Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/5jwygws2szQICkFAbQDt0DfTE24.roa
File: 5jwygws2szQICkFAbQDt0DfTE24.roa (raw, json)
Hash identifier: CRuVg76LibQeWgQvKJXvsry4Ac92m/NILVupnVOrdIE=
Subject key identifier: E6:3C:32:83:0B:36:B3:34:08:0A:41:40:6D:00:ED:D0:37:D3:13:6E
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 019433CC5F9FD7EB9B8CAF9EDF54B9DBDBCE
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/5jwygws2szQICkFAbQDt0DfTE24.roa
Signing time: Sun 05 Jan 2025 00:10:19 +0000
ROA not before: Sun 05 Jan 2025 00:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209718
IP address blocks: 2001:678:c44::/48 maxlen: 48
2001:678:c6c::/48 maxlen: 48
2001:67c:e7c::/48 maxlen: 48
2001:67c:2908::/48 maxlen: 48
2001:67c:2ea8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:33:cc:5f:9f:d7:eb:9b:8c:af:9e:df:54:b9:db:db:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: Jan 5 00:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e63c32830b36b334080a41406d00edd037d3136e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:29:3a:d9:9a:f2:d4:03:80:67:90:68:0f:
c4:3f:0b:57:9b:e4:c6:06:95:75:82:ef:b7:a0:a6:
1f:14:1a:f3:80:d4:29:05:7a:7a:df:7d:58:0d:66:
b1:63:34:96:72:0c:63:37:d2:38:96:c1:11:62:f6:
40:ff:9a:3a:9f:9b:e7:42:f7:dc:fb:10:6b:04:ef:
1f:1c:de:c2:81:05:bf:36:b2:e6:04:e1:0c:69:9a:
b3:8e:a1:5d:5d:f2:5d:ac:e9:e8:f8:78:9c:2b:6e:
cd:6c:72:0c:97:a6:0a:2b:85:8d:60:51:6b:90:1b:
32:d2:e0:80:3d:a1:b9:d5:e2:c2:43:2f:94:05:6e:
13:3b:11:bb:ad:a8:c0:3e:3d:33:57:86:e8:b4:58:
35:d3:32:36:af:5c:40:24:14:1b:e1:d0:49:b6:91:
d3:85:b1:fc:61:30:a8:48:8d:e6:1e:f5:e7:cd:69:
84:ab:27:81:16:e3:ce:8d:8b:e0:1c:b1:db:83:3a:
3c:31:5a:97:70:ae:57:5f:fd:f8:32:23:7b:58:8a:
c7:2c:c5:30:ca:ab:a5:cb:40:ca:4d:5b:81:22:ab:
4f:8c:e1:cf:50:1b:77:99:f5:05:87:1c:7d:be:58:
63:27:ed:fb:92:5a:09:d4:11:fe:7b:c6:ff:1b:bf:
7a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:32:83:0B:36:B3:34:08:0A:41:40:6D:00:ED:D0:37:D3:13:6E
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/5jwygws2szQICkFAbQDt0DfTE24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c44::/48
2001:678:c6c::/48
2001:67c:e7c::/48
2001:67c:2908::/48
2001:67c:2ea8::/48
Signature Algorithm: sha256WithRSAEncryption
33:9f:1a:ae:fc:f4:f3:f7:f1:79:98:a6:d0:4d:46:43:37:a9:
9b:88:c5:4c:0e:e8:a3:ee:03:2f:d2:63:07:57:b5:ea:7f:d5:
7b:50:34:55:88:18:86:26:9b:00:44:64:87:d2:44:11:57:01:
7d:db:67:02:12:8d:b8:2a:37:6d:1e:e1:e7:7d:b8:01:17:5c:
ee:36:2b:7b:54:67:4e:77:e8:60:c1:db:a2:96:fb:a4:84:7d:
9d:f1:0f:b6:e5:f9:32:1e:fb:49:47:9f:d2:5f:b2:3d:7c:d2:
68:97:d8:83:e0:aa:0a:cd:3f:3e:17:00:c5:c7:19:da:a2:c9:
b8:67:51:19:68:85:e5:9c:ad:61:d3:bc:5c:4b:4a:15:b9:9d:
a0:4b:8a:8d:5f:75:98:f7:43:8f:a6:31:f4:97:8f:73:76:9f:
6e:6d:5f:de:f1:14:e5:e3:ed:fd:4a:8a:ac:98:93:54:67:0d:
d7:87:bc:46:43:e9:77:40:d3:aa:db:8c:50:e3:28:86:aa:9c:
2e:2c:85:7d:36:1b:41:2b:aa:dd:61:a1:5b:fd:e0:e8:3a:fb:
fe:86:bf:aa:11:33:89:e0:2a:d1:09:f8:3b:ad:47:dd:a8:a4:
17:b1:a0:a4:03:20:67:91:31:22:95:b3:08:c9:af:a1:6c:37:
16:f0:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:42:12 2025 by rpki-client