22:54:ce:f1:5d:47:a0:8c:
89:fd:5e:3d:31:f2:da:1a:ca:b5:8c:00:f2:7a:29:
d4:b8:f3:a5:a9:fb:d4:26:34:ec:bc:57:82:cc:27:
5d:25:92:ca:c3:58:51:87:f2:f8:86:ca:ac:65:0d:
b6:f5:4b:23:04:c6:38:6e:cc:23:dd:47:d2:a6:7f:
30:94:ab:a2:3f:52:af:8f:a5:8f:10:1e:c6:26:54:
ba:2c:9f:73:82:93:6c:a9:f0:e4:46:6c:d7:71:04:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7B:FA:48:E0:7F:9E:F8:CB:1D:DB:4B:58:AB:48:2E:12:89:D1:39
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6Hv6SOB_nvjLHdtLWKtILhKJ0Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2b:95:3a:db:d6:4f:8a:27:b3:ce:c7:1e:0d:a7:c6:1a:93:
62:c8:3c:b3:ef:12:e2:cd:4c:0b:4f:1b:0c:c5:40:d6:94:6b:
a9:fa:b3:ad:28:6a:a9:01:c4:8b:bb:61:73:5b:b3:68:0b:b3:
3d:66:91:65:aa:aa:3b:73:66:be:a1:5e:1a:90:b5:ec:6a:d1:
4e:97:f1:cb:a2:ee:0f:40:3e:81:cf:77:c7:02:5f:fb:9f:72:
42:7c:0f:25:80:1b:9f:fd:57:46:5b:59:a1:3d:95:38:76:51:
bf:26:8b:22:40:48:8f:06:81:18:15:e2:bc:24:95:db:2e:f1:
46:6c:1f:16:fe:f0:ff:35:9e:c5:47:89:45:f0:09:cd:9d:7b:
72:b7:a3:ef:db:28:27:1d:28:11:f1:e6:99:6c:1a:88:2a:5e:
1b:d4:78:33:2a:16:91:aa:6e:40:80:b9:58:ed:41:fb:b1:1e:
22:75:54:12:99:a1:55:4a:d5:ed:28:e3:fa:51:60:16:2a:65:
d8:36:29:7c:b8:df:a3:20:1e:15:3d:53:8e:f7:81:a6:f4:0c:
e6:6c:ba:16:91:c2:bb:07:49:d4:bf:41:06:4e:d9:e8:a3:78:
cc:71:d5:92:99:d3:21:a3:62:2f:92:99:e6:04:3b:97:2d:65:
1c:a7:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:16 2025 by rpki-client