Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/v8O-hmYnMSY31ejAOPQBw6PvlZo.roa
File: v8O-hmYnMSY31ejAOPQBw6PvlZo.roa (raw, json)
Hash identifier: n0/Am/fuQ0Bzlhu28NMtBIbpVUfZ8WWaeSJsXMS/dp8=
Subject key identifier: BF:C3:BE:86:66:27:31:26:37:D5:E8:C0:38:F4:01:C3:A3:EF:95:9A
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C21DE8EEA5C4BD4A5E601DAC23753
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/v8O-hmYnMSY31ejAOPQBw6PvlZo.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 5.178.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:21:de:8e:ea:5c:4b:d4:a5:e6:01:da:c2:37:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfc3be866627312637d5e8c038f401c3a3ef959a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:e2:ff:ff:e7:ee:21:a6:6a:00:29:6d:c6:
26:2a:8e:a0:bc:48:1e:ed:8c:57:99:78:70:05:9a:
35:69:12:17:e8:e9:79:f2:25:88:fe:84:04:4d:c0:
43:ba:65:ea:c6:1e:4c:a7:9d:09:0d:0d:05:76:7a:
93:fe:ce:fe:10:81:dc:6a:a8:e9:f4:67:e7:d5:d6:
3d:36:85:94:b1:e8:3d:21:1e:df:bc:ec:e4:d1:16:
c8:ee:dd:2c:f8:74:bd:07:cb:4b:2e:ba:cb:40:ef:
bb:90:52:b9:d2:cd:ea:7b:d7:e3:39:dd:bd:33:cf:
16:4a:4a:2a:7c:8b:30:34:a0:e4:6f:e6:fc:88:bf:
69:45:4c:1d:3e:1e:12:1c:3b:22:9d:de:29:4e:b5:
66:ef:18:13:c6:01:4f:28:8e:94:76:7b:69:ad:bf:
58:92:9a:7d:93:f1:eb:b8:de:df:3a:82:c4:22:1b:
da:77:28:4c:24:b7:8d:cb:dd:9f:f4:4e:b2:93:f8:
bf:d2:10:a6:aa:4b:ae:d3:77:a5:1a:4d:83:08:05:
ff:40:5d:82:6d:44:d6:dc:a7:d4:18:40:e2:aa:b8:
dd:c1:60:fa:6c:a3:bd:92:80:01:7f:33:12:60:d0:
94:1d:28:ff:44:9d:b5:89:7a:ad:da:4a:6c:64:d6:
d6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:BE:86:66:27:31:26:37:D5:E8:C0:38:F4:01:C3:A3:EF:95:9A
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/v8O-hmYnMSY31ejAOPQBw6PvlZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.101.0/24
Signature Algorithm: sha256WithRSAEncryption
57:23:df:d6:c6:86:9b:82:f9:6e:2b:7f:c8:84:d6:56:4a:9c:
57:99:7d:05:c3:70:30:a2:a0:25:dc:8d:63:e0:5f:a8:72:ab:
c1:0e:88:e1:8f:ab:35:fa:c5:f4:ab:73:1f:d5:de:12:87:85:
e2:83:f1:23:8e:f9:5b:19:ad:c6:2c:70:53:be:c2:e1:d2:67:
a6:20:a6:15:e6:ed:72:4b:2d:bd:61:47:4d:5f:b4:c3:19:e2:
ad:59:e3:97:6f:a5:4e:c4:18:20:9c:26:05:bc:aa:aa:9c:b1:
79:77:8c:f7:6c:1c:c7:50:74:81:a5:16:0c:2c:6a:d4:c3:25:
57:6c:53:83:a5:f9:c1:f5:b2:61:52:c5:b3:38:c4:cd:a8:68:
a2:00:d8:ec:d8:53:31:c5:26:32:2f:0c:6a:e1:8c:5a:48:2b:
10:9a:71:fc:24:0b:67:e0:79:65:ff:35:dd:2d:0f:0e:5b:42:
9f:86:16:e1:8f:f8:5a:dd:bf:01:74:4c:15:30:f8:99:37:6c:
30:bc:63:4a:61:ad:10:ad:96:69:1c:f1:68:32:57:ca:f4:c8:
db:13:dd:b4:43:8b:fc:c7:d8:f9:f3:a8:7c:42:11:25:00:97:
80:84:64:92:40:1b:e1:1c:cd:66:41:b6:65:49:23:a3:60:63:
42:63:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:56 2025 by rpki-client