Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/eL5kCrXZufwVE-8dz0r4vVdOO3Y.roa
File: eL5kCrXZufwVE-8dz0r4vVdOO3Y.roa (raw, json)
Hash identifier: jqcdKhJrP5B5vP8hUBHix2PasH+PakzzFSHaStJ3ioA=
Subject key identifier: 78:BE:64:0A:B5:D9:B9:FC:15:13:EF:1D:CF:4A:F8:BD:57:4E:3B:76
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01938BFCF122018F77AD749C33ED424150F8
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/eL5kCrXZufwVE-8dz0r4vVdOO3Y.roa
Signing time: Tue 03 Dec 2024 10:07:10 +0000
ROA not before: Tue 03 Dec 2024 10:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 139.28.48.0/23 maxlen: 23
139.28.50.0/23 maxlen: 23
193.32.204.0/23 maxlen: 23
193.32.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:fc:f1:22:01:8f:77:ad:74:9c:33:ed:42:41:50:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 3 10:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78be640ab5d9b9fc1513ef1dcf4af8bd574e3b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:48:38:63:db:96:05:4e:e4:8a:39:32:66:
93:5c:4e:a3:ed:2d:96:9e:8b:b9:57:f1:2c:cc:4c:
78:7f:0e:69:34:62:90:ed:2c:78:51:be:69:5c:35:
45:6f:a5:c4:c3:5c:a8:ea:48:0e:91:7e:c0:ea:6c:
ee:3c:82:f6:46:a5:dd:10:a8:a4:9d:63:27:69:22:
dd:00:ad:b8:eb:af:7e:f9:7e:38:88:a0:e8:ac:ae:
05:a7:ee:0e:bd:80:00:9c:a9:06:4b:a7:37:bc:af:
94:66:d0:0b:cd:7e:fa:8e:18:0f:ef:ce:46:36:cc:
24:48:8c:5e:5e:19:71:1e:fe:94:17:b3:0e:e6:16:
c9:6f:3c:11:bd:93:b6:53:5e:a9:e7:c7:b1:1e:1c:
86:35:c0:c5:98:9a:55:4d:87:ec:d7:38:28:1b:90:
61:28:f1:57:42:3e:41:67:07:e7:d3:49:40:26:93:
42:6d:98:65:9c:23:9e:08:2d:c5:43:51:86:0f:c1:
74:3e:6f:01:d9:67:37:69:2d:49:df:fa:f8:76:6e:
16:db:52:ac:3f:4e:11:dc:b8:34:82:74:08:2a:08:
ec:70:07:c7:d3:db:74:1c:e3:91:c7:3c:f2:7a:a8:
02:23:f5:ce:30:b3:d4:ee:77:dc:95:91:0a:df:a7:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BE:64:0A:B5:D9:B9:FC:15:13:EF:1D:CF:4A:F8:BD:57:4E:3B:76
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/eL5kCrXZufwVE-8dz0r4vVdOO3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.48.0/22
193.32.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:51:33:0f:f0:9d:5f:2f:a9:1a:91:38:ac:12:d1:a0:db:2c:
96:44:92:da:bb:82:72:98:bf:21:3f:fc:54:4b:21:f9:34:e4:
d2:bc:ce:dc:5f:8d:a7:57:bc:15:8b:36:e4:61:3d:f9:9e:0b:
93:f2:94:b5:18:d9:06:64:05:b0:fd:e3:5d:54:f1:d0:a7:75:
7e:32:02:11:95:f8:f3:15:d2:10:1e:8b:c7:27:aa:76:99:bb:
e9:16:f1:1d:2c:95:0e:3d:90:f5:e5:72:c1:3f:53:91:50:af:
d0:f3:05:39:4c:57:e2:fd:5f:4d:d6:ca:c9:c0:f6:ac:f5:eb:
76:2c:0d:7c:04:99:f1:b5:10:19:69:ee:89:64:b1:b5:54:dc:
16:e8:25:cb:5c:8c:a0:cc:97:7e:3b:d5:76:a1:47:15:dd:e1:
2c:2e:da:4b:9f:b3:60:13:1b:e5:5e:21:c3:4d:e0:4d:9c:dd:
13:41:e0:d9:1f:4c:a2:c6:0f:47:5a:e9:ed:42:8b:f5:24:f8:
78:4d:8e:2d:b8:fc:dc:71:85:90:22:86:c9:dd:cf:c3:f0:6d:
cc:10:28:cc:95:e6:d5:58:36:ef:b4:7e:ff:f2:0c:4b:ff:1b:
13:8f:c8:29:53:f0:16:bd:3a:64:97:26:15:d3:64:3c:52:27:
04:c7:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:23 2025 by rpki-client