Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/5ExX7PElDwhZvsqUirscS-kfnho.roa
File: 5ExX7PElDwhZvsqUirscS-kfnho.roa (raw, json)
Hash identifier: bqRW9TpS9PZv6OIHrk3qUk9RHaZcJhV08bnl4u3kvQE=
Subject key identifier: E4:4C:57:EC:F1:25:0F:08:59:BE:CA:94:8A:BB:1C:4B:E9:1F:9E:1A
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019423D7DA33936F4317A508B7F1BBE18B38
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/5ExX7PElDwhZvsqUirscS-kfnho.roa
Signing time: Wed 01 Jan 2025 21:48:56 +0000
ROA not before: Wed 01 Jan 2025 21:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25003
IP address blocks: 192.115.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:da:33:93:6f:43:17:a5:08:b7:f1:bb:e1:8b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Jan 1 21:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e44c57ecf1250f0859beca948abb1c4be91f9e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:c0:c8:cd:35:3b:38:c8:0e:48:05:02:af:
ba:1b:e7:3f:52:2d:dd:5d:6e:fe:6d:4b:f9:b8:91:
7d:ab:c1:1b:a3:a5:53:20:79:34:d2:32:29:9c:6a:
24:1e:3d:be:5c:13:4e:0b:3b:fa:10:5b:0e:55:fd:
7d:68:3d:04:f9:e9:b0:57:12:ce:b6:46:cd:38:d3:
a2:74:2f:b4:20:73:db:59:b5:19:0e:b0:d1:23:a2:
e7:d4:40:c8:ed:8a:8a:84:22:2d:1b:a3:b1:bc:a9:
78:39:7c:31:a8:8f:98:68:f0:b0:a2:4e:f4:f9:14:
2d:f7:e1:3f:57:97:6a:cf:ee:03:68:22:a4:e8:a9:
98:12:7c:cf:12:5b:d5:7d:7d:81:2e:71:ff:f0:0c:
42:4e:ac:45:05:6a:14:35:be:d5:fe:6b:9e:8a:7f:
9a:e7:59:ac:6f:b9:5a:4c:ce:f0:93:8d:7b:12:8e:
38:b3:17:df:bf:ed:1c:5e:e6:fd:69:16:f0:9b:d9:
4a:94:a0:36:8a:ce:8f:eb:77:98:69:4d:7f:e3:8a:
e4:dd:30:b3:15:b8:fa:64:9e:0e:e4:0f:74:c6:99:
9c:90:78:c3:ef:cc:d8:b1:6b:8a:42:28:70:11:6c:
7a:1e:9f:ae:c1:ea:8e:3c:87:f3:2f:7c:8c:87:c1:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4C:57:EC:F1:25:0F:08:59:BE:CA:94:8A:BB:1C:4B:E9:1F:9E:1A
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/5ExX7PElDwhZvsqUirscS-kfnho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:7a:21:d1:ee:6a:59:e1:1b:5d:3a:2e:b1:0c:1b:d2:e4:8b:
2d:34:84:0e:83:0f:02:e0:9d:ec:fb:25:17:1b:6d:a5:98:ea:
0f:72:e0:9b:8e:84:c8:f8:e7:ac:37:5d:ad:b8:00:ab:b9:4a:
3b:35:77:2e:17:6c:2d:75:c6:a1:69:50:b9:b2:5a:f8:5c:a2:
15:cd:3d:a0:2f:96:ea:80:5f:1e:54:73:8b:d5:39:28:b2:f1:
a8:5d:ac:01:97:4f:e3:e4:07:90:f8:33:a0:ee:72:92:f7:72:
9f:76:ca:81:e7:23:30:4f:3e:75:f4:e2:b3:f1:ef:14:81:93:
d5:47:12:f5:49:84:ff:78:18:5e:16:31:69:1b:1d:46:8e:58:
5c:a6:58:85:4c:49:1b:29:eb:17:9c:b8:2b:f1:c6:c3:64:79:
26:34:a5:b5:86:3a:87:92:19:06:f1:0b:d0:99:62:a2:03:f3:
bd:6b:be:21:db:4b:38:4b:87:32:0a:56:bc:96:95:76:dc:94:
63:ec:4d:a4:92:a0:c0:36:34:9f:e2:fc:9e:4f:b9:fb:e9:11:
14:02:34:01:71:a2:39:90:18:33:f1:1a:7c:0e:ce:b0:ae:0b:
9c:3c:a7:76:04:19:40:51:f0:8f:9d:13:00:cf:eb:65:0f:23:
87:67:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:01 2025 by rpki-client