Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/5JubVGtyANj9Z77FzgYic3eRlGk.roa
File: 5JubVGtyANj9Z77FzgYic3eRlGk.roa (raw, json)
Hash identifier: SCx4cG4B3vhvLW9t5sTyR8bV0dY8VLac4CEwxtOvDa4=
Subject key identifier: E4:9B:9B:54:6B:72:00:D8:FD:67:BE:C5:CE:06:22:73:77:91:94:69
Certificate issuer: /CN=c82f486a7d9de0af491a878ad3b3dd4491c24b28
Certificate serial: 01877BF89BA93224CB7675243FC982337597
Authority key identifier: C8:2F:48:6A:7D:9D:E0:AF:49:1A:87:8A:D3:B3:DD:44:91:C2:4B:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yC9Ian2d4K9JGoeK07PdRJHCSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/5JubVGtyANj9Z77FzgYic3eRlGk.roa
Signing time: Thu 13 Apr 2023 18:55:02 +0000
ROA not before: Thu 13 Apr 2023 18:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 193.9.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:f8:9b:a9:32:24:cb:76:75:24:3f:c9:82:33:75:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82f486a7d9de0af491a878ad3b3dd4491c24b28
Validity
Not Before: Apr 13 18:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e49b9b546b7200d8fd67bec5ce06227377919469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:38:2e:81:c9:1f:af:de:38:2a:91:7b:bc:
1e:2e:a2:5d:42:26:9a:a1:98:20:48:d5:70:1d:47:
94:78:47:67:33:dd:ea:8d:f6:87:93:e7:e3:9e:35:
96:eb:3b:fe:ec:0c:49:64:c3:88:d5:a6:03:7f:fb:
c4:69:9c:77:3b:b1:44:49:68:88:dc:32:6f:d8:16:
bf:c9:55:67:84:04:05:62:90:1d:de:24:66:83:b4:
21:b9:73:78:3b:e3:7e:43:24:37:34:2c:1e:32:fb:
f2:40:c8:ae:57:02:19:99:1d:c4:c3:95:e7:0f:7e:
33:c8:23:fd:eb:c8:09:b2:be:39:77:41:e9:40:25:
83:1c:2d:7f:e1:08:77:d8:d2:c8:12:61:0b:ee:6e:
92:9b:1b:cf:bf:df:99:4a:a3:47:ee:26:c7:b0:16:
89:f3:b7:a5:96:bc:dc:b6:67:5f:71:fb:60:b5:25:
c0:2e:1f:15:56:e8:28:9a:cc:6f:a9:95:4b:88:2c:
ea:28:0b:e0:78:3c:17:19:63:aa:1c:39:e5:27:b1:
df:45:b1:39:3a:2e:81:47:67:dc:a4:2a:50:da:20:
08:d9:f5:e6:49:3d:9a:1a:5d:91:5b:ef:9c:53:a3:
06:54:12:a7:31:4a:53:d0:68:3a:40:fc:d9:85:47:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:9B:54:6B:72:00:D8:FD:67:BE:C5:CE:06:22:73:77:91:94:69
X509v3 Authority Key Identifier:
keyid:C8:2F:48:6A:7D:9D:E0:AF:49:1A:87:8A:D3:B3:DD:44:91:C2:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yC9Ian2d4K9JGoeK07PdRJHCSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/5JubVGtyANj9Z77FzgYic3eRlGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/yC9Ian2d4K9JGoeK07PdRJHCSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.124.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d7:2a:37:13:72:2a:fd:59:10:4f:49:f8:07:8e:04:b5:f1:
62:75:11:da:ff:c1:50:82:25:40:f1:45:13:ab:e2:3f:8d:1e:
aa:15:45:cd:af:4b:d7:da:d0:ed:ae:db:a5:38:56:84:29:31:
e8:12:62:04:91:c1:f5:24:fa:48:53:df:50:33:c0:50:fa:b6:
60:1f:9c:1d:58:ff:23:ac:3a:db:57:09:f0:7e:ec:9e:9e:28:
62:99:64:7f:c6:40:ab:5a:0f:5e:d2:09:7c:62:d3:ad:ae:76:
ae:7d:5f:7b:a8:e9:5d:7c:39:3a:1f:4b:38:e2:18:6f:6c:93:
2c:7a:a2:58:ea:30:0b:23:9e:4d:b2:2f:f6:07:4c:25:86:24:
fa:f5:09:cd:a4:9c:a5:c9:45:99:71:92:31:fa:37:08:dd:a7:
2b:e5:0f:3b:6b:12:e9:2a:a8:26:b6:73:60:60:81:dc:0d:01:
33:84:12:c0:27:bf:51:e1:5f:12:9f:3e:51:f4:59:87:7a:97:
e6:94:d5:ea:27:8f:21:72:b1:3a:2a:ab:97:22:e0:06:77:d2:
c3:39:2e:d6:91:82:b8:21:7e:80:2a:24:2f:ce:47:f9:f1:56:
67:37:d9:84:50:21:46:ad:54:c1:8c:90:49:8a:34:8b:b3:96:
12:73:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:12 2025 by rpki-client