Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/5cvIDTHUZJJ3mWaCXN_Xoyn4t4o.roa
File: 5cvIDTHUZJJ3mWaCXN_Xoyn4t4o.roa (raw, json)
Hash identifier: Gapu3m6zcPB3PmLN2g9zivg1MQtXMm4JYuboQYIFUt0=
Subject key identifier: E5:CB:C8:0D:31:D4:64:92:77:99:66:82:5C:DF:D7:A3:29:F8:B7:8A
Certificate issuer: /CN=e3bdc9fd7f52e1e75eb7ede6e25ad078fb90bfb4
Certificate serial: 0189654A8F0C76FF905500417AC247474CC5
Authority key identifier: E3:BD:C9:FD:7F:52:E1:E7:5E:B7:ED:E6:E2:5A:D0:78:FB:90:BF:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/473J_X9S4edet-3m4lrQePuQv7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/5cvIDTHUZJJ3mWaCXN_Xoyn4t4o.roa
Signing time: Mon 17 Jul 2023 19:18:52 +0000
ROA not before: Mon 17 Jul 2023 19:18:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 176.126.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8f:0c:76:ff:90:55:00:41:7a:c2:47:47:4c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3bdc9fd7f52e1e75eb7ede6e25ad078fb90bfb4
Validity
Not Before: Jul 17 19:18:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5cbc80d31d46492779966825cdfd7a329f8b78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:fd:69:13:44:e3:95:6b:17:26:35:b5:85:
87:a2:3b:97:9e:8d:72:aa:32:5e:97:46:15:af:84:
64:01:37:dc:dc:7f:ea:46:e3:f1:1b:3b:8b:af:22:
6e:2a:23:2d:36:c3:fc:91:e6:6f:01:66:be:52:3c:
bb:94:54:d3:73:eb:1c:1e:29:ee:0a:ea:a8:a4:82:
4d:ee:67:1a:36:dd:ee:fc:94:ea:59:d0:b7:56:63:
18:1f:a3:b3:1d:b5:58:12:c7:00:75:be:35:5e:e4:
95:9c:ec:19:ea:27:3a:5c:da:a5:97:49:af:8c:39:
8a:50:26:17:e1:f6:e6:14:30:e4:2f:f2:04:0b:c1:
6b:c7:22:69:77:df:83:e0:ac:86:b9:4e:8c:e6:fc:
b9:7b:cd:6c:68:e2:85:53:60:ef:ac:33:04:bb:2b:
ff:86:b3:1f:bb:3c:4d:29:78:f2:2c:fc:29:09:ee:
b1:81:f0:a5:f6:59:02:21:b7:8c:ee:2a:e2:fd:0c:
aa:6f:5d:a6:20:00:6e:cb:11:45:4a:c5:05:cb:de:
9b:28:99:5e:b3:e2:d7:14:55:87:1d:ae:68:c4:aa:
e9:da:15:5c:27:55:d3:0f:56:bd:4e:75:73:e3:90:
d3:24:3f:67:a5:92:f2:65:9f:10:b0:ff:52:8c:5c:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CB:C8:0D:31:D4:64:92:77:99:66:82:5C:DF:D7:A3:29:F8:B7:8A
X509v3 Authority Key Identifier:
keyid:E3:BD:C9:FD:7F:52:E1:E7:5E:B7:ED:E6:E2:5A:D0:78:FB:90:BF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/473J_X9S4edet-3m4lrQePuQv7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/5cvIDTHUZJJ3mWaCXN_Xoyn4t4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/473J_X9S4edet-3m4lrQePuQv7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.102.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:aa:f7:b1:e1:76:59:1c:67:f2:b3:10:48:7a:10:22:99:29:
51:83:71:83:60:32:bf:3b:c8:a5:76:63:ce:94:ca:01:31:a7:
46:18:7f:bb:a1:00:de:8a:0b:45:e6:b2:08:10:83:eb:b7:76:
93:f6:a8:d6:a2:7b:43:0f:50:58:8f:fd:de:9d:c6:9b:8c:17:
f3:32:f5:b7:13:a7:cc:8c:eb:e1:f3:99:51:2d:bd:d9:71:6e:
f9:51:be:db:b0:b8:80:24:40:f4:da:9d:51:e9:a6:41:ff:57:
fd:2b:7d:80:cd:8b:2b:4f:dd:f5:e7:78:c0:74:ce:11:93:78:
3c:15:63:f2:a0:fb:55:49:98:4a:20:25:eb:2a:6f:25:0f:9b:
1b:0d:31:c6:8c:f9:6b:80:af:03:e7:45:97:96:d7:61:5c:60:
05:97:f2:f8:06:13:44:4e:c3:09:7c:6e:d7:49:5a:89:e4:57:
06:58:ca:b7:d0:80:ca:97:f7:b9:02:96:d6:34:36:3c:94:03:
86:5b:9a:f7:34:44:72:be:4b:63:18:63:d4:de:5c:39:9c:85:
a8:ce:17:1a:81:df:0d:70:60:db:7c:76:eb:97:16:fc:77:33:
34:d9:a2:e4:4e:80:10:c8:3a:f0:26:07:ed:99:3d:53:6d:65:
ee:84:f3:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYllSo8Mdv+QVQBBesJHR0zFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmRjOWZkN2Y1MmUxZTc1ZWI3ZWRlNmUyNWFkMDc4ZmI5
MGJmYjQwHhcNMjMwNzE3MTkxODUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWNiYzgwZDMxZDQ2NDkyNzc5OTY2ODI1Y2RmZDdhMzI5ZjhiNzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2r9aRNE45VrFyY1tYWHojuXno1y
qjJel0YVr4RkATfc3H/qRuPxGzuLryJuKiMtNsP8keZvAWa+Ujy7lFTTc+scHinu
CuqopIJN7mcaNt3u/JTqWdC3VmMYH6OzHbVYEscAdb41XuSVnOwZ6ic6XNqll0mv
jDmKUCYX4fbmFDDkL/IEC8FrxyJpd9+D4KyGuU6M5vy5e81saOKFU2DvrDMEuyv/
hrMfuzxNKXjyLPwpCe6xgfCl9lkCIbeM7iri/Qyqb12mIABuyxFFSsUFy96bKJle
s+LXFFWHHa5oxKrp2hVcJ1XTD1a9TnVz45DTJD9npZLyZZ8QsP9SjFygyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOXLyA0x1GSSd5lmglzf16Mp+LeKMB8GA1UdIwQY
MBaAFOO9yf1/UuHnXrft5uJa0Hj7kL+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDczSl9YOVM0ZWRldC0zbTRsclFlUHVRdjdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lZTFmOGUtMmY1Yy00ZDdjLWE3ZDEt
MWQ4ZWFkNmUxMDczLzEvNWN2SURUSFVaSkozbVdhQ1hOX1hveW40dDRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9lZTFmOGUtMmY1Yy00ZDdjLWE3ZDEtMWQ4ZWFkNmUxMDcz
LzEvNDczSl9YOVM0ZWRldC0zbTRsclFlUHVRdjdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH5mMA0G
CSqGSIb3DQEBCwUAA4IBAQCNqvex4XZZHGfysxBIehAimSlRg3GDYDK/O8ildmPO
lMoBMadGGH+7oQDeigtF5rIIEIPrt3aT9qjWontDD1BYj/3encabjBfzMvW3E6fM
jOvh85lRLb3ZcW75Ub7bsLiAJED02p1R6aZB/1f9K32AzYsrT93153jAdM4Rk3g8
FWPyoPtVSZhKICXrKm8lD5sbDTHGjPlrgK8D50WXltdhXGAFl/L4BhNETsMJfG7X
SVqJ5FcGWMq30IDKl/e5ApbWNDY8lAOGW5r3NERyvktjGGPU3lw5nIWozhcagd8N
cGDbfHbrlxb8dzM02aLkToAQyDrwJgftmT1TbWXuhPOk
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:41 2025 by rpki-client